Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: XgAS6Dlaj4J6iXrawTIadgAztAnoD03Z3I2LskQAvQU=
Subject key identifier: 9E:DC:AC:9D:6E:EE:FF:48:4D:CB:12:EF:45:A2:15:0E:BA:EF:CE:AA
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019896A5104F5D48A7C9A21ADF23B526510E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0F48
Signing time: Mon 11 Aug 2025 01:00:56 +0000
Manifest this update: Mon 11 Aug 2025 01:00:56 +0000
Manifest next update: Tue 12 Aug 2025 01:00:56 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: YBm304lf4J+FjUrJ2+Z1dkHJRbk/N810oiB92o9S+kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:10:4f:5d:48:a7:c9:a2:1a:df:23:b5:26:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Aug 11 01:00:56 2025 GMT
Not After : Aug 12 01:00:56 2025 GMT
Subject: CN=9edcac9d6eeeff484dcb12ef45a2150ebaefceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:a9:0d:a8:0f:0b:00:57:98:54:84:d7:9c:
37:b4:a0:50:66:50:03:85:09:37:ca:ee:4a:c2:e6:
23:70:ea:86:14:3a:7c:53:94:27:19:69:b7:af:20:
c8:71:e6:d2:2b:8e:a5:22:a8:05:13:49:01:6d:0f:
4f:dc:84:79:dd:24:8c:f6:25:7b:06:e9:a4:86:42:
a6:52:a1:7c:6d:41:2c:b2:40:d7:a0:f8:fc:fd:3f:
54:30:d7:e1:55:d0:c2:b2:1d:98:74:a5:7a:7a:ed:
3e:5b:91:da:95:2e:c8:ff:a2:8e:8a:22:28:6b:32:
82:c5:e9:7f:cf:56:19:8a:b5:a0:06:9e:46:07:90:
c0:bd:d1:a1:f7:33:b0:a7:8c:0a:12:dd:3c:ad:04:
23:41:0a:7d:89:ed:79:7b:0c:5d:f0:22:c0:78:d5:
77:bc:7b:45:24:df:cb:5e:4a:c6:06:a2:54:0d:a5:
55:51:f1:62:40:31:71:57:24:f5:9a:77:76:70:5f:
8f:64:0d:44:c5:c4:a1:1a:72:e8:dc:a6:f0:2d:1d:
56:f1:5d:88:92:33:c9:9c:42:b9:aa:cd:76:ca:5c:
9c:1c:e3:e3:77:16:29:7b:f2:70:42:61:99:46:69:
5e:25:cc:ce:84:37:b0:db:ec:5e:75:8e:a4:e2:3a:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:AC:9D:6E:EE:FF:48:4D:CB:12:EF:45:A2:15:0E:BA:EF:CE:AA
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:d5:66:f2:4d:72:c5:d6:f5:1e:f6:ab:e8:d7:c9:ec:20:
c3:e2:9f:2a:1c:aa:8c:b3:58:2c:d4:0a:5a:40:57:f0:7c:7f:
5e:44:48:0a:80:99:67:2c:8b:df:95:b5:c1:b6:38:25:bc:bb:
02:52:ea:3b:e0:28:49:cf:f4:c8:19:d5:a4:c4:fd:b7:49:07:
2c:cd:81:34:d0:a6:11:d4:fb:d1:2f:be:2d:5b:94:2c:86:4c:
4c:bb:91:81:a6:45:cc:c7:b8:21:38:ea:d8:cf:74:6c:1e:d6:
87:ad:e4:eb:01:3b:88:b2:17:dd:6b:12:fc:c5:22:4e:25:89:
6f:4b:c9:9b:2a:35:ef:e4:fb:a2:8a:d0:d7:b0:50:d4:26:82:
24:ac:2d:30:1e:30:c4:c3:9d:46:87:68:58:1f:c1:56:64:19:
fb:62:56:26:ea:03:d6:92:41:e9:da:e4:c0:75:df:01:eb:19:
f6:43:3b:11:b1:39:34:ae:b6:a0:a7:58:22:3a:b7:75:50:29:
1e:39:a4:b7:cb:0c:2b:b9:39:57:4e:99:c8:5d:07:f5:81:e3:
37:fc:13:d0:25:a0:58:d9:35:ac:fc:3f:88:42:95:8f:d9:31:
ee:ce:4e:06:98:fd:61:53:e6:fb:fe:dc:1d:2c:51:71:34:be:
f2:af:cf:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpRBPXUinyaIa3yO1JlEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDJjZDVkZDhkNTEzZDRhZTg3ZWNmZGM1NTdlYmY1ZjYy
M2VjMzQwHhcNMjUwODExMDEwMDU2WhcNMjUwODEyMDEwMDU2WjAzMTEwLwYDVQQD
Eyg5ZWRjYWM5ZDZlZWVmZjQ4NGRjYjEyZWY0NWEyMTUwZWJhZWZjZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HmpDagPCwBXmFSE15w3tKBQZlAD
hQk3yu5KwuYjcOqGFDp8U5QnGWm3ryDIcebSK46lIqgFE0kBbQ9P3IR53SSM9iV7
BumkhkKmUqF8bUEsskDXoPj8/T9UMNfhVdDCsh2YdKV6eu0+W5HalS7I/6KOiiIo
azKCxel/z1YZirWgBp5GB5DAvdGh9zOwp4wKEt08rQQjQQp9ie15ewxd8CLAeNV3
vHtFJN/LXkrGBqJUDaVVUfFiQDFxVyT1mnd2cF+PZA1ExcShGnLo3KbwLR1W8V2I
kjPJnEK5qs12ylycHOPjdxYpe/JwQmGZRmleJczOhDew2+xedY6k4jqvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7crJ1u7v9ITcsS70WiFQ66786qMB8GA1UdIwQY
MBaAFInSzV3Y1RPUrofs/cVX6/X2I+w0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAt
NWFlMzVjMDMwNjg2LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAtNWFlMzVjMDMwNjg2
LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcrVZvJN
csXW9R72q+jXyewgw+KfKhyqjLNYLNQKWkBX8Hx/XkRICoCZZyyL35W1wbY4Jby7
AlLqO+AoSc/0yBnVpMT9t0kHLM2BNNCmEdT70S++LVuULIZMTLuRgaZFzMe4ITjq
2M90bB7Wh63k6wE7iLIX3WsS/MUiTiWJb0vJmyo17+T7oorQ17BQ1CaCJKwtMB4w
xMOdRodoWB/BVmQZ+2JWJuoD1pJB6drkwHXfAesZ9kM7EbE5NK62oKdYIjq3dVAp
Hjmkt8sMK7k5V06ZyF0H9YHjN/wT0CWgWNk1rPw/iEKVj9kx7s5OBpj9YVPm+/7c
HSxRcTS+8q/PiQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:38 2025 by rpki-client