Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: lh7s1WeiVs0chzupqWjFc//Qiu3M0pijPX7yQ55a81k=
Subject key identifier: 28:7F:2E:59:FD:F2:14:CB:62:1F:6F:63:B3:06:17:81:DE:D9:DC:43
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 0197B9D8AFD081B227C73A80A2EDEB48DD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 04:01:14 +0000
Manifest this update: Sun 29 Jun 2025 04:01:14 +0000
Manifest next update: Mon 30 Jun 2025 04:01:14 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: 9z9C5nIJi1ZxhPVj5GoU1t+B07kukrPDWW79Eh8aMhw=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:af:d0:81:b2:27:c7:3a:80:a2:ed:eb:48:dd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Jun 29 04:01:14 2025 GMT
Not After : Jun 30 04:01:14 2025 GMT
Subject: CN=287f2e59fdf214cb621f6f63b3061781ded9dc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:33:ef:91:01:d6:f2:87:92:c9:77:c2:8b:
39:82:2e:e4:f6:e4:8b:22:05:db:d2:13:da:c5:10:
62:68:bb:b3:39:6e:95:a3:95:aa:21:51:a9:49:32:
83:76:86:3a:77:83:88:f9:92:e4:a7:f1:20:e5:7f:
1f:39:63:b4:ce:97:58:eb:3e:3a:63:8e:e3:92:48:
3e:37:d4:22:ee:aa:e9:2c:42:50:89:13:e2:82:63:
c3:44:37:d7:35:b5:07:8f:6b:45:c5:ec:69:d5:5a:
46:4f:2b:e7:ca:6e:fd:b5:d9:0e:bf:2d:c8:2c:c7:
a1:15:0f:f1:78:aa:4e:c0:9e:6d:66:46:70:5e:20:
e8:3b:c8:5a:c3:52:d5:ee:b5:9d:e0:f0:d4:9e:8f:
84:71:2a:91:73:08:ad:18:c3:7b:32:61:5f:c0:f3:
d8:df:49:6c:a4:75:64:14:3d:ba:92:15:2b:8c:0c:
ac:55:c1:ba:5b:80:9d:30:76:bf:28:17:46:d3:34:
96:be:b8:3e:f9:d9:f8:2b:a5:df:04:de:fe:85:ae:
6d:f2:c5:ed:27:26:f6:c4:3a:76:15:0e:c8:89:7d:
cf:36:bb:06:a8:73:5e:7c:59:f6:ad:6d:2c:f7:d1:
fb:2c:d6:0c:ff:db:ea:7d:c5:28:13:ae:67:c1:64:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:2E:59:FD:F2:14:CB:62:1F:6F:63:B3:06:17:81:DE:D9:DC:43
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:81:97:6d:03:87:3f:01:70:ab:ce:4f:90:d1:9f:18:37:
91:95:cb:d6:e4:2a:1b:b3:d1:b6:8f:cc:ee:16:60:91:04:d0:
7b:f8:d2:25:14:50:14:32:7b:51:8f:36:df:e8:7d:07:99:63:
90:f2:5d:56:cb:8b:b5:ec:07:33:34:44:a7:da:fa:46:21:fe:
cd:ed:be:b0:83:b3:0a:45:bf:c9:7e:ef:f3:a9:5b:6c:10:be:
7b:32:c4:ff:32:0a:d0:c6:d6:97:4b:30:e0:d7:04:85:34:e8:
41:3c:60:d7:1a:fc:b1:54:68:c2:3f:6d:6c:97:f6:91:4e:76:
2d:74:f5:0d:64:54:c0:87:ef:2f:92:8c:e8:e9:e1:71:f1:f9:
cc:cc:99:2a:2e:81:44:39:d5:d2:a9:e9:20:78:84:2a:b5:e6:
7c:54:21:a8:fc:f3:ea:42:40:78:9b:2b:b6:f4:29:71:a4:a3:
23:df:f7:34:46:76:41:a6:ae:d3:f1:6e:b4:ff:1d:80:4c:50:
42:77:7b:bd:e5:44:94:d8:91:9f:19:b4:05:06:58:26:55:e0:
25:69:1d:9d:3f:ab:b1:c7:11:47:b9:2f:bd:49:74:03:0a:fe:
ff:32:3f:5f:56:9f:8d:a9:73:3b:0a:10:8c:0e:59:f2:e2:67:
14:80:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:34 2025 by rpki-client