Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: xCOhhkqgO4Er9XqFH5V+EpCS0CFBoU+3jIwZ+YjNsTE=
Subject key identifier: 00:4B:ED:DC:35:5B:D9:D7:B9:85:15:41:9F:95:60:44:14:0B:67:DF
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 0197B77CB426FC09815C3B1511EFEBF5B756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 12F1
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: m/7p9YyJkVu/rlEm8sayhUVsp04V3d8qePGjDq+w1ec=)
2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b4:26:fc:09:81:5c:3b:15:11:ef:eb:f5:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=004beddc355bd9d7b98515419f956044140b67df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:0b:c0:93:b9:93:64:e6:22:41:88:53:e2:
1c:ce:d5:97:30:dc:e7:94:bb:87:b5:49:2f:f5:6b:
f9:c4:de:e9:a1:e5:0f:74:f6:c1:5a:ca:1e:c0:7c:
e7:0b:a2:d0:c2:4d:80:dc:7c:c5:9c:04:77:f6:65:
0f:cc:e4:5f:64:85:dd:6b:66:14:f8:8a:1e:e1:37:
3e:2d:a2:4a:be:c0:e9:0e:34:6f:6e:55:9e:51:35:
7b:c7:31:26:45:d7:17:fc:24:3a:30:11:f8:98:cc:
ad:11:63:f5:a2:20:b8:36:12:1c:6e:8f:2b:97:4e:
99:5a:43:56:c7:98:ca:dd:58:ff:cc:71:bf:49:eb:
c0:15:0f:53:bb:29:da:50:6d:86:2d:24:df:cd:54:
5c:f7:85:23:31:31:49:07:08:7e:a6:70:12:b5:cf:
3c:71:ab:14:3c:71:fb:8f:7d:6c:0d:f2:b7:1b:58:
1e:d9:81:69:70:47:4d:da:6e:fb:55:e8:96:93:6e:
11:6c:77:d3:2a:a8:55:94:31:3a:c5:95:78:db:d6:
03:27:29:24:7d:b6:0f:f3:cc:03:d3:15:ca:85:a2:
db:29:b0:f9:41:fc:89:2c:df:95:31:6c:bd:4b:9b:
f2:ae:2c:14:e5:71:3f:e0:bd:9c:ad:4a:af:cd:c8:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:ED:DC:35:5B:D9:D7:B9:85:15:41:9F:95:60:44:14:0B:67:DF
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:79:bb:33:45:3f:39:9f:e0:dc:1e:3c:ee:bf:e3:fd:ac:1d:
fb:5e:b4:38:b9:3f:68:91:70:d1:35:91:11:ef:0f:24:68:4a:
20:79:c2:04:d3:49:29:44:5b:3f:24:71:78:ed:f8:78:75:c9:
35:17:37:25:ed:8a:0a:23:a8:8c:93:ab:4d:e2:d9:e1:ba:37:
8e:6f:61:ab:92:1f:db:e2:4e:03:ed:ec:3c:d5:42:fb:c5:d2:
11:56:a2:64:33:38:ef:36:a0:25:58:d4:34:6e:1f:e8:5d:a3:
fb:85:f8:3e:13:be:2f:e5:69:b5:96:84:1f:62:c9:9b:78:5e:
8d:4b:a1:c6:68:15:50:e8:85:d6:8f:ae:80:5d:0f:a7:bd:5b:
ab:96:1d:f0:f4:ee:88:07:c4:33:7c:8e:37:ce:b2:17:55:b0:
c2:86:10:2a:da:a1:f4:eb:26:81:95:2d:e2:57:5c:36:ae:79:
a4:8b:41:38:1b:3a:30:67:0d:17:2f:5d:46:64:bb:a5:68:0b:
90:be:0f:26:4e:b0:7c:3c:ef:4d:f9:e0:4d:ac:d7:53:d5:a8:
a2:de:0f:f2:c5:85:6d:e1:d5:73:d7:db:d7:dd:c6:99:c3:36:
4f:7c:42:53:7a:94:bf:18:5d:b8:6b:ab:b7:84:2a:a9:0b:0a:
82:ab:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:52 2025 by rpki-client