Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: U709Fsw6lfeal3np74AQqA0F6ELP1QOZ5oNrCWHn1d0=
Subject key identifier: 84:63:5A:80:01:1C:F0:CF:9A:22:2F:1A:C3:CA:99:C6:DF:38:54:2D
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0197B70F3A51997C8369C60E4BDD9839224C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: Y5gd+3xf8QmLgT7po9nFEq4c0xECKuX6FL1lRnQiGBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3a:51:99:7c:83:69:c6:0e:4b:dd:98:39:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=84635a80011cf0cf9a222f1ac3ca99c6df38542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:39:d2:6e:bf:65:ce:b3:7d:95:a5:55:d3:
66:01:d2:07:57:27:8a:18:d0:64:2a:21:e9:94:0f:
3c:fe:48:e1:07:02:21:77:ed:da:fa:6a:d5:88:ac:
5d:04:06:ff:30:72:98:d9:51:b1:05:dc:e7:22:8e:
1c:9d:33:a6:fe:07:9c:81:7b:83:2c:e8:ec:1d:f0:
87:4e:72:4b:57:cb:89:15:cc:b4:8c:32:58:fa:c5:
75:d5:6b:f2:f9:72:39:96:cc:46:36:43:e7:27:fc:
6b:70:01:00:16:62:9b:f9:1d:b1:b5:56:4c:a6:65:
12:fc:e2:46:98:48:aa:cd:d4:5c:b9:f2:d4:46:d9:
7a:12:9d:fe:99:c2:54:c0:fa:f2:86:bb:19:c9:41:
0b:ee:0a:c5:63:ce:91:2d:3f:ac:67:74:cd:3b:e5:
d4:88:50:68:06:84:b0:0e:41:ef:55:a7:a6:a1:0e:
90:ad:a3:41:17:f8:8d:73:cf:54:fa:8c:eb:3c:05:
0e:4d:83:05:30:db:15:02:24:4e:8e:7e:15:e9:9f:
68:75:b6:d6:2a:5b:87:e1:55:f7:e1:6b:63:01:4c:
f5:99:17:07:a8:fd:90:0e:0a:f5:e3:90:bc:97:4d:
ee:94:26:90:2d:49:d5:f4:f3:3a:84:ef:da:4a:b0:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:5A:80:01:1C:F0:CF:9A:22:2F:1A:C3:CA:99:C6:DF:38:54:2D
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cd:28:c9:5a:17:27:6c:7d:44:94:eb:1a:ee:8a:3c:de:8e:
c8:0e:f1:04:31:c1:83:a0:c3:0b:f3:68:82:9d:c9:f8:78:a0:
64:ae:02:fc:72:1a:ef:e0:db:f2:40:71:8e:30:75:65:85:9b:
ed:18:90:a4:2b:86:a4:10:6f:ac:d0:28:71:41:ef:cf:32:87:
5b:fa:0d:45:71:ea:b2:65:2d:68:3b:9a:2b:e3:4d:b6:b0:01:
a5:fa:b8:fa:e9:48:31:52:08:73:19:9c:62:55:c5:82:19:ae:
e8:32:6c:14:3b:a8:11:f0:f2:f9:53:ea:3e:34:50:9d:d2:22:
eb:1b:16:cb:95:b2:20:13:6c:34:7b:68:2d:f4:54:2f:c5:f4:
35:73:c7:16:04:b0:51:02:d7:08:0e:b5:74:06:4e:72:15:fe:
76:f3:20:28:c1:b2:d6:07:d7:19:d8:cf:a2:c4:69:e8:f7:a2:
89:d6:e2:9f:47:5a:10:08:a2:2d:15:83:3d:5d:a0:70:86:41:
d8:5b:4e:f5:73:71:88:55:79:b9:c6:5a:6f:e3:17:2b:62:14:
6b:29:2d:0b:1e:54:23:10:bb:ca:26:0f:be:86:f4:72:8c:99:
28:38:5f:b2:28:b7:a7:cb:37:4b:74:3c:7c:3c:4d:74:1f:07:
57:64:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:10 2025 by rpki-client