Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: c1nexMVOJWxf+3YdCMQDsExvYbpnm13vsbZRlqjoofw=
Subject key identifier: 35:81:8C:44:DE:0E:B6:AE:B0:25:DA:2C:03:97:FB:63:9A:E8:F8:42
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 01988DD87998D7838A8204DC4CB7B905775C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 04A6
Signing time: Sat 09 Aug 2025 08:00:31 +0000
Manifest this update: Sat 09 Aug 2025 08:00:31 +0000
Manifest next update: Sun 10 Aug 2025 08:00:31 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: FhGVrD6QfJn2aoAtYaljL88givMWb5ePRtnQWpjsIj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:79:98:d7:83:8a:82:04:dc:4c:b7:b9:05:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Aug 9 08:00:31 2025 GMT
Not After : Aug 10 08:00:31 2025 GMT
Subject: CN=35818c44de0eb6aeb025da2c0397fb639ae8f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:13:d2:70:f3:ea:05:2c:4d:10:d6:2b:41:
cd:69:ab:a9:be:c0:4e:81:3d:a3:00:b3:12:d1:5f:
3f:9f:1d:21:0d:13:78:04:85:50:26:40:0e:e7:9f:
0f:7c:d1:bd:9b:e9:39:8c:f5:87:0e:2c:99:14:38:
58:8f:a2:06:70:b1:7b:d9:3a:9d:88:1c:d2:ee:03:
e3:ce:29:90:07:5d:57:3e:99:ef:dc:15:17:4b:d4:
55:81:08:d0:b3:1f:70:50:e1:4e:6d:36:94:5c:28:
20:e5:f3:67:23:bd:fa:81:49:0e:bc:c5:0f:d6:b9:
9f:f6:56:07:7e:d4:b5:a9:b6:aa:7c:58:91:6e:4a:
65:f8:e7:f0:f5:0b:23:83:85:7b:2d:6b:80:67:2c:
b9:74:d3:ba:b3:19:24:ad:4f:0d:0f:c8:e0:4d:5e:
f9:c0:f2:79:57:0d:6d:89:8a:63:3f:9d:f6:2d:54:
05:83:14:11:c1:f5:65:a6:42:34:a1:f5:6f:39:47:
b7:88:98:21:b5:60:e4:48:f2:73:38:7d:5b:7a:26:
77:9c:75:3a:b1:3f:0f:69:38:00:f6:a9:a4:4a:ef:
06:2c:40:95:6d:9c:bc:b1:fb:18:e4:d0:7a:26:fa:
ae:32:34:b0:51:a2:1a:8a:df:65:23:bc:f8:b8:28:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:8C:44:DE:0E:B6:AE:B0:25:DA:2C:03:97:FB:63:9A:E8:F8:42
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:75:ac:c6:df:3a:c6:e0:05:54:b6:8f:f2:4c:e1:77:17:
88:cd:4e:fa:b2:52:12:0b:81:49:f3:d7:80:d1:b0:15:14:ce:
2b:77:5a:cb:8b:f0:09:d5:70:04:4f:ba:90:85:4d:c3:50:9a:
53:00:d8:0a:b4:6c:bc:e4:28:ab:ed:41:87:3e:80:2e:3b:00:
01:c1:b0:00:6a:eb:69:88:73:88:37:a8:12:62:88:05:e1:5c:
a7:40:13:51:8f:00:0f:71:06:ee:10:f0:a1:9a:95:58:08:9d:
2b:aa:37:c2:4c:4b:24:54:2c:d6:ee:34:29:62:69:16:c2:26:
7a:b7:6e:76:b5:66:82:16:28:08:67:4d:f0:3d:76:93:4a:c5:
92:03:fc:82:e1:b4:f1:9f:9b:7d:fc:b1:fa:21:dc:1a:43:6c:
d0:76:fa:47:01:4c:af:cc:4c:c9:cd:19:23:29:2e:18:6a:6c:
04:6f:ce:af:50:c9:64:c5:cc:c2:c8:38:9a:29:5d:64:92:7b:
c3:23:37:f6:1f:11:04:10:42:66:a0:20:12:84:81:60:8a:a8:
01:20:3e:09:13:23:d6:73:4e:ce:a6:84:40:16:5e:45:50:bc:
bd:46:22:5a:cc:c6:cd:03:d2:79:cc:4f:88:dc:ca:0c:09:46:
86:3a:e8:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2HmY14OKggTcTLe5BXdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjEwYzg3NTBjMzM3ZGYwNDc5YzVhMGViNWI3OGI0OWEx
N2ZmM2UwHhcNMjUwODA5MDgwMDMxWhcNMjUwODEwMDgwMDMxWjAzMTEwLwYDVQQD
EygzNTgxOGM0NGRlMGViNmFlYjAyNWRhMmMwMzk3ZmI2MzlhZThmODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sMT0nDz6gUsTRDWK0HNaaupvsBO
gT2jALMS0V8/nx0hDRN4BIVQJkAO558PfNG9m+k5jPWHDiyZFDhYj6IGcLF72Tqd
iBzS7gPjzimQB11XPpnv3BUXS9RVgQjQsx9wUOFObTaUXCgg5fNnI736gUkOvMUP
1rmf9lYHftS1qbaqfFiRbkpl+Ofw9Qsjg4V7LWuAZyy5dNO6sxkkrU8ND8jgTV75
wPJ5Vw1tiYpjP532LVQFgxQRwfVlpkI0ofVvOUe3iJghtWDkSPJzOH1beiZ3nHU6
sT8PaTgA9qmkSu8GLECVbZy8sfsY5NB6JvquMjSwUaIait9lI7z4uCjCBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWBjETeDrausCXaLAOX+2Oa6PhCMB8GA1UdIwQY
MBaAFJRhDIdQwzffBHnFoOtbeLSaF/8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUt
YTJlZmYzZjFhY2Q1LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUtYTJlZmYzZjFhY2Q1
LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1Z1rMbf
OsbgBVS2j/JM4XcXiM1O+rJSEguBSfPXgNGwFRTOK3day4vwCdVwBE+6kIVNw1Ca
UwDYCrRsvOQoq+1Bhz6ALjsAAcGwAGrraYhziDeoEmKIBeFcp0ATUY8AD3EG7hDw
oZqVWAidK6o3wkxLJFQs1u40KWJpFsImerdudrVmghYoCGdN8D12k0rFkgP8guG0
8Z+bffyx+iHcGkNs0Hb6RwFMr8xMyc0ZIykuGGpsBG/Or1DJZMXMwsg4mildZJJ7
wyM39h8RBBBCZqAgEoSBYIqoASA+CRMj1nNOzqaEQBZeRVC8vUYiWszGzQPSecxP
iNzKDAlGhjrocg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:32 2025 by rpki-client