Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: JYL3XKYKYYO9XN/gCBHKrct4SUAqY+InvDHZwa6D0n4=
Subject key identifier: BB:29:31:4C:AE:DB:60:08:E8:BB:1F:FD:9B:39:EA:2D:68:D9:03:8F
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 019A4DAA8406681EF8D6EC2859A364C6CDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 11DE
Signing time: Tue 04 Nov 2025 07:00:11 +0000
Manifest this update: Tue 04 Nov 2025 07:00:11 +0000
Manifest next update: Wed 05 Nov 2025 07:00:11 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: XEjsFHJz0AB8ZVALwZ2tB0y6FQGztGLN+BtPCxBv3XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:84:06:68:1e:f8:d6:ec:28:59:a3:64:c6:cd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Nov 4 07:00:11 2025 GMT
Not After : Nov 5 07:00:11 2025 GMT
Subject: CN=bb29314caedb6008e8bb1ffd9b39ea2d68d9038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:e8:41:5a:4b:de:15:d4:1a:de:68:f3:db:
3b:57:b1:c9:ea:24:ee:ae:01:1a:15:aa:c5:72:44:
01:2e:11:c1:85:00:e3:f0:f4:d0:e8:bb:7f:05:cf:
84:6d:5d:5a:56:f2:5d:8c:2a:10:6c:da:c5:22:55:
0b:97:14:fe:c4:50:f6:a5:08:91:40:aa:b7:d3:d5:
cd:b9:a0:6c:12:24:c8:83:e7:64:85:28:41:a4:26:
34:cf:77:b5:b8:ac:c6:2f:a0:d8:aa:85:03:da:81:
5f:1a:e2:13:ef:c7:89:6e:e9:ed:9d:da:a5:65:2f:
f2:60:64:d0:56:8c:b2:35:5c:77:00:65:92:f7:65:
f2:a7:0c:23:da:b7:20:39:9b:a3:0c:8d:23:11:bd:
98:ac:49:27:57:db:7b:c4:09:d1:9b:a8:dd:c0:f1:
43:9a:3c:3d:d6:fa:35:fe:5f:8c:6f:48:9b:e7:c7:
d1:89:b0:39:34:1d:62:85:b5:1a:d7:61:b8:9d:93:
6c:20:ac:5f:e7:f6:37:93:cf:d2:30:af:e0:7c:3d:
12:a0:77:06:40:79:16:1f:dc:18:84:d9:2d:89:d0:
f9:ab:64:11:ee:08:32:c6:03:fb:0e:ec:b5:fe:87:
d4:37:92:6c:78:4a:7a:2b:a5:71:56:33:e0:cd:4f:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:31:4C:AE:DB:60:08:E8:BB:1F:FD:9B:39:EA:2D:68:D9:03:8F
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:49:56:54:5f:09:95:0b:79:97:f5:84:25:89:43:ce:05:
57:9a:d9:6f:6e:be:0a:29:32:8c:7b:17:97:3f:bb:c1:be:7e:
6b:8c:6d:45:6e:7f:48:f2:29:12:83:18:e5:af:43:7b:54:bb:
85:bd:ff:83:40:ba:96:8c:67:27:c0:8d:12:0b:eb:ea:2e:bd:
e2:86:cd:91:02:35:a8:bb:f7:74:62:8d:1c:57:3e:c4:ba:53:
df:7c:a4:85:61:43:c0:fd:5b:68:6f:e0:ef:76:93:af:d3:cc:
0f:6b:f3:aa:02:44:23:36:73:14:0f:80:ac:f1:31:81:5d:5f:
ca:c3:0e:4a:1b:5b:7f:ca:a5:e9:3e:cb:41:2e:13:3f:cb:25:
2d:84:b7:63:9a:12:80:82:7f:98:53:da:b4:89:00:fc:93:34:
12:85:1a:5b:aa:a0:c6:eb:be:a0:23:3a:3c:65:e0:73:7d:e5:
c3:f7:73:25:2b:23:2d:50:ab:c7:2c:0d:4e:40:7a:72:88:27:
28:57:9c:2c:c8:33:a3:a5:6b:56:99:c9:d1:56:df:0c:50:9a:
99:6c:bb:36:94:90:9b:47:41:48:16:2b:35:72:7b:31:b5:9e:
c4:fa:b3:29:83:23:40:b1:fe:38:de:7f:53:33:21:49:77:55:
db:48:c2:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqoQGaB741uwoWaNkxs2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjMxMjY4ZjJmZjdlOGNlYWRmMWRlOTVmOTdmMGIxZDJi
MTVmOTYwHhcNMjUxMTA0MDcwMDExWhcNMjUxMTA1MDcwMDExWjAzMTEwLwYDVQQD
EyhiYjI5MzE0Y2FlZGI2MDA4ZThiYjFmZmQ5YjM5ZWEyZDY4ZDkwMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJDoQVpL3hXUGt5o89s7V7HJ6iTu
rgEaFarFckQBLhHBhQDj8PTQ6Lt/Bc+EbV1aVvJdjCoQbNrFIlULlxT+xFD2pQiR
QKq309XNuaBsEiTIg+dkhShBpCY0z3e1uKzGL6DYqoUD2oFfGuIT78eJbuntndql
ZS/yYGTQVoyyNVx3AGWS92Xypwwj2rcgOZujDI0jEb2YrEknV9t7xAnRm6jdwPFD
mjw91vo1/l+Mb0ib58fRibA5NB1ihbUa12G4nZNsIKxf5/Y3k8/SMK/gfD0SoHcG
QHkWH9wYhNktidD5q2QR7ggyxgP7Duy1/ofUN5JseEp6K6VxVjPgzU+58QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLspMUyu22AI6Lsf/Zs56i1o2QOPMB8GA1UdIwQY
MBaAFHSzEmjy/36M6t8d6V+X8LHSsV+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2It
ZDg1NDllZGY3Y2VmLzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2ItZDg1NDllZGY3Y2Vm
LzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTVJVlRf
CZULeZf1hCWJQ84FV5rZb26+CikyjHsXlz+7wb5+a4xtRW5/SPIpEoMY5a9De1S7
hb3/g0C6loxnJ8CNEgvr6i694obNkQI1qLv3dGKNHFc+xLpT33ykhWFDwP1baG/g
73aTr9PMD2vzqgJEIzZzFA+ArPExgV1fysMOShtbf8ql6T7LQS4TP8slLYS3Y5oS
gIJ/mFPatIkA/JM0EoUaW6qgxuu+oCM6PGXgc33lw/dzJSsjLVCrxywNTkB6cogn
KFecLMgzo6VrVpnJ0VbfDFCamWy7NpSQm0dBSBYrNXJ7MbWexPqzKYMjQLH+ON5/
UzMhSXdV20jC2g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:19 2025 by rpki-client