Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File: L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier: HDecTiINfpm7p9kvqv2xSrNUa31f/3iL3uE3kFnE0Kc=
Subject key identifier: 4B:28:5B:9A:A7:20:22:A4:B8:D4:CF:E3:C8:04:66:83:D6:86:AE:1F
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 0197B8C5B3F6B6D42B234E070219232CEB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number: 0FCB
Signing time: Sat 28 Jun 2025 23:00:53 +0000
Manifest this update: Sat 28 Jun 2025 23:00:53 +0000
Manifest next update: Sun 29 Jun 2025 23:00:53 +0000
Files and hashes: 1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: XFCjDCstubrRGa9X6OF2ktWyjnA1QKt8W5yaPIBBgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:b3:f6:b6:d4:2b:23:4e:07:02:19:23:2c:eb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Jun 28 23:00:53 2025 GMT
Not After : Jun 29 23:00:53 2025 GMT
Subject: CN=4b285b9aa72022a4b8d4cfe3c8046683d686ae1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:37:9f:99:17:1e:30:b3:7b:9d:55:0e:81:
2d:90:4d:24:c6:6e:de:5b:74:6f:db:82:97:dc:78:
4c:a6:3f:12:0d:6f:83:b4:e1:de:14:93:cb:64:2a:
d8:40:1b:92:eb:3c:d6:e3:82:72:e9:83:fa:ea:c5:
6b:eb:9e:7d:8d:00:75:cd:ce:f7:08:2b:4e:06:a9:
4b:42:c6:01:5a:ab:26:72:6c:2f:f4:94:6f:ba:19:
9d:8f:86:a9:50:68:62:46:9a:a3:15:c0:44:12:f9:
e0:4e:25:38:a1:87:4b:c2:ca:b4:9d:b2:fb:2d:44:
a2:38:c0:47:73:42:27:41:d5:0a:70:90:c2:5f:dd:
f4:14:0f:00:fb:86:32:1c:d1:42:59:08:04:2a:ba:
29:f6:d1:65:60:3d:48:1e:48:7c:cd:35:1b:cd:0c:
64:be:92:ac:3a:d0:3b:82:b0:47:a5:95:fe:81:b9:
fa:ac:02:87:da:95:33:a4:7d:b4:68:92:4c:09:ab:
6d:71:f6:14:bf:b6:48:a3:f2:88:ba:4d:40:3a:06:
f5:30:4c:1a:5e:d4:b0:1c:7c:39:1c:9c:15:4f:41:
ab:95:67:c3:f1:f1:ab:b1:7b:b1:97:a4:60:53:a0:
cb:0b:33:7d:94:7a:6f:22:28:33:9c:8b:60:bc:ed:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:28:5B:9A:A7:20:22:A4:B8:D4:CF:E3:C8:04:66:83:D6:86:AE:1F
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:46:1b:4e:65:f4:b0:e5:59:66:30:78:ff:6b:df:1d:db:6d:
ee:87:20:a5:a3:7e:f6:90:08:10:46:c6:53:d3:62:73:9f:02:
4e:93:72:a3:9c:20:f5:d9:cd:b2:3c:85:72:da:e5:fa:f4:96:
c1:66:73:d6:e9:55:99:04:83:1d:4a:0a:91:2f:17:8d:ad:60:
4b:89:b8:27:e0:6b:46:39:dd:ce:6b:9b:ea:ed:1a:62:91:71:
32:0e:d8:1b:ba:c3:c7:0e:87:6e:67:7a:a0:55:f9:44:9f:b5:
b3:6a:98:e9:a2:26:67:70:df:e7:e7:f8:72:75:72:13:9f:00:
0b:6c:4e:20:70:a1:6b:b8:73:65:ad:40:8d:e8:67:49:79:cb:
a8:03:e5:2c:13:94:b5:3a:66:8a:78:42:37:c0:f5:9a:b3:4d:
29:e2:85:1a:cb:c2:2c:a7:aa:02:88:d2:d5:98:2c:06:07:4f:
f3:af:42:fb:7f:d1:73:da:17:be:7c:d5:1f:b5:ed:d8:73:8c:
d6:18:9a:3c:df:5d:c7:8f:ea:2a:6b:8f:72:52:c7:77:f7:4c:
0b:4b:2d:8b:bd:5b:ca:25:13:66:bb:68:14:64:8c:5f:1f:ed:
66:56:85:32:ba:df:22:88:be:ca:dc:19:c8:8f:0a:87:32:28:
cf:fc:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:12 2025 by rpki-client