Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: UJ+AvReaOLKvPknb7MxkHCvCcPhyXkpbflD6W8t/ymQ=
Subject key identifier: EC:E7:B5:E5:61:EA:20:67:9A:A9:2E:29:2A:EB:3C:45:F7:2C:74:62
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 0197B6D7BB43E3E6757EDE3FED7C91D90EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0DC1
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: /tm+Ol+irqSlFZ8oUET6mYmwukXmLhkH220jQ43zM0E=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bb:43:e3:e6:75:7e:de:3f:ed:7c:91:d9:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=ece7b5e561ea20679aa92e292aeb3c45f72c7462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:65:c9:a3:f2:06:16:72:d0:2e:02:75:92:
31:c4:98:13:48:e0:46:4e:c4:3c:42:94:28:e6:3d:
6b:ea:09:93:d4:c0:a1:0f:eb:1a:2c:7b:0d:b1:d6:
8f:61:df:5d:3f:40:cb:74:79:78:42:21:b6:44:e0:
62:27:28:fa:54:d9:e9:b9:29:f7:9d:16:7c:c4:94:
56:d4:5b:29:48:ee:8d:00:cf:08:4a:56:68:3e:fc:
c5:5b:22:a2:33:1b:d4:c1:19:9c:5d:fa:4a:d4:fd:
b9:72:65:ff:0c:86:33:71:cf:65:3a:f3:77:09:7f:
92:32:ee:1a:07:85:74:fc:7b:92:d9:00:fd:25:dc:
d3:99:0b:f2:66:8b:3a:d8:33:40:a6:44:3d:42:46:
3b:5a:a1:41:7c:f3:9c:a0:2b:f9:42:30:cb:5f:2d:
dd:37:5e:c7:df:0d:9d:f0:0e:9f:a8:0c:7f:42:8b:
34:02:ab:3c:fe:aa:23:96:13:e3:92:b4:fe:58:5f:
6b:81:92:7a:34:20:27:95:00:1e:13:e2:90:10:06:
91:e0:f1:29:30:b5:37:0f:ee:30:77:de:51:c9:be:
37:a2:c5:03:61:55:66:a9:b1:07:00:9d:02:47:8c:
e6:71:8d:58:0c:f8:c6:ad:0a:56:b0:60:3b:f0:ad:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:B5:E5:61:EA:20:67:9A:A9:2E:29:2A:EB:3C:45:F7:2C:74:62
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:17:5b:d0:57:fe:2e:1d:24:d5:67:df:82:63:1d:58:4c:e7:
fe:3f:17:27:c1:ef:50:e2:34:7e:58:87:28:64:85:0e:d8:cd:
22:5d:87:a1:69:60:c9:79:32:80:d2:f0:df:9f:8f:87:f6:5f:
6c:49:9a:2f:c0:48:c3:d4:2b:9b:b1:10:bd:6c:53:f1:3e:cb:
ae:cf:62:74:f5:76:b8:03:7c:2b:85:6f:24:7f:c2:f6:68:19:
bd:a5:1d:9f:29:43:9c:51:8f:63:e4:d8:74:99:4c:02:b1:d0:
13:ab:74:0e:b5:e9:59:15:ea:4e:c1:c7:ce:dc:4b:b4:6c:1e:
4b:10:30:8e:5e:80:5c:eb:a8:6b:40:57:0d:54:ca:a9:f6:ec:
56:8e:27:cc:be:21:93:27:c1:4d:1f:05:8e:d8:9f:6c:42:c5:
21:79:25:28:b0:f7:b3:77:a3:e2:3d:34:bf:2e:2b:28:34:d8:
e1:d1:0f:7c:6d:fb:eb:02:9e:78:60:11:f1:f0:dd:f3:1c:e7:
21:22:8b:72:99:84:59:9e:60:da:d1:dc:13:5b:8c:47:f9:5c:
d2:cf:8c:3e:8c:a2:c8:33:ff:7a:92:57:6d:70:58:7d:d7:a6:
e0:44:56:95:ab:d2:0d:d5:a7:47:5a:ea:9b:1c:2e:80:8b:28:
c4:c8:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:08 2025 by rpki-client