Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: a9v6mDIJBx8bibHPxSmFBFuB6ks8/e6nsTjk/x8TjRg=
Subject key identifier: 95:D0:74:2B:B9:E0:82:B7:4A:41:F9:E1:DD:B1:E3:E8:5D:D5:15:FC
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 0197B77CC32AF6B90C0D0FE9F880E6A8CC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0CEF
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: XymwkXtOCUFHWM1o3pPfBNpFiDLgSHXM5X9HUp/sz/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c3:2a:f6:b9:0c:0d:0f:e9:f8:80:e6:a8:cc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=95d0742bb9e082b74a41f9e1ddb1e3e85dd515fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:52:0e:7a:5a:f2:fe:f6:d6:cb:34:aa:0b:
26:43:74:c5:3d:a6:e6:40:f6:b6:ec:07:cc:77:03:
2a:f0:98:cb:d9:c9:04:83:88:b1:12:04:8e:09:ee:
26:60:60:c7:97:c7:57:13:49:3e:4f:5a:ec:13:cc:
80:92:e8:0d:df:1e:7d:63:af:57:82:3b:89:44:a1:
bd:5a:5a:40:7f:07:5e:77:5b:4a:2c:0c:ae:ed:c5:
16:de:9c:15:a8:5b:49:85:b9:48:b0:8a:d6:07:b9:
a3:66:16:f4:b6:92:40:aa:4c:a4:fc:d0:61:b9:fb:
9e:6f:99:41:b6:b9:2a:9f:f2:bd:34:57:9b:79:54:
bc:98:ef:11:89:64:49:f7:3d:cd:bf:55:a4:de:f2:
ef:12:03:e7:4c:c3:8a:2e:1e:39:d6:fe:e7:be:24:
17:df:34:df:65:3d:0e:6d:13:10:a4:1a:f1:06:1a:
81:4f:ef:e9:89:31:d1:d0:2a:52:a3:b1:3b:e8:d0:
6a:7c:94:b4:76:9c:eb:55:cc:63:89:f1:f6:ff:73:
51:66:dc:88:9a:96:34:44:11:85:b8:c8:eb:d9:29:
cc:fc:32:c8:33:7e:85:b3:07:60:49:ea:76:7d:08:
53:c7:b5:74:58:eb:74:bb:b6:e2:05:15:0c:f1:45:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:74:2B:B9:E0:82:B7:4A:41:F9:E1:DD:B1:E3:E8:5D:D5:15:FC
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:4c:6d:16:0a:0b:36:01:30:b6:fc:e5:ce:e1:4b:1f:6f:
a9:4d:b0:85:8d:cc:93:58:54:cf:12:f7:5b:cd:11:39:12:8b:
f9:d0:ea:e0:cc:2b:1e:23:83:a6:56:1d:de:77:a2:aa:d3:62:
bc:0a:4d:64:c4:cb:a1:7d:73:5d:1e:ff:9a:6e:42:3c:97:65:
74:5b:8d:2f:d8:1d:b6:ff:8e:01:0e:f8:b4:1e:aa:f1:1a:97:
4e:ee:2e:49:c9:95:bf:7a:27:38:6e:ef:a2:27:2f:ac:80:71:
40:e5:f7:c7:20:e7:3a:3c:fc:95:2e:e8:5b:c7:4c:b0:18:e5:
8c:9d:17:e5:89:0d:2b:a6:d9:42:cb:9f:e8:40:3a:67:69:57:
b4:5f:29:66:9a:10:28:c2:af:12:db:10:90:32:f6:1b:b6:86:
42:5f:e6:78:b1:59:a6:ce:5c:f1:5e:ff:35:8d:31:b6:7b:16:
58:9a:32:58:7c:51:58:38:56:9f:4c:7d:5c:df:e1:48:d2:fb:
81:bc:e6:e6:83:e7:33:99:c4:a0:c1:7d:c5:97:74:e0:d0:a4:
72:97:d3:ee:9d:df:f8:37:fc:63:b7:91:77:8b:ba:b1:cb:e1:
a7:eb:53:51:e4:6d:d8:d6:e8:78:3a:6b:4c:58:31:ec:9b:1c:
aa:a6:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:26 2025 by rpki-client