Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: 8U/jfDmwBDHRdvjce5w4+chPJ22QuMUiRKKFg5CX7zo=
Subject key identifier: F4:13:D4:B5:E5:39:C2:AB:3F:96:82:CC:65:65:C0:F3:3D:A7:9B:B1
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 019879AD2A03E3294B2F33F96860B7644C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 10:00:48 +0000
Manifest this update: Tue 05 Aug 2025 10:00:48 +0000
Manifest next update: Wed 06 Aug 2025 10:00:48 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: SmVyq5A1eU8DEJhXNkGYv8UAMXicv996MgzNLDPPyHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:2a:03:e3:29:4b:2f:33:f9:68:60:b7:64:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Aug 5 10:00:48 2025 GMT
Not After : Aug 6 10:00:48 2025 GMT
Subject: CN=f413d4b5e539c2ab3f9682cc6565c0f33da79bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:e2:e1:09:9c:c6:6b:57:09:0b:36:34:66:
5b:de:75:0e:ca:d1:e6:88:1a:58:28:be:9e:84:8d:
06:5a:77:23:42:4a:a4:66:6c:3f:85:1b:95:4a:6c:
ba:de:eb:0b:e8:f7:13:fa:84:3f:67:b8:4c:3a:48:
0f:b8:40:27:dd:05:a4:93:c7:78:8b:8f:aa:a5:7d:
03:07:d4:3b:e7:f5:65:dc:6c:13:ea:ba:95:6a:d3:
71:aa:f4:28:5b:82:7b:79:53:97:7e:5d:2a:80:80:
5f:ea:20:29:1f:d7:cc:e0:72:3b:9c:08:eb:1f:59:
79:23:a3:ca:47:52:e1:d9:85:f0:fd:a5:56:7b:e2:
d1:41:0b:00:24:32:9b:cf:10:41:07:42:2e:c2:f7:
cd:a7:6f:cf:2d:60:b9:0b:31:3e:01:71:e4:55:c8:
be:8f:9b:b8:19:bb:97:38:ba:d5:ba:32:d4:a3:97:
b0:41:dd:e3:e1:f7:d0:da:9b:e4:81:7c:a8:db:82:
0b:ea:ce:d4:bb:57:85:40:3b:9a:2e:a0:fc:a8:a5:
33:ef:cb:f3:39:01:8e:a0:31:57:ea:b0:fe:d3:ad:
5b:67:61:7b:00:fe:c5:ca:b3:de:30:ac:2e:e0:a7:
97:1b:9c:16:39:bc:18:72:38:1e:9d:07:41:48:93:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:D4:B5:E5:39:C2:AB:3F:96:82:CC:65:65:C0:F3:3D:A7:9B:B1
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:99:dc:da:52:30:f2:43:10:21:dd:77:d2:4d:fb:68:f1:59:
4b:56:70:52:cd:5c:2d:12:c5:cc:26:bb:d4:6b:05:36:d0:90:
5f:5f:36:ac:6f:6f:c2:68:a0:9a:c4:c0:a7:d2:c5:c8:d1:01:
65:f8:da:3f:63:ef:2a:13:f6:b1:ca:51:75:dc:7f:81:12:8f:
63:d9:59:8f:2e:4b:ef:cd:6c:17:2a:b8:b2:1a:fc:68:17:4f:
e1:31:a0:ed:7e:e4:39:6f:56:a3:39:d6:29:6c:33:31:98:0b:
3c:18:e9:dd:b8:df:55:d7:29:27:14:9a:0e:58:da:3a:77:e8:
6f:8b:f3:ea:4a:4a:21:87:b8:97:96:b8:76:99:80:6b:b1:91:
bf:30:3d:6b:ad:b8:ba:ed:ef:fb:0e:cc:85:9d:de:23:39:71:
d1:97:6f:9a:13:36:f5:54:06:aa:4e:5a:72:db:db:fc:2b:cf:
0c:1f:ff:54:3c:eb:7d:63:e8:99:86:b3:eb:df:87:17:06:fa:
e5:a8:81:d8:04:7d:05:b1:31:ba:26:ca:75:8e:36:a9:b2:56:
5b:37:71:ec:51:35:72:69:a5:2b:33:2e:fd:e0:67:e6:cc:82:
c2:44:13:66:77:0d:4b:66:89:db:01:b3:8b:b6:56:f2:d8:6e:
b4:90:fc:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rSoD4ylLLzP5aGC3ZEwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NmJhNjIyOWM0NTlkNzY5NWQzNTI5YjEyMDdlMmMyOWIw
ODQyYjEwHhcNMjUwODA1MTAwMDQ4WhcNMjUwODA2MTAwMDQ4WjAzMTEwLwYDVQQD
EyhmNDEzZDRiNWU1MzljMmFiM2Y5NjgyY2M2NTY1YzBmMzNkYTc5YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDi4QmcxmtXCQs2NGZb3nUOytHm
iBpYKL6ehI0GWncjQkqkZmw/hRuVSmy63usL6PcT+oQ/Z7hMOkgPuEAn3QWkk8d4
i4+qpX0DB9Q75/Vl3GwT6rqVatNxqvQoW4J7eVOXfl0qgIBf6iApH9fM4HI7nAjr
H1l5I6PKR1Lh2YXw/aVWe+LRQQsAJDKbzxBBB0IuwvfNp2/PLWC5CzE+AXHkVci+
j5u4GbuXOLrVujLUo5ewQd3j4ffQ2pvkgXyo24IL6s7Uu1eFQDuaLqD8qKUz78vz
OQGOoDFX6rD+061bZ2F7AP7FyrPeMKwu4KeXG5wWObwYcjgenQdBSJMtHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQT1LXlOcKrP5aCzGVlwPM9p5uxMB8GA1UdIwQY
MBaAFJdrpiKcRZ12ldNSmxIH4sKbCEKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjIt
YzhlZTQ2NjQ4ZGJmLzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjItYzhlZTQ2NjQ4ZGJm
LzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpnc2lIw
8kMQId130k37aPFZS1ZwUs1cLRLFzCa71GsFNtCQX182rG9vwmigmsTAp9LFyNEB
ZfjaP2PvKhP2scpRddx/gRKPY9lZjy5L781sFyq4shr8aBdP4TGg7X7kOW9WoznW
KWwzMZgLPBjp3bjfVdcpJxSaDljaOnfob4vz6kpKIYe4l5a4dpmAa7GRvzA9a624
uu3v+w7MhZ3eIzlx0ZdvmhM29VQGqk5actvb/CvPDB//VDzrfWPomYaz69+HFwb6
5aiB2AR9BbExuibKdY42qbJWWzdx7FE1cmmlKzMu/eBn5syCwkQTZncNS2aJ2wGz
i7ZW8thutJD8Fg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:23 2025 by rpki-client