Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: DbBVaTdT/PWTjppOEDvtQoGRwMxvNPJsoY6qLwgwNh4=
Subject key identifier: 04:A8:E2:F5:C5:82:FC:62:2D:1C:EF:C2:DD:1E:8F:D4:35:93:17:3A
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019894B663F8CFAE0CF571CB5A9CFB9108FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 06B1
Signing time: Sun 10 Aug 2025 16:00:37 +0000
Manifest this update: Sun 10 Aug 2025 16:00:37 +0000
Manifest next update: Mon 11 Aug 2025 16:00:37 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: 1QEDKidkOJrZgBTul86SZBkRAvoyFxegPVR0ObOVWyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:63:f8:cf:ae:0c:f5:71:cb:5a:9c:fb:91:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Aug 10 16:00:37 2025 GMT
Not After : Aug 11 16:00:37 2025 GMT
Subject: CN=04a8e2f5c582fc622d1cefc2dd1e8fd43593173a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:4c:b5:c8:95:0a:d5:34:83:a6:af:2d:dc:
fe:3f:bc:65:4d:4a:a6:f9:8a:e6:c2:7c:6d:a5:04:
11:00:f7:86:17:1b:a6:f8:e6:db:5d:bb:ba:81:ac:
b9:e6:3e:d2:47:20:44:e5:e6:de:3b:85:7f:17:78:
ac:fa:d5:c0:2a:97:85:aa:ff:15:49:6f:65:b5:23:
2f:5c:25:60:07:d6:56:7f:02:8b:48:42:97:69:59:
d1:ab:b6:c9:33:cc:b1:04:eb:17:3f:a2:de:6e:92:
87:f4:26:5e:73:95:0a:bc:92:0a:62:81:03:69:fa:
1a:fe:81:dc:ec:66:11:d0:10:ac:83:27:a5:f6:b6:
7e:da:ca:9e:b5:48:d4:c4:31:04:26:c4:57:6b:7e:
bc:e0:fc:d9:e0:56:6e:2c:3a:82:5f:46:0b:c5:33:
15:ab:d7:be:41:bf:48:6a:46:5a:39:de:9c:28:c3:
11:9a:4a:f4:38:4d:36:26:cb:2c:56:84:7e:51:3e:
d3:51:f0:e1:e5:66:c2:83:b9:f4:9a:c7:49:8e:9b:
34:f5:39:cc:b3:fc:7c:93:fa:c4:53:fe:f4:01:01:
bb:4b:22:f3:30:86:58:cd:fb:d6:7e:52:ec:9a:81:
c1:ba:c1:9b:a7:f6:0a:49:62:35:2b:31:a9:8a:db:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:E2:F5:C5:82:FC:62:2D:1C:EF:C2:DD:1E:8F:D4:35:93:17:3A
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:e2:f1:a6:d7:9a:cc:0e:94:20:06:af:57:84:cb:b8:5c:
19:19:88:1e:bf:5e:15:84:36:23:2f:c0:86:e9:56:c7:95:ca:
80:68:eb:98:73:9f:f2:3c:2b:df:52:12:de:6d:33:46:15:c3:
a9:53:1e:61:b6:f1:2c:0d:8f:f4:30:e5:6d:2f:b2:ca:79:f0:
d2:f0:34:0f:f4:a7:d2:79:f0:30:a5:fc:6a:a9:02:26:07:d4:
1e:c8:4e:85:b0:9a:cf:c9:4d:f5:ac:55:a2:e6:de:88:01:4a:
e0:01:04:f7:90:45:02:d6:52:09:be:7d:cb:e0:ab:e2:d3:f8:
08:f6:f1:5a:ad:25:24:80:4c:18:b9:e3:4c:2b:f8:dd:53:dc:
fc:46:d1:be:02:e3:31:01:1d:03:9e:57:c4:48:4c:a0:57:96:
e4:8f:a0:16:1f:56:2d:e0:85:97:9c:ad:c1:cb:95:fa:12:00:
08:18:7b:94:ab:ea:c1:b3:1f:ac:9d:dc:b5:85:9e:d5:b7:bd:
99:75:84:ed:f3:56:aa:1d:01:ad:1f:57:8f:cb:64:e0:76:88:
d3:47:1d:a1:6e:ac:bf:28:53:ca:ed:ff:21:61:e7:02:17:4a:
0a:4b:f7:9d:13:69:8b:67:d1:07:d9:22:f6:81:37:4f:e4:ad:
89:71:6f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUtmP4z64M9XHLWpz7kQj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi
NmY5ZjgwHhcNMjUwODEwMTYwMDM3WhcNMjUwODExMTYwMDM3WjAzMTEwLwYDVQQD
EygwNGE4ZTJmNWM1ODJmYzYyMmQxY2VmYzJkZDFlOGZkNDM1OTMxNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWVMtciVCtU0g6avLdz+P7xlTUqm
+YrmwnxtpQQRAPeGFxum+ObbXbu6gay55j7SRyBE5ebeO4V/F3is+tXAKpeFqv8V
SW9ltSMvXCVgB9ZWfwKLSEKXaVnRq7bJM8yxBOsXP6LebpKH9CZec5UKvJIKYoED
afoa/oHc7GYR0BCsgyel9rZ+2sqetUjUxDEEJsRXa3684PzZ4FZuLDqCX0YLxTMV
q9e+Qb9IakZaOd6cKMMRmkr0OE02JsssVoR+UT7TUfDh5WbCg7n0msdJjps09TnM
s/x8k/rEU/70AQG7SyLzMIZYzfvWflLsmoHBusGbp/YKSWI1KzGpituu9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASo4vXFgvxiLRzvwt0ej9Q1kxc6MB8GA1UdIwQY
MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt
NTlkOWQ0OGVhM2IxLzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix
LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNHi8abX
mswOlCAGr1eEy7hcGRmIHr9eFYQ2Iy/AhulWx5XKgGjrmHOf8jwr31IS3m0zRhXD
qVMeYbbxLA2P9DDlbS+yynnw0vA0D/Sn0nnwMKX8aqkCJgfUHshOhbCaz8lN9axV
oubeiAFK4AEE95BFAtZSCb59y+Cr4tP4CPbxWq0lJIBMGLnjTCv43VPc/EbRvgLj
MQEdA55XxEhMoFeW5I+gFh9WLeCFl5ytwcuV+hIACBh7lKvqwbMfrJ3ctYWe1be9
mXWE7fNWqh0BrR9Xj8tk4HaI00cdoW6svyhTyu3/IWHnAhdKCkv3nRNpi2fRB9ki
9oE3T+StiXFvxg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:36 2025 by rpki-client