Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: Zg2Qdaf8YpdSeSJBIudNloxQY2tXa3GiMpJuZvTUpKc=
Subject key identifier: 58:93:D9:B4:4C:4B:A0:23:26:47:FA:9E:7A:76:D1:E6:94:89:D2:0F
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 0197B70E80FDDDA635B092F8873C0A2A77F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: 7KxjM4qPHFW0uuviQc1+Wy0StLzHuPZ76DJqazdOdwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:80:fd:dd:a6:35:b0:92:f8:87:3c:0a:2a:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=5893d9b44c4ba0232647fa9e7a76d1e69489d20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:77:19:a3:99:bb:fd:fe:d6:f3:28:df:71:
a8:30:a2:39:5d:17:71:67:0d:44:c5:c7:c5:6f:f3:
38:ae:b5:3f:b5:9c:33:6e:4b:f2:96:43:99:26:9e:
7f:40:62:22:b1:e7:2a:3c:d1:b9:4f:cd:96:91:e1:
ff:6b:84:2d:4e:32:03:5d:bc:f2:23:29:6b:89:39:
fb:7f:ad:91:4a:9e:a1:2b:d5:49:b7:1e:aa:d8:a5:
02:40:09:a8:05:46:65:67:08:59:27:27:47:d1:d5:
df:b5:6b:b0:a9:59:7f:12:19:d3:12:23:96:5e:8f:
95:21:e6:38:0c:e0:9a:4d:bd:22:06:7f:ba:b3:53:
e2:e7:8d:be:1f:0c:65:e2:01:82:1c:ce:f0:6b:15:
33:e1:89:de:ff:a7:5f:99:14:15:52:fb:70:d6:41:
d9:c0:a2:e0:45:c1:c5:83:73:30:26:bd:da:2c:b5:
9b:bc:75:9c:4e:c3:10:f4:b9:25:3c:58:a9:e7:25:
f8:55:a6:87:32:ea:2e:95:b1:de:6e:8d:3d:0c:7c:
d8:eb:15:9d:2c:f4:9e:97:dd:d4:13:b3:69:19:5b:
e2:85:ca:c5:9a:13:39:58:f6:a4:05:a4:ed:5e:e2:
53:38:42:ec:97:71:15:1c:da:bb:ba:27:8a:e9:4b:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:D9:B4:4C:4B:A0:23:26:47:FA:9E:7A:76:D1:E6:94:89:D2:0F
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:51:46:c3:d4:c2:4c:55:dd:bb:fd:e7:94:d8:15:ee:88:
42:2a:e5:df:db:0d:b5:f2:f1:06:1e:16:30:2a:25:b3:80:60:
5c:ab:12:ef:e7:90:1c:88:78:27:90:36:c3:58:fa:ec:b5:5b:
af:d8:3b:c1:8e:98:87:84:c9:1f:0a:27:73:ff:4e:02:f7:d8:
f9:80:33:74:9d:e5:b0:cd:a1:65:98:97:cd:ff:19:0c:72:43:
6d:2d:f2:56:2a:25:ff:7a:a7:45:a4:39:c4:30:29:0d:ac:55:
cf:3d:8b:b9:fb:c2:06:c1:e2:86:c4:25:fa:a8:c9:02:23:a2:
de:5b:94:85:e3:a8:50:a1:dd:c0:68:8b:a9:be:1b:4d:2b:cb:
0a:d2:bc:48:e6:2d:e9:da:4e:9c:1c:d6:42:b6:53:6e:ae:d0:
c2:33:fe:48:4d:24:bc:df:41:a6:05:c9:ad:cd:eb:88:f8:cf:
78:eb:24:65:18:c7:8c:40:ff:60:4f:08:42:24:09:0a:7f:0c:
b0:76:b4:ce:dd:2f:91:4a:6f:64:6a:45:7a:60:3b:43:2d:0a:
a2:45:16:2c:b9:c8:bd:96:ca:dc:07:90:7b:ea:de:95:c4:bb:
3d:b3:87:e9:bf:1a:f1:ff:d8:50:b9:84:8d:93:c3:69:bb:60:
e3:8d:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:11 2025 by rpki-client