Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: 8nZA5VDkXc1NsnLKYJp7q0otbNLwjVk5sBUlq1nXJdc=
Subject key identifier: 46:B8:34:C9:02:3A:5D:F9:CE:20:BE:F4:E4:85:BD:58:F1:16:E9:68
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 0197B70E626DA2CD6CFE3CE5B41224D61812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 0583
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: 1VyE2q70cjmKHU0wLxL10fUFsjlXUolUAVikVOCjDWw=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:62:6d:a2:cd:6c:fe:3c:e5:b4:12:24:d6:18:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=46b834c9023a5df9ce20bef4e485bd58f116e968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:75:36:20:1e:be:9d:86:33:98:e6:9b:48:
f1:4c:39:f1:ab:6f:2a:c6:d4:c6:e1:55:99:de:f6:
74:ad:4d:89:bd:86:03:01:49:53:d3:fd:16:cb:dd:
f2:d4:69:aa:15:a3:f8:41:b6:8f:00:a1:93:2e:a0:
9f:a3:92:6d:d3:93:68:82:5c:04:7c:64:4f:31:15:
81:86:e3:10:88:66:84:1d:f0:70:52:09:00:47:b0:
5f:7d:3f:f4:56:7b:d0:fa:05:5f:aa:bc:9e:c6:5a:
4d:06:36:68:11:10:0c:f5:04:be:f9:12:e6:d6:4a:
0f:58:6c:0b:80:97:dd:9b:6e:d2:00:c8:93:90:58:
74:1b:77:63:dc:bb:bc:fb:81:07:19:25:fd:b0:4b:
de:a4:4d:f2:e1:f0:e0:89:42:cd:bf:b3:ec:88:1d:
7b:3e:f1:49:ac:93:d8:14:da:1a:38:4e:fa:8e:b4:
63:d5:87:ed:bb:31:07:16:99:bf:2c:e6:8e:45:1b:
f1:a2:54:4f:4e:ee:b1:c7:87:d8:1a:5c:d4:66:eb:
a0:ed:9e:ba:1b:a4:61:c7:df:01:67:51:cc:2a:bb:
22:7c:2e:14:a7:46:24:d0:4a:be:6f:29:44:1a:fb:
16:cc:63:2f:1e:45:b8:b1:56:00:b8:29:0c:83:3b:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:34:C9:02:3A:5D:F9:CE:20:BE:F4:E4:85:BD:58:F1:16:E9:68
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:35:93:38:17:59:fc:71:50:ee:60:15:a7:27:a2:62:a4:49:
83:bd:ae:f6:1d:88:54:b7:28:4b:7b:d1:90:a0:f4:07:c3:b9:
33:5e:96:97:3a:cd:2a:3c:69:ba:0d:c9:9d:fa:a2:c6:95:88:
cc:d2:5f:e3:28:a9:07:3b:bf:c8:8f:64:ea:5a:69:88:06:21:
c6:62:7f:44:b9:98:cb:16:07:57:77:97:c7:b6:53:bb:75:d5:
f6:20:89:5d:46:7c:c3:e9:51:d0:2a:75:4c:b7:33:03:94:38:
51:3a:ca:24:49:8f:e6:38:16:9d:c4:6a:e4:2e:b0:25:b4:b2:
0d:ea:1d:eb:29:3c:5f:e2:6f:78:fa:c6:67:2c:54:20:91:67:
75:55:9f:91:59:27:66:ec:af:bb:32:d7:be:1a:5e:00:b3:34:
6e:3d:03:83:d9:ab:e9:1e:05:41:17:24:d0:c8:fb:74:e8:68:
96:4c:28:70:37:c5:b3:82:24:23:5f:93:2d:dd:aa:29:ed:de:
71:25:dd:22:fa:30:7c:43:90:3d:5d:de:95:c1:3f:b5:13:84:
2a:ab:01:1c:be:cc:e5:99:fd:9b:68:d2:cf:d9:f2:ca:11:12:
0d:dc:a3:33:e1:bb:f9:14:d2:60:7c:54:d9:e8:4c:1f:59:c5:
7a:e5:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:08 2025 by rpki-client