Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: bxOE1Rkc2CkJpvNhFtwzA5rFnJEKPFKHdDycA2SEEME=
Subject key identifier: E1:E7:E1:D6:18:DC:05:7B:92:E2:85:A6:4B:15:C6:C1:23:CB:D0:A6
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0197B77CDBEF58BF54E0039A88BA8D98809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0B88
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: w19065Gr2JUYjO1C7h1TxYmU2IFk3JmvgqaZ3nNpk80=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:db:ef:58:bf:54:e0:03:9a:88:ba:8d:98:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=e1e7e1d618dc057b92e285a64b15c6c123cbd0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:ec:5e:cf:f3:43:d9:27:3d:72:97:df:12:
bd:c2:01:68:8d:22:99:e0:ca:94:bc:56:a3:31:4d:
9c:ef:61:55:ca:d8:eb:7f:cd:cd:d0:9a:4b:86:5c:
31:a1:d2:f3:57:a7:ae:0a:81:0e:e3:f4:94:5f:75:
2f:d0:18:64:63:bd:76:fa:23:26:7f:03:79:9a:25:
5f:85:65:c7:f8:12:06:4f:7b:90:a3:92:23:78:72:
f5:ac:fb:64:03:eb:38:c2:5c:9a:17:c4:4f:81:f1:
15:4c:70:00:0e:be:7b:13:db:b5:0c:22:85:a9:56:
33:37:bc:8e:72:17:48:bc:80:a2:aa:4e:76:4c:b2:
19:e5:7f:85:82:aa:d6:29:4d:24:18:33:01:07:18:
56:0f:6f:1b:5c:b6:1a:d3:cd:20:f1:27:c3:f1:25:
98:52:6e:b5:19:0d:b7:0e:eb:e4:be:72:2a:bd:3b:
c8:4e:7d:10:47:a9:62:5d:a7:07:c2:55:51:b4:4c:
43:c4:28:89:30:2b:05:6a:d0:73:f4:f7:a5:f6:5b:
9d:59:96:96:5d:3e:ce:e9:61:e7:8d:7d:30:74:29:
4c:21:45:0d:3e:9c:ed:d9:3e:a3:6e:f4:9e:05:dc:
88:58:d5:e9:ac:20:de:0a:ca:ac:cb:67:d8:16:8c:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E7:E1:D6:18:DC:05:7B:92:E2:85:A6:4B:15:C6:C1:23:CB:D0:A6
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:52:50:b7:b6:0f:4a:4a:22:ef:c1:68:6a:e7:81:3b:22:5f:
ea:8a:61:8d:5f:0c:c5:ad:66:3a:ed:9d:a7:00:f9:db:b1:a7:
a9:05:1d:e6:e1:7b:64:d7:8f:48:96:de:4e:44:b0:6c:76:f6:
a2:ec:38:06:48:19:01:4c:66:b4:40:a3:57:76:28:f9:30:c6:
be:b0:db:cd:42:8c:5d:a2:42:7f:a4:82:32:ae:de:70:2e:1c:
12:6f:34:68:2b:fe:bf:1b:81:11:6e:96:5c:b7:62:2b:44:42:
85:da:8e:c6:c0:f5:b4:56:d0:b2:3c:15:1f:10:ca:f7:94:c8:
1a:44:38:d5:f2:d0:d8:ef:28:b0:27:61:14:9c:13:8c:61:39:
90:54:bb:fd:34:85:c1:75:52:bb:69:ec:ba:dd:c3:1e:d0:55:
06:52:49:77:47:05:f3:2b:97:b0:85:79:1a:0a:5f:a4:83:59:
cd:42:a9:ac:43:4d:88:d7:26:77:43:e1:1a:5d:71:e0:0f:5e:
c4:05:cf:4d:ec:9a:72:d0:bd:59:62:bc:07:63:b8:cd:45:83:
08:19:2c:f0:5e:7b:2f:26:ce:7d:88:ec:f3:5d:a7:4c:b9:7e:
1f:95:1d:47:79:4e:b2:ed:41:2a:6a:0d:e7:ec:67:f1:03:35:
8b:a5:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:48 2025 by rpki-client