Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: m5Q/yLgCLu4APQCtPc171irgFKwfctFOINmWlwFrRg8=
Subject key identifier: 02:0B:F0:0C:CC:DF:81:CD:45:81:2D:DA:74:8A:E6:AD:A5:F9:0F:C6
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 0197B88FCEBA921BCBAF738D714ABDC876B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:02:01 +0000
Manifest this update: Sat 28 Jun 2025 22:02:01 +0000
Manifest next update: Sun 29 Jun 2025 22:02:01 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: RWJ5fvzL5wi2ibi0IxLNUxHhlvDHJ34vsOmcibWGP+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ce:ba:92:1b:cb:af:73:8d:71:4a:bd:c8:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Jun 28 22:02:01 2025 GMT
Not After : Jun 29 22:02:01 2025 GMT
Subject: CN=020bf00cccdf81cd45812dda748ae6ada5f90fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:c2:48:d1:e2:c8:1a:65:a0:bb:a4:43:29:
1c:1d:c4:49:9f:4a:bd:68:20:2d:03:d0:2e:46:ee:
51:b9:d5:3c:ff:d3:01:c8:55:e8:77:e2:a5:e0:6f:
15:63:7b:42:e0:89:bd:7e:2f:77:16:f6:29:f3:d6:
01:c2:f7:00:45:c1:45:69:52:a8:fb:53:28:f8:35:
7a:3c:d1:48:ab:61:49:b1:9c:0f:e9:4c:8e:72:00:
6b:43:7e:3d:3d:7a:f9:ca:f3:77:0c:a8:a0:47:8a:
b9:29:8c:47:0c:cf:9f:db:86:da:fb:2a:ac:ca:84:
37:08:66:33:5b:ea:56:4f:fd:37:45:41:85:c8:70:
8a:f1:58:d9:59:52:f1:27:19:59:a0:63:48:9a:f9:
dd:30:e2:82:8d:a2:68:6e:9d:e1:b1:c1:c9:00:df:
44:cb:e2:12:e8:2f:e1:89:4b:8b:a6:af:82:07:1a:
89:bb:e9:6f:b8:31:1e:6d:a8:c0:72:5c:a1:3d:5a:
bb:6f:8b:bc:4a:77:56:37:79:b4:35:71:86:e6:ea:
7a:07:96:52:61:49:af:de:de:d8:42:a8:af:f9:e4:
db:95:82:06:bd:71:03:28:47:93:60:97:de:1c:31:
fe:b7:ea:a7:a2:ec:e9:fb:2d:65:94:84:7f:7d:f3:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:F0:0C:CC:DF:81:CD:45:81:2D:DA:74:8A:E6:AD:A5:F9:0F:C6
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:53:74:1e:11:0f:75:cb:51:f9:a3:cd:17:6d:1a:2e:57:c4:
b4:8b:44:ef:b2:24:0b:e5:74:ac:e7:eb:0d:48:c0:76:04:74:
a7:bc:fb:05:bd:33:75:34:af:b3:72:b5:44:fe:4d:89:ff:58:
f5:01:a1:f8:a0:11:85:b9:a8:cb:ce:cf:db:da:36:55:25:a9:
31:eb:5e:a8:e5:62:b6:4d:3b:05:d5:46:f9:15:41:6f:ef:c8:
ff:d1:a8:88:e1:81:7c:29:06:82:43:98:06:7a:72:f4:fa:23:
7b:f0:44:37:93:1b:20:32:8f:70:e8:c2:87:e0:16:2b:d7:cf:
4d:22:f0:c0:36:1f:a9:5f:19:b8:73:89:43:b9:36:ef:65:ad:
e5:2a:ea:2f:b4:dd:38:e4:19:d5:48:c0:81:46:11:3a:4e:34:
e5:78:46:09:71:8a:54:63:81:76:c7:b7:7b:8e:61:03:25:3c:
a2:1e:cd:21:91:34:98:17:4b:6d:20:e2:29:c3:89:b8:a0:98:
34:fe:b8:f1:86:a1:dd:0b:fd:08:ca:7b:aa:7b:45:ea:f6:b7:
a4:4f:da:04:ce:35:11:ae:59:ab:fa:9e:de:bd:2a:cc:89:7d:
ca:75:ec:aa:c0:a8:2a:57:97:de:74:df:01:00:f1:89:1f:06:
e2:29:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:08 2025 by rpki-client