Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: WdvNbZ4S9mawZkNmpFNCBS+iLGt7UJRgdsfwr1p7iNY=
Subject key identifier: 3A:91:5F:2D:D9:A4:C8:1C:C0:89:DC:65:6D:1D:52:CE:02:37:7F:05
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 01976D3DE2EE084C66C62A3B2000FA13827E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 0F70
Signing time: Sat 14 Jun 2025 07:01:01 +0000
Manifest this update: Sat 14 Jun 2025 07:01:01 +0000
Manifest next update: Sun 15 Jun 2025 07:01:01 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: fg+y0AUjg/yLfbXi7ShaWfEzPD+nrtuilvxm3/g0TGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e2:ee:08:4c:66:c6:2a:3b:20:00:fa:13:82:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Jun 14 07:01:01 2025 GMT
Not After : Jun 15 07:01:01 2025 GMT
Subject: CN=3a915f2dd9a4c81cc089dc656d1d52ce02377f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:a2:b7:ea:15:3e:2c:aa:5e:94:7e:e5:f9:
92:dd:3e:8f:71:d7:f9:5f:9d:1e:f2:a1:28:f0:a7:
05:2e:06:ad:81:95:04:13:29:38:c3:d3:f1:1f:f1:
40:c4:76:f1:1f:f6:cc:ae:c6:3a:e6:e5:b9:c9:57:
ab:d6:50:b5:67:6c:6d:be:27:20:44:6b:0f:a6:62:
f7:6c:18:6b:9d:c1:ae:3d:30:74:d3:19:bd:81:18:
61:48:75:f1:03:48:b2:c4:08:03:4c:59:4d:bf:c0:
6d:a9:4a:1d:c8:fe:c6:70:ea:c6:8e:b8:53:14:68:
3c:24:0c:3b:dc:32:f4:04:a7:ae:d1:2b:8a:11:ad:
31:8f:7b:25:56:54:10:3c:8e:e4:df:43:fc:2f:3c:
0a:16:45:bb:f8:f7:3b:30:aa:de:30:f9:98:bb:3b:
c8:20:fa:c0:d7:6e:db:67:e7:f7:df:47:78:27:2d:
19:11:62:34:35:94:f6:b8:50:2d:29:98:c2:f9:b4:
d9:61:82:b8:34:06:e2:5b:be:a5:eb:ac:be:93:d3:
3c:d0:5e:28:01:30:9a:69:0c:13:f0:22:71:6f:dd:
f8:3e:c4:08:91:5a:2d:fc:15:0e:f2:c8:e6:d7:9a:
4b:1d:48:07:b4:bb:2c:aa:4b:9a:06:06:ac:6c:07:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:5F:2D:D9:A4:C8:1C:C0:89:DC:65:6D:1D:52:CE:02:37:7F:05
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0e:e5:0b:dc:14:9a:59:ee:5e:10:19:c1:fd:11:d6:90:39:
d7:0c:e4:e1:d0:c5:63:4f:fc:0e:9a:63:4b:c3:1f:ec:a2:45:
b7:91:24:3b:75:78:3d:6f:6e:73:f6:96:1d:be:bc:d1:a2:e8:
93:da:10:af:2c:46:7d:93:8d:41:33:9a:f3:36:a7:3e:79:9f:
72:bd:d2:81:6d:1f:b7:ba:52:3d:30:0c:20:8d:66:3b:f5:26:
73:35:77:14:17:6d:1b:98:f3:97:c2:60:10:84:d2:8c:48:2d:
26:cf:5a:ea:40:0c:0b:20:d2:d5:88:8a:bf:84:fa:f7:67:d3:
8e:8c:99:4b:e1:c6:67:48:a5:de:20:3d:90:fc:a9:9b:e8:d7:
34:9b:a0:15:d8:f0:71:b8:91:dc:e1:3b:86:ed:e7:8d:bf:f5:
81:63:6a:96:98:2f:12:c8:60:86:86:5b:5a:e1:08:6e:b1:45:
33:f1:c9:e4:72:08:2e:d4:0c:32:94:fe:82:a7:a4:38:f0:aa:
f4:cf:56:b2:dc:8d:62:10:66:bd:60:6d:7a:f7:e8:6a:99:e5:
31:a5:d7:4c:89:bd:b3:51:ad:7a:32:5c:30:d9:f4:7c:75:33:
d4:38:08:c7:40:4c:00:47:3f:57:22:2a:37:ab:a1:28:22:b9:
ff:fc:51:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPeLuCExmxio7IAD6E4J+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjVjYTcxOGYzYjlhOTM5YTUxMzY0MWJkODVjYzk0ZmE0
MDE5NTQwHhcNMjUwNjE0MDcwMTAxWhcNMjUwNjE1MDcwMTAxWjAzMTEwLwYDVQQD
EygzYTkxNWYyZGQ5YTRjODFjYzA4OWRjNjU2ZDFkNTJjZTAyMzc3ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XSit+oVPiyqXpR+5fmS3T6Pcdf5
X50e8qEo8KcFLgatgZUEEyk4w9PxH/FAxHbxH/bMrsY65uW5yVer1lC1Z2xtvicg
RGsPpmL3bBhrncGuPTB00xm9gRhhSHXxA0iyxAgDTFlNv8BtqUodyP7GcOrGjrhT
FGg8JAw73DL0BKeu0SuKEa0xj3slVlQQPI7k30P8LzwKFkW7+Pc7MKreMPmYuzvI
IPrA127bZ+f330d4Jy0ZEWI0NZT2uFAtKZjC+bTZYYK4NAbiW76l66y+k9M80F4o
ATCaaQwT8CJxb934PsQIkVot/BUO8sjm15pLHUgHtLssqkuaBgasbAcgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqRXy3ZpMgcwIncZW0dUs4CN38FMB8GA1UdIwQY
MBaAFJi1ynGPO5qTmlE2Qb2FzJT6QBlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEt
YzQyYWIwMTk4MzczLzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEtYzQyYWIwMTk4Mzcz
LzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQ7lC9wU
mlnuXhAZwf0R1pA51wzk4dDFY0/8DppjS8Mf7KJFt5EkO3V4PW9uc/aWHb680aLo
k9oQryxGfZONQTOa8zanPnmfcr3SgW0ft7pSPTAMII1mO/UmczV3FBdtG5jzl8Jg
EITSjEgtJs9a6kAMCyDS1YiKv4T692fTjoyZS+HGZ0il3iA9kPypm+jXNJugFdjw
cbiR3OE7hu3njb/1gWNqlpgvEshghoZbWuEIbrFFM/HJ5HIILtQMMpT+gqekOPCq
9M9WstyNYhBmvWBtevfoapnlMaXXTIm9s1GtejJcMNn0fHUz1DgIx0BMAEc/VyIq
N6uhKCK5//xRfA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:29 2025 by rpki-client