Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: 6bKNJuj6yZYCZrewqTK02j2fibe7OdvgNZaOMB7287k=
Subject key identifier: 42:1A:77:D9:A2:BA:A3:FF:44:BB:65:15:1B:A1:0B:BC:B3:EA:41:0A
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01977A1D2F4101B23A71343472F6C2C121CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 15DC
Signing time: Mon 16 Jun 2025 19:00:22 +0000
Manifest this update: Mon 16 Jun 2025 19:00:22 +0000
Manifest next update: Tue 17 Jun 2025 19:00:22 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: vxiOqglP31NU539UoHWX1LcVy2cwI+Mp66XVANuW5XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:2f:41:01:b2:3a:71:34:34:72:f6:c2:c1:21:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jun 16 19:00:22 2025 GMT
Not After : Jun 17 19:00:22 2025 GMT
Subject: CN=421a77d9a2baa3ff44bb65151ba10bbcb3ea410a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:8d:a7:a5:c6:dc:91:06:c6:fb:1a:8e:7b:
ac:14:db:27:1e:8c:63:08:78:9c:7d:c7:83:e7:d0:
eb:a4:6f:26:fa:d2:55:46:84:cb:3d:ae:7f:5c:f2:
0f:cf:4f:76:33:fc:5d:20:df:b1:60:1f:06:86:5c:
44:26:43:fb:58:e2:b3:f1:1d:8a:01:3e:01:96:56:
a3:a4:07:17:7c:f6:3e:06:8c:2d:f8:94:dd:12:9f:
00:f2:34:d1:05:f0:9f:d2:af:a5:d0:f6:5a:1c:b5:
c4:d3:85:3f:45:a6:49:23:64:b2:cd:7b:a1:83:08:
03:6c:e2:e9:48:82:8c:ab:46:56:3d:91:04:54:dc:
85:dc:cf:23:ad:31:2b:1b:71:93:a7:79:3f:aa:6c:
1c:8b:12:2b:e8:c0:ff:1a:f3:d4:d5:ad:fd:26:81:
58:73:44:8c:d1:d7:0b:70:4f:3a:2c:60:4f:29:f6:
22:cb:03:e5:15:de:d9:e6:c9:dc:c8:80:5e:d0:41:
1b:08:3d:0b:7b:9c:0a:ba:5b:19:02:df:2f:62:65:
42:c0:f6:ff:e4:cf:07:99:d8:81:22:b8:81:c6:90:
04:a4:e5:e8:18:6f:84:c5:ed:48:50:37:e2:9a:cc:
29:7a:32:d2:e0:c9:15:72:e5:d8:09:74:f3:22:b1:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:77:D9:A2:BA:A3:FF:44:BB:65:15:1B:A1:0B:BC:B3:EA:41:0A
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:fa:48:c2:66:60:f0:69:c2:9c:7a:7e:b8:cc:21:2c:0d:
f1:70:49:72:85:99:77:3b:e5:c2:fd:ea:92:56:93:a9:b8:c6:
74:e0:a2:21:8f:22:c4:50:e0:f4:46:3d:d0:21:de:cd:a1:b2:
22:6d:13:b9:76:53:0e:1e:1c:2d:d7:26:ad:fe:9a:e1:74:74:
5d:47:a6:34:0e:19:24:a1:73:0d:ab:cd:29:4b:f1:6c:56:de:
d9:99:cc:cc:8c:11:96:87:28:42:6d:70:7a:21:d0:c3:c0:c4:
ec:11:44:2d:00:6d:89:93:09:85:3e:52:cf:c4:e3:f0:44:13:
7f:5f:5e:98:c2:32:5e:e1:6a:ff:dd:d1:2a:f4:59:3d:46:08:
a3:bf:fe:48:9c:44:a7:94:d3:86:9e:98:41:99:b6:46:80:61:
ca:37:ed:72:71:42:9f:86:73:1f:2d:f4:c7:81:bf:70:a0:15:
f5:3b:ce:cf:1b:e3:8f:58:5b:0e:86:83:61:58:67:1b:09:c3:
2c:14:f4:e9:c7:a6:51:ad:d2:f7:86:b3:d1:f9:5c:09:2d:12:
61:e7:22:3e:e1:cf:5e:5e:45:50:c9:79:b7:6d:4c:e2:59:41:
7b:32:72:c2:e9:6c:73:f6:6a:97:a9:4c:9b:69:20:34:3e:0b:
f1:26:4c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6HS9BAbI6cTQ0cvbCwSHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUwNjE2MTkwMDIyWhcNMjUwNjE3MTkwMDIyWjAzMTEwLwYDVQQD
Eyg0MjFhNzdkOWEyYmFhM2ZmNDRiYjY1MTUxYmExMGJiY2IzZWE0MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBmNp6XG3JEGxvsajnusFNsnHoxj
CHicfceD59DrpG8m+tJVRoTLPa5/XPIPz092M/xdIN+xYB8GhlxEJkP7WOKz8R2K
AT4BllajpAcXfPY+Bowt+JTdEp8A8jTRBfCf0q+l0PZaHLXE04U/RaZJI2SyzXuh
gwgDbOLpSIKMq0ZWPZEEVNyF3M8jrTErG3GTp3k/qmwcixIr6MD/GvPU1a39JoFY
c0SM0dcLcE86LGBPKfYiywPlFd7Z5sncyIBe0EEbCD0Le5wKulsZAt8vYmVCwPb/
5M8HmdiBIriBxpAEpOXoGG+Exe1IUDfimswpejLS4MkVcuXYCXTzIrHImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIad9miuqP/RLtlFRuhC7yz6kEKMB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIT6SMJm
YPBpwpx6frjMISwN8XBJcoWZdzvlwv3qklaTqbjGdOCiIY8ixFDg9EY90CHezaGy
Im0TuXZTDh4cLdcmrf6a4XR0XUemNA4ZJKFzDavNKUvxbFbe2ZnMzIwRlocoQm1w
eiHQw8DE7BFELQBtiZMJhT5Sz8Tj8EQTf19emMIyXuFq/93RKvRZPUYIo7/+SJxE
p5TThp6YQZm2RoBhyjftcnFCn4ZzHy30x4G/cKAV9TvOzxvjj1hbDoaDYVhnGwnD
LBT06cemUa3S94az0flcCS0SYeciPuHPXl5FUMl5t21M4llBezJywulsc/Zql6lM
m2kgND4L8SZM+A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:57:27 2025 by rpki-client