Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: IeAPYRUSjderiC+Jhr8/xzdeHytG7xhD8LQg8jnXeTk=
Subject key identifier: E5:74:0E:45:1A:15:64:09:75:14:65:F7:B4:AA:EE:D3:FD:FA:5B:AB
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 0197B7EA2E32D029C85491ADBAACD533E5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: MBe/KaGV++lTFdoNAOOiPcCPgWYW9WMxYwrqBaTOrk0=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2e:32:d0:29:c8:54:91:ad:ba:ac:d5:33:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=e5740e451a156409751465f7b4aaeed3fdfa5bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:42:98:28:2a:ac:d1:d0:f9:08:ce:62:c7:
1f:6b:85:2a:23:06:1f:dc:fc:06:87:e9:00:65:57:
4b:74:a0:a0:d8:21:5d:06:01:3e:76:7d:6e:af:b4:
09:46:13:42:d5:f7:d6:79:51:df:29:73:f7:ff:61:
3a:cd:3c:32:9a:6f:60:cb:79:69:53:b2:5e:62:47:
2e:fc:22:ae:bc:18:95:90:b6:cf:dc:aa:8d:91:7b:
d3:8c:6c:e3:60:ba:57:61:be:40:dc:e1:e1:d0:0b:
07:bb:d5:60:31:d8:60:4d:96:a1:d8:4b:90:a9:32:
9a:a5:48:8c:e3:55:1e:94:1e:ae:dd:41:3c:08:85:
60:8f:ea:26:d2:41:01:ee:8a:9b:12:be:e0:45:c4:
d9:56:92:28:29:53:cc:01:1a:7b:03:a0:06:8c:8f:
a0:bb:29:26:01:d5:f4:84:2d:d8:26:79:f3:b6:58:
1b:6f:c8:7f:29:34:d4:8e:4e:c5:6c:75:12:48:00:
f8:db:29:b6:27:2b:fd:3d:cd:a4:b2:4d:fc:c5:f2:
06:a4:7e:b6:94:80:33:a8:27:ef:03:dc:51:69:5c:
31:cc:52:57:22:84:a8:e1:5d:1f:e8:e6:b5:a6:fe:
37:dd:ae:73:d5:44:05:57:1a:5d:ee:02:85:d6:39:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:0E:45:1A:15:64:09:75:14:65:F7:B4:AA:EE:D3:FD:FA:5B:AB
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:44:a0:13:1d:cb:24:5e:d2:93:6d:a1:9f:45:d7:01:92:11:
ea:a0:13:b0:b9:99:56:e7:d0:60:c9:d2:5b:8d:54:68:90:d8:
f7:b9:5c:01:16:f2:6d:90:9e:ae:1d:76:46:63:42:49:a8:89:
9a:98:d6:06:aa:10:1a:87:01:fe:d1:81:2d:e4:52:3a:aa:39:
e3:86:e5:3e:cc:2c:f4:0e:a5:e9:7e:94:0a:52:94:a0:d0:b0:
a2:bd:13:16:6b:8f:7d:31:1c:1b:ed:b1:6c:0f:2e:27:cf:a5:
43:03:0e:d3:c6:0a:98:6c:56:0d:af:a3:e9:8f:cf:a4:f9:15:
55:2b:ef:ba:a1:19:c3:4f:1b:63:f9:29:f1:73:9f:39:b4:0c:
6c:03:63:63:4a:ff:0b:4f:ef:a3:d9:16:e4:2a:2b:96:57:37:
93:61:a1:e0:97:21:3a:c5:09:cf:98:4e:80:8d:67:16:cd:d0:
65:a1:ed:3f:0a:8e:f5:c6:87:a7:56:d4:f3:8f:2f:f1:46:52:
a9:43:0e:ac:4a:25:dc:c5:13:91:48:ef:94:53:4a:7e:de:25:
ec:c0:a0:1a:0c:aa:01:06:9b:35:1f:7c:c3:62:c0:9f:ea:0d:
39:dd:36:50:51:cf:55:53:44:19:39:0a:03:dd:1a:53:ae:6d:
6e:54:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:15 2025 by rpki-client