Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: okpnKgX9FWu1TarvFshlkgOrLn65A9VKD//PJ6AipQs=
Subject key identifier: 2E:ED:EF:8B:A4:F3:69:14:91:DF:C7:4A:8D:D8:75:A6:1C:76:6B:D2
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 0197B6D78BE7BC5F944A1D54E85DFE020FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: GaIKNa3hGCbWLdQXCHzrbzdlrJxJxr+cQdvbv3N7ZFM=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8b:e7:bc:5f:94:4a:1d:54:e8:5d:fe:02:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=2eedef8ba4f3691491dfc74a8dd875a61c766bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:30:5e:7b:f3:41:7a:69:bb:05:05:5b:30:
4a:44:e6:dd:bd:1d:23:45:58:ad:ba:1e:e2:8c:fc:
f6:8b:60:d5:62:b7:2b:05:ae:a3:bf:7f:ea:5a:b2:
ae:f0:64:bd:61:80:ea:6d:73:b5:73:a9:85:88:7a:
ec:b4:d9:05:61:34:46:65:cd:75:1c:5b:77:84:3c:
97:95:7f:68:29:55:bf:28:8b:0b:dc:96:fc:4d:d6:
f7:c6:44:6f:6c:bf:4a:74:d0:41:42:50:fe:0d:67:
80:eb:c9:1d:71:7a:c1:74:23:1e:ba:76:7c:6a:43:
22:27:66:2d:be:5e:06:d8:04:8c:a7:4d:28:f0:8a:
e0:f7:06:ab:00:95:e0:ae:ab:75:c6:31:b6:53:f8:
32:3d:fb:e7:1b:71:8a:5e:3a:ac:50:42:cc:d5:33:
eb:33:36:20:0c:59:da:bc:8a:9e:ef:af:38:e9:7d:
4e:72:b2:3e:df:e4:a7:b8:d9:f6:7d:2c:54:00:a2:
2b:d6:b6:54:6c:c9:ae:6f:f6:ec:b9:c7:39:c8:74:
cd:b3:cd:a8:7d:d1:0d:da:9d:80:74:5b:a2:76:46:
8e:e9:fe:7b:09:90:61:61:97:52:25:3e:57:76:7c:
96:ae:76:83:4f:b7:1e:1f:cf:b1:3b:4a:63:21:88:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:ED:EF:8B:A4:F3:69:14:91:DF:C7:4A:8D:D8:75:A6:1C:76:6B:D2
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:15:a0:51:19:12:a5:03:de:32:43:f4:26:50:af:49:2d:
4f:6c:b0:73:88:e4:e3:05:66:3e:09:bf:16:cb:67:ef:a6:45:
47:40:32:b3:73:45:18:5d:a5:ae:99:e2:cb:9b:45:10:fa:e6:
18:96:07:b4:61:3a:29:ca:af:86:ca:b1:4b:4e:a3:c5:86:3e:
a4:54:01:2f:f7:2e:67:45:2c:d6:aa:71:db:87:89:2c:b0:3d:
4c:34:4b:f0:32:fa:87:72:cb:5a:0a:ec:dd:dc:8d:2e:f7:3e:
f0:f1:4f:c9:79:73:82:89:fc:b1:0a:79:47:c6:68:e2:5f:25:
14:e6:c4:47:34:c3:5e:99:cc:73:3d:4c:20:5a:b3:de:ad:ab:
d6:5b:63:7d:c8:20:42:72:66:a3:c7:1e:bf:97:ea:84:11:5d:
8a:3c:cc:e5:5e:5c:03:a9:4f:fc:3e:f7:97:6e:7e:af:38:40:
af:18:8d:61:b9:62:83:28:50:3a:68:12:9e:72:a6:fc:98:a9:
4d:2a:8f:50:62:d9:25:f2:55:8b:10:5e:54:2a:5b:89:c4:5f:
a1:6b:33:03:fb:0d:4e:76:82:69:62:35:d7:fc:28:e7:36:e7:
f5:0e:1a:76:6d:15:15:b6:09:eb:79:38:0c:68:26:f0:4e:c8:
b5:04:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:17 2025 by rpki-client