Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: Yg8ktYjmzFgxKtgjUcP2NqZqdk2AOvoqQtUwHsmkmjc=
Subject key identifier: 73:95:56:8E:FC:F8:1A:0C:17:4E:B9:A8:7C:46:A9:E2:03:15:EF:2A
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 0196B9DAA8EE960D37B374B214BC579F06DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 11:00:37 +0000
Manifest this update: Sat 10 May 2025 11:00:37 +0000
Manifest next update: Sun 11 May 2025 11:00:37 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: Nal5TexsUb2UFd7wxIdDfqVpDfYtdzdzOe2ua/F1NYY=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:a8:ee:96:0d:37:b3:74:b2:14:bc:57:9f:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: May 10 11:00:37 2025 GMT
Not After : May 11 11:00:37 2025 GMT
Subject: CN=7395568efcf81a0c174eb9a87c46a9e20315ef2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:1d:c5:ae:9a:5b:69:07:d4:d1:d7:b2:1a:
3a:c5:d7:85:64:20:8e:43:88:da:ab:5a:43:1a:d9:
e6:0e:1c:43:33:bd:c3:c6:8c:32:ff:14:ee:60:ec:
32:37:76:97:f4:af:03:56:88:d1:87:07:bf:9f:2f:
e8:27:9f:f0:02:2a:90:75:a4:77:c4:ea:29:49:60:
74:c3:58:2a:27:71:58:46:32:e7:45:93:a0:af:7a:
60:ec:c0:a6:35:e6:1d:c3:d4:8a:a3:da:95:e1:3a:
58:2b:e6:f8:c5:cf:a9:7d:2d:6d:4d:5b:6b:ef:e9:
22:85:a2:3b:11:04:a1:ec:e1:e2:bd:44:e1:c0:b3:
64:c1:25:04:36:c2:48:9e:4d:31:fc:34:3c:d3:c2:
35:67:8d:c9:94:98:2b:6a:86:c1:2b:86:9f:35:46:
42:b6:35:da:da:29:e2:d8:1d:9c:29:4a:9f:db:f6:
39:cb:52:07:da:e2:71:72:6a:fb:cb:26:6c:96:d2:
96:a4:62:59:ad:b9:9e:1b:9e:4c:5e:ce:b3:20:c4:
e1:ba:37:e5:0c:9e:84:33:48:89:89:18:31:86:d2:
b9:90:d5:ee:3e:38:ee:a2:e7:53:d3:14:22:8c:2f:
36:76:83:e3:41:6a:b0:d4:13:f0:57:cc:30:23:e7:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:56:8E:FC:F8:1A:0C:17:4E:B9:A8:7C:46:A9:E2:03:15:EF:2A
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c8:3d:14:db:59:c2:65:fc:7f:6a:7f:49:62:0a:e2:d1:d0:
86:52:6e:9f:4c:f4:ad:af:ee:19:06:f8:c6:f5:10:1d:f8:a5:
47:d8:6c:0b:7f:4f:2f:22:7c:6d:cc:88:09:6d:59:36:4c:35:
c3:bf:7f:a0:4f:68:05:c6:f9:54:69:cf:53:84:3b:d8:63:6f:
9d:36:f0:5d:82:48:92:2c:b5:92:81:18:f1:2a:52:95:41:a1:
53:b9:91:4c:f5:73:f3:fb:37:89:6c:86:d9:5f:de:e2:6e:d9:
e4:1d:b6:fb:fe:9c:59:bc:e6:a5:16:37:0d:9f:b7:b5:b1:1e:
ba:6a:c0:24:f9:d0:52:83:7f:cd:94:a4:62:5f:0c:58:f9:3e:
69:29:ae:ea:27:6e:7d:14:78:a2:1b:7f:19:61:62:19:41:a3:
22:09:69:5e:40:bc:06:5d:a0:73:bd:da:7e:24:7c:bc:59:9c:
76:e0:1e:f1:61:1d:c1:fd:64:eb:aa:44:5e:56:7d:aa:06:0b:
46:a9:63:85:a9:9f:d4:7c:11:49:36:f9:a6:c5:d3:b1:c8:5f:
1d:c4:57:0a:be:fd:73:a7:7f:01:5c:85:9e:0b:15:c1:56:fa:
d5:39:cb:d5:23:1d:b6:13:36:8e:3a:86:56:22:71:a6:71:78:
f6:d4:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:29:35 2025 by rpki-client