Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: r7rnM98M//oIl9Sf9EkwvdQopgbo/2MBPTj3em4rhrI=
Subject key identifier: BA:94:1B:A2:F6:09:34:5B:C6:63:9A:DA:C9:FA:47:3F:60:8C:21:7A
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 019875D16B1830408874D98CB1B4CD2EFB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 16:01:55 +0000
Manifest this update: Mon 04 Aug 2025 16:01:55 +0000
Manifest next update: Tue 05 Aug 2025 16:01:55 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: +PC+BWjebWYWumU9NWLDbLn3/DSfICD6qC8vMnqgMEM=)
2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:6b:18:30:40:88:74:d9:8c:b1:b4:cd:2e:fb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Aug 4 16:01:55 2025 GMT
Not After : Aug 5 16:01:55 2025 GMT
Subject: CN=ba941ba2f609345bc6639adac9fa473f608c217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:c8:a5:f0:8e:3f:c9:41:e7:81:6d:a8:ea:
a9:69:86:20:39:9f:f8:a5:ca:7a:32:76:08:b7:28:
4f:d0:d1:3c:29:e3:86:e8:bf:cd:bb:e0:f9:0c:12:
b4:ab:db:89:91:12:7a:8c:c3:69:7e:1c:af:18:52:
ce:d4:bd:a6:75:09:da:69:49:04:46:e2:67:8b:37:
41:0b:df:12:30:00:c5:59:0d:9d:93:e5:87:f8:23:
f3:b1:55:3e:78:77:7e:85:cb:40:71:f7:43:76:8f:
2f:5c:9f:3c:17:54:20:c0:18:14:d8:3d:51:fe:4f:
c3:2f:ac:e4:f0:2f:ec:64:51:41:d4:9e:39:4b:7a:
35:aa:b4:9e:be:19:40:57:a7:4d:f9:c1:e3:39:07:
68:9b:8c:13:06:46:19:14:a0:30:e6:7a:d2:c3:62:
97:d9:26:e4:7d:5d:70:39:b8:c3:64:9f:91:43:93:
10:b1:17:bb:af:85:7e:4e:0f:e1:ca:20:21:ec:01:
e7:6b:32:31:0d:65:e2:a3:e4:fd:13:9f:e7:91:8b:
44:d7:e8:b7:f7:e4:c2:ea:e2:81:10:45:b1:7a:08:
8b:be:b1:a7:6c:db:ba:98:a9:c0:07:eb:18:e2:7d:
e6:4b:52:3b:21:fb:82:ad:91:8b:93:df:ce:b9:9e:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:1B:A2:F6:09:34:5B:C6:63:9A:DA:C9:FA:47:3F:60:8C:21:7A
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7b:04:d2:55:2a:85:f6:13:28:c8:e3:7d:a3:03:e4:43:d7:
5d:a1:b3:6f:60:47:51:e1:7d:9d:e2:c9:fa:11:39:96:5f:78:
77:5c:1d:c1:6f:a4:5d:6e:2e:32:06:22:e2:f2:9b:e2:53:08:
7d:84:03:7c:7c:4d:85:1b:7f:2e:ed:c6:ad:02:40:8f:a0:26:
bf:50:f7:0b:8b:e1:ec:98:69:78:87:f7:16:05:c9:44:91:44:
82:53:3c:ab:f8:3a:5b:ca:f4:91:ee:13:dd:98:f2:ea:c6:cc:
fc:51:9f:58:68:dc:75:94:33:c3:d6:aa:2c:dc:cd:05:a6:e3:
8b:11:6e:5c:4f:8d:42:1c:9f:e3:df:e2:cb:9a:20:75:71:29:
24:ec:8d:c2:a6:43:b3:b0:7e:92:ab:37:15:28:38:3b:57:36:
7a:56:37:8b:14:de:55:ab:f7:e1:74:0e:6f:81:59:b7:b0:ab:
50:78:e4:c5:31:cf:01:17:c6:cd:fe:e6:a3:2f:5e:1f:d2:ab:
39:37:7e:d9:0a:59:bf:1f:fd:59:1e:ad:55:7f:da:45:0c:77:
83:8f:78:db:f7:5a:45:59:2c:2b:d2:17:d2:f0:21:bf:d9:f4:
a3:20:33:c5:40:71:1c:85:24:ac:57:2d:13:7b:86:d8:4b:13:
e8:1f:79:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10WsYMECIdNmMsbTNLvuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk
OGQzMmIwHhcNMjUwODA0MTYwMTU1WhcNMjUwODA1MTYwMTU1WjAzMTEwLwYDVQQD
EyhiYTk0MWJhMmY2MDkzNDViYzY2MzlhZGFjOWZhNDczZjYwOGMyMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOzIpfCOP8lB54FtqOqpaYYgOZ/4
pcp6MnYItyhP0NE8KeOG6L/Nu+D5DBK0q9uJkRJ6jMNpfhyvGFLO1L2mdQnaaUkE
RuJnizdBC98SMADFWQ2dk+WH+CPzsVU+eHd+hctAcfdDdo8vXJ88F1QgwBgU2D1R
/k/DL6zk8C/sZFFB1J45S3o1qrSevhlAV6dN+cHjOQdom4wTBkYZFKAw5nrSw2KX
2SbkfV1wObjDZJ+RQ5MQsRe7r4V+Tg/hyiAh7AHnazIxDWXio+T9E5/nkYtE1+i3
9+TC6uKBEEWxegiLvrGnbNu6mKnAB+sY4n3mS1I7IfuCrZGLk9/OuZ5LHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqUG6L2CTRbxmOa2sn6Rz9gjCF6MB8GA1UdIwQY
MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt
OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm
LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXsE0lUq
hfYTKMjjfaMD5EPXXaGzb2BHUeF9neLJ+hE5ll94d1wdwW+kXW4uMgYi4vKb4lMI
fYQDfHxNhRt/Lu3GrQJAj6Amv1D3C4vh7JhpeIf3FgXJRJFEglM8q/g6W8r0ke4T
3Zjy6sbM/FGfWGjcdZQzw9aqLNzNBabjixFuXE+NQhyf49/iy5ogdXEpJOyNwqZD
s7B+kqs3FSg4O1c2elY3ixTeVav34XQOb4FZt7CrUHjkxTHPARfGzf7moy9eH9Kr
OTd+2QpZvx/9WR6tVX/aRQx3g4942/daRVksK9IX0vAhv9n0oyAzxUBxHIUkrFct
E3uG2EsT6B95rQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:18 2025 by rpki-client