Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: yppRSGDz9j3BS/5HhyzP5RSngRXQU7FMTvPjuMQ0aPM=
Subject key identifier: F0:4F:CD:EE:5E:6F:83:04:54:B1:BB:BF:7C:40:EB:09:8C:AC:4B:2F
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0196C04B30DC4C149A2EF9CFE95D60E9EED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0B08
Signing time: Sun 11 May 2025 17:01:15 +0000
Manifest this update: Sun 11 May 2025 17:01:15 +0000
Manifest next update: Mon 12 May 2025 17:01:15 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: sAjcetJBeqmfz1iIH0o6m/4qmt1npGhVIzLJy3G8AKA=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:30:dc:4c:14:9a:2e:f9:cf:e9:5d:60:e9:ee:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: May 11 17:01:15 2025 GMT
Not After : May 12 17:01:15 2025 GMT
Subject: CN=f04fcdee5e6f830454b1bbbf7c40eb098cac4b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:24:fe:de:7f:32:94:2a:5d:62:cf:40:58:
fd:20:6e:16:ec:f5:61:34:fa:e4:90:d8:9e:da:ea:
70:ba:bb:af:60:2f:2d:31:e7:98:8a:28:91:8c:19:
c9:3a:28:7c:16:db:bb:fc:a6:7d:7f:8d:da:d9:6f:
8f:d8:b1:94:a0:c0:83:7f:6d:cb:60:14:a6:7d:89:
ea:10:6f:bc:d9:47:e6:33:77:a6:cb:dd:36:83:8d:
98:c9:bf:e9:ee:39:71:4f:51:5d:67:4a:cb:ed:77:
25:5b:4b:4d:56:c6:28:c9:12:8d:76:af:9c:e5:b9:
33:dc:c2:fc:d0:e6:d2:b9:d9:bf:9f:da:d0:55:23:
d1:0a:81:c7:bf:7a:4f:78:d3:23:f2:72:bf:b3:33:
2a:bd:17:fe:8f:6c:ec:0e:83:43:54:8e:66:64:0c:
aa:76:e5:14:7a:b9:7d:d7:4a:7e:36:8c:df:b0:77:
a4:0f:9e:2a:3e:65:2d:8a:88:9d:f4:40:0a:0e:72:
82:2e:e1:66:81:bb:b4:ee:ee:20:fa:af:f8:f5:84:
4a:55:f8:44:7e:38:db:2b:de:ef:9f:6d:4b:25:e1:
a3:97:be:53:ab:0f:a3:95:fd:56:34:75:2a:39:29:
3c:4b:e5:7a:10:c2:b5:51:4e:15:3b:bb:03:46:07:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:CD:EE:5E:6F:83:04:54:B1:BB:BF:7C:40:EB:09:8C:AC:4B:2F
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bd:17:9c:dc:44:60:d9:cd:47:fb:06:8c:d5:77:8f:fa:83:
2c:d1:dc:d7:dc:26:b5:1f:29:64:46:7f:87:fa:61:ea:3d:b0:
de:b8:bb:1c:b0:53:08:6e:51:c2:6d:7c:fd:9e:b6:0f:e2:39:
57:96:77:b4:f6:cf:ce:35:ec:69:ac:6f:3c:8f:98:1e:3c:7b:
d9:27:1a:f7:ce:28:bf:9f:49:73:3c:26:86:54:3b:e6:52:1a:
ee:e2:28:1e:a7:7c:c5:01:dd:9d:2f:f8:75:92:fd:26:7e:3a:
ae:35:87:00:f8:a4:61:72:1c:02:df:78:7c:b5:fc:4f:d3:47:
91:dc:06:d3:db:79:3d:96:66:52:b8:7d:20:cd:20:47:3f:27:
03:ad:16:5e:1a:74:93:c2:f6:0a:fd:bb:68:f4:d8:4b:30:9a:
98:c2:c2:55:6c:27:b5:91:da:e5:5a:47:ed:b4:5b:25:40:de:
d3:e9:b7:cc:c4:18:67:52:d0:c8:d3:1b:c1:4e:d3:6f:e4:b7:
dd:ea:14:18:75:23:b9:b4:19:66:e3:7a:57:d1:1e:be:0a:84:
dd:1d:59:35:9f:4a:88:9c:28:eb:a3:08:a6:0a:fc:2e:3c:fa:
45:6e:50:3b:67:16:16:b4:aa:dc:a6:db:7b:79:5b:9f:ad:2d:
90:57:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:28:36 2025 by rpki-client