Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: C0XHCo8MrEliN1gKyllldV0FeM0L3Wglxv3mqUVhfhQ=
Subject key identifier: C0:7D:B2:BD:75:40:C8:F9:00:0A:86:29:CA:E6:DD:DE:23:A6:41:40
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 01976997898BC79D4E7540B0E433AC3A6EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0EA1
Signing time: Fri 13 Jun 2025 14:00:28 +0000
Manifest this update: Fri 13 Jun 2025 14:00:28 +0000
Manifest next update: Sat 14 Jun 2025 14:00:28 +0000
Files and hashes: 1: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: c/IBVyJLtV1EhrvamJDmA/W1wi3N/XWG2ns2fmmlLuE=)
2: oEKdXw4w7e_1s4z2e7tOx4lNx0c.roa (hash: YjHL6/typreJGiDTssJHq0i4gZ1mztxzHYUdqtYA8ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:89:8b:c7:9d:4e:75:40:b0:e4:33:ac:3a:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Jun 13 14:00:28 2025 GMT
Not After : Jun 14 14:00:28 2025 GMT
Subject: CN=c07db2bd7540c8f9000a8629cae6ddde23a64140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:f1:1f:09:ba:ec:32:7f:5c:09:3f:85:94:
dc:50:30:9f:81:cf:eb:36:61:26:26:26:f7:49:1d:
4d:ab:89:dd:a0:9a:17:7b:26:50:f4:c9:b9:0e:60:
33:0d:71:0a:ee:06:6c:a2:8e:fc:80:c8:68:31:f4:
75:39:7d:eb:b1:50:95:3d:39:b8:c2:f4:24:cd:39:
59:c8:bb:b0:2f:2b:a6:8d:df:15:22:5b:59:b2:78:
55:d9:01:86:83:5b:ca:85:60:21:95:f6:9d:06:bc:
30:28:b5:00:f2:d1:37:8f:07:df:31:a0:aa:2d:42:
db:f3:15:a4:10:44:03:b5:45:88:8b:81:c1:d2:df:
97:6b:aa:62:3b:33:b2:66:68:4a:64:48:ad:7f:34:
1a:ec:ba:c2:0f:b1:f0:fe:4b:6f:b4:32:2a:33:82:
37:cf:38:8f:b0:19:af:4a:70:b6:8e:07:de:b8:4c:
86:b5:51:94:db:ad:a2:67:6a:9c:d3:fa:60:15:33:
97:2d:d2:1f:ab:07:4f:0b:62:de:4f:9c:fd:9c:90:
f6:fd:a2:86:c7:5c:26:f1:35:d0:8c:4d:0a:28:4f:
58:e5:b5:ac:84:4f:b9:07:56:99:fc:cf:cf:24:ea:
18:98:a3:67:b8:a5:1c:a8:66:ca:eb:4c:0e:f6:e9:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:B2:BD:75:40:C8:F9:00:0A:86:29:CA:E6:DD:DE:23:A6:41:40
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:72:53:f2:e2:1c:c6:2a:99:51:32:da:63:2f:ea:36:7f:
b8:3d:bc:6b:ab:53:e0:01:c8:95:4b:71:20:b2:ca:8a:e7:ce:
e2:43:cd:4d:84:d9:c2:3a:8a:f0:cb:32:53:1e:85:e3:ff:dc:
cf:29:00:9c:a4:0a:df:42:57:ad:dc:57:d0:9c:6c:7c:b0:b8:
0e:0c:4f:5c:44:a5:b9:8f:f8:bc:37:b3:cb:2c:00:52:94:c3:
bc:06:89:e4:69:62:38:f4:c2:eb:1a:76:22:17:eb:25:b6:aa:
d5:5c:af:5d:20:d2:f9:f8:67:fd:51:bb:2e:e6:24:b9:9a:b7:
a3:91:ba:01:91:fc:79:ae:09:46:db:b4:2b:ac:b2:64:b8:2c:
f4:3f:58:2e:aa:5f:46:ee:5e:30:59:d9:1b:fc:c8:15:2b:8c:
2e:c7:00:ff:61:a0:2e:c2:23:ef:a4:a0:6f:cc:b2:0f:45:1c:
f5:47:db:93:76:b5:10:cc:c0:bc:40:da:b1:44:30:52:23:19:
51:a3:6e:59:df:ed:69:c5:80:8b:58:fe:f1:dc:cd:12:06:f8:
64:4b:d0:82:b9:74:db:8a:e2:c3:f3:72:0f:b9:ad:f5:d7:85:
a1:b2:2e:24:16:1d:6e:bf:d4:4d:1f:38:69:a0:7a:79:d9:b4:
0d:16:91:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl4mLx51OdUCw5DOsOm7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw
OGMzODUwHhcNMjUwNjEzMTQwMDI4WhcNMjUwNjE0MTQwMDI4WjAzMTEwLwYDVQQD
EyhjMDdkYjJiZDc1NDBjOGY5MDAwYTg2MjljYWU2ZGRkZTIzYTY0MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLDxHwm67DJ/XAk/hZTcUDCfgc/r
NmEmJib3SR1Nq4ndoJoXeyZQ9Mm5DmAzDXEK7gZsoo78gMhoMfR1OX3rsVCVPTm4
wvQkzTlZyLuwLyumjd8VIltZsnhV2QGGg1vKhWAhlfadBrwwKLUA8tE3jwffMaCq
LULb8xWkEEQDtUWIi4HB0t+Xa6piOzOyZmhKZEitfzQa7LrCD7Hw/ktvtDIqM4I3
zziPsBmvSnC2jgfeuEyGtVGU262iZ2qc0/pgFTOXLdIfqwdPC2LeT5z9nJD2/aKG
x1wm8TXQjE0KKE9Y5bWshE+5B1aZ/M/PJOoYmKNnuKUcqGbK60wO9ulPTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB9sr11QMj5AAqGKcrm3d4jpkFAMB8GA1UdIwQY
MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt
MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz
LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD1yU/Li
HMYqmVEy2mMv6jZ/uD28a6tT4AHIlUtxILLKiufO4kPNTYTZwjqK8MsyUx6F4//c
zykAnKQK30JXrdxX0JxsfLC4DgxPXESluY/4vDezyywAUpTDvAaJ5GliOPTC6xp2
IhfrJbaq1VyvXSDS+fhn/VG7LuYkuZq3o5G6AZH8ea4JRtu0K6yyZLgs9D9YLqpf
Ru5eMFnZG/zIFSuMLscA/2GgLsIj76Sgb8yyD0Uc9Ufbk3a1EMzAvEDasUQwUiMZ
UaNuWd/tacWAi1j+8dzNEgb4ZEvQgrl024riw/NyD7mt9deFobIuJBYdbr/UTR84
aaB6edm0DRaRYQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:36 2025 by rpki-client