Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: DJcR1D1M54s3eMi14aQBu7B7AzFHYz+cZRFNTqq07vk=
Subject key identifier: 5B:C4:38:BF:32:28:97:AB:6D:A0:1C:0B:41:A0:20:8A:85:58:1F:4F
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 0196CA60566F0E6C8CEF086FEE93E14CB1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 16:00:33 +0000
Manifest this update: Tue 13 May 2025 16:00:33 +0000
Manifest next update: Wed 14 May 2025 16:00:33 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: WIOXgoC7bhyt1qMVNrHn1beDFOzv5N6yDB3fj53+WJw=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:56:6f:0e:6c:8c:ef:08:6f:ee:93:e1:4c:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: May 13 16:00:33 2025 GMT
Not After : May 14 16:00:33 2025 GMT
Subject: CN=5bc438bf322897ab6da01c0b41a0208a85581f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:a3:ef:80:5e:f5:c2:95:aa:04:4e:97:0a:
83:1b:b4:d3:87:dc:03:f0:37:c7:66:3c:f3:e5:7c:
f3:e7:e7:ec:9a:f6:9e:49:23:d8:eb:70:0a:f8:87:
d7:d1:13:e1:72:12:aa:10:88:56:3d:86:b2:ec:4f:
63:6f:4d:a2:9b:a1:64:68:53:19:01:0c:4e:47:83:
8c:93:b0:31:ea:6b:ac:8b:ad:94:fe:ba:ac:7f:d5:
15:b9:6b:d4:1e:53:4d:03:3d:4c:10:fd:b9:fb:72:
cd:61:d8:31:a6:3a:5b:ee:dd:0b:a9:b4:3b:38:02:
a5:f9:73:a0:91:f6:1e:18:e2:73:c5:de:f5:8d:0c:
4e:b2:93:99:77:b1:82:86:40:48:36:c3:d2:0b:a3:
fb:79:5a:ce:bb:b7:0c:38:19:31:f7:69:cf:19:f0:
16:3a:1e:83:fe:8e:24:13:02:3a:eb:1f:90:70:b8:
8e:b4:8a:e5:eb:f4:f4:e1:66:db:61:47:e4:60:62:
7d:72:24:cc:9a:af:ef:b4:9a:a0:49:91:67:01:ac:
9a:71:40:7f:f0:4f:2b:8f:44:e5:d9:b5:e1:1f:b7:
82:63:ad:ef:36:f6:8d:c3:e8:b4:f5:b4:56:05:7f:
ff:c6:b6:f9:99:f0:a4:0a:f9:87:6c:57:b4:69:ac:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C4:38:BF:32:28:97:AB:6D:A0:1C:0B:41:A0:20:8A:85:58:1F:4F
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dd:99:66:7b:bb:6e:9c:0d:8b:c3:d3:d0:39:f2:e4:a3:7f:
98:c2:bc:d3:aa:0c:d9:16:17:3d:75:83:5b:20:01:70:b1:c0:
12:89:fb:96:b7:90:76:e7:63:fd:8a:85:cb:b0:c4:53:87:bc:
eb:0e:e9:d2:dc:dc:c1:43:ad:bc:0a:11:78:69:a9:35:d2:d6:
06:9f:07:09:cb:eb:e0:fb:df:6f:1e:46:ef:96:e5:d8:56:78:
b4:19:de:28:e7:2f:eb:4a:4c:7c:4c:01:3a:d6:b8:54:f8:e1:
c0:16:29:08:45:5b:4a:44:08:84:74:f7:1f:73:0d:8c:58:0b:
93:44:be:d0:a9:09:6b:37:91:41:67:05:17:7d:fa:dd:91:d9:
e5:aa:ee:b0:f9:2b:35:ee:e2:fc:0e:9a:30:f2:70:60:7a:18:
f7:9a:f3:a7:79:50:62:ee:1d:ef:0f:4a:95:dd:1a:5d:0f:c1:
17:72:c3:ec:79:04:54:c8:ba:02:10:62:92:50:1c:2e:20:2f:
42:b4:ad:cb:cc:b0:2c:25:d4:6b:30:1d:f7:64:77:42:ff:1e:
c9:c7:38:82:f1:78:b2:4f:99:20:cc:d6:c4:9a:c7:48:d3:5f:
b7:de:66:72:3a:a4:df:54:aa:b5:91:a3:dd:a2:cd:99:58:69:
14:5f:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:47:14 2025 by rpki-client