Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
File: l213R7vhqAE1QKcW0lzHh_h9tmo.mft (raw, json)
Hash identifier: KSgwvW16uZ+EZRBzG4nym/nWLPBNS7pwhHQq0X+BpOg=
Subject key identifier: C5:E3:59:51:AC:97:90:25:E0:FB:01:A8:18:BC:E5:1E:F3:6A:94:B7
Authority key identifier: 97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
Certificate issuer: /CN=976d7747bbe1a8013540a716d25cc787f87db66a
Certificate serial: 01988B0EDF67FDD0744B822AD1772B089F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
Manifest number: 0CCD
Signing time: Fri 08 Aug 2025 19:01:04 +0000
Manifest this update: Fri 08 Aug 2025 19:01:04 +0000
Manifest next update: Sat 09 Aug 2025 19:01:04 +0000
Files and hashes: 1: l213R7vhqAE1QKcW0lzHh_h9tmo.crl (hash: KSR3lCM2nOz6HkjZYWbbwLXXZuqDE4uHkZMGQDbDmXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:df:67:fd:d0:74:4b:82:2a:d1:77:2b:08:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976d7747bbe1a8013540a716d25cc787f87db66a
Validity
Not Before: Aug 8 19:01:04 2025 GMT
Not After : Aug 9 19:01:04 2025 GMT
Subject: CN=c5e35951ac979025e0fb01a818bce51ef36a94b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:f3:ec:65:c3:63:88:c1:56:34:2e:71:ce:
47:28:25:dd:34:e5:3f:14:8d:f5:f9:28:7d:87:9b:
77:0f:bd:e8:54:a5:04:ff:d5:4c:49:b1:fd:2b:81:
60:e8:ef:35:8a:ed:61:20:89:db:df:ac:56:97:a1:
29:4d:61:7e:4a:d9:5b:a0:ac:9d:ad:3e:27:cc:49:
88:e9:fe:d7:e4:e3:c5:44:25:67:3a:c0:7b:f4:fe:
f4:c5:86:36:ce:28:4b:af:41:c2:9f:ab:e3:5c:d5:
3a:ea:56:a8:c0:32:93:76:80:7b:55:92:43:04:cb:
ad:b5:12:22:28:c9:7f:db:60:da:f8:e0:5c:4f:7a:
05:7c:a5:72:9a:ff:b2:16:6a:92:b0:31:10:24:88:
52:a7:cf:6d:10:f5:49:31:11:d3:b1:69:e4:5f:2f:
d2:6e:0a:24:aa:7e:83:99:53:fc:31:84:2d:c0:99:
8b:1e:0b:f2:e3:d6:77:99:21:64:4c:45:7d:c0:ee:
3a:4d:2d:14:d8:28:4d:ce:e3:ba:63:06:dd:fe:fb:
3b:3f:da:2e:81:e4:fc:4b:db:05:67:3c:34:ed:45:
25:48:e7:a7:4c:40:03:41:cb:a5:ed:78:ae:6d:34:
44:bf:c2:87:55:69:dc:4b:f7:70:14:65:11:29:01:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E3:59:51:AC:97:90:25:E0:FB:01:A8:18:BC:E5:1E:F3:6A:94:B7
X509v3 Authority Key Identifier:
keyid:97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:71:59:5d:aa:ce:23:00:e6:dc:c7:50:63:7a:7d:90:e4:cf:
6e:ce:1b:5f:ce:03:5f:79:54:27:28:d5:e9:9e:3a:b1:9f:9f:
6a:6b:47:d1:f6:24:a5:87:79:fb:f9:38:01:a6:12:cd:54:ec:
c6:d1:9d:22:ae:ed:e1:93:47:f6:4a:6e:57:b4:f2:3d:28:ad:
e1:eb:82:c7:91:5a:d1:05:b6:32:eb:1b:8f:45:7d:eb:07:15:
83:65:9e:84:14:9d:44:e1:5a:26:0f:03:04:d4:c5:b8:ef:f5:
32:1f:a6:6a:42:6a:e9:5b:20:0c:b7:94:f3:a1:6a:2e:00:11:
7f:29:be:9e:16:a6:07:4e:d6:cc:7d:bd:74:17:a8:cb:56:10:
c1:08:a7:fa:db:2f:34:05:ef:eb:35:52:0f:2f:a0:83:00:60:
1f:94:55:78:6d:6b:4f:4e:19:fd:d1:a1:1a:01:2b:32:f3:e8:
23:c0:f9:fa:41:6f:82:62:34:a1:d0:31:3c:06:fd:56:e1:fb:
a4:cd:75:aa:06:37:06:10:aa:dd:52:f6:e9:40:1a:6e:eb:fc:
61:6f:92:36:d7:db:70:04:64:3f:fc:06:47:94:c8:e7:35:85:
5f:22:68:71:52:68:3d:d1:f9:d7:22:59:62:e0:f6:02:ba:42:
94:80:08:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDt9n/dB0S4Iq0XcrCJ9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NmQ3NzQ3YmJlMWE4MDEzNTQwYTcxNmQyNWNjNzg3Zjg3
ZGI2NmEwHhcNMjUwODA4MTkwMTA0WhcNMjUwODA5MTkwMTA0WjAzMTEwLwYDVQQD
EyhjNWUzNTk1MWFjOTc5MDI1ZTBmYjAxYTgxOGJjZTUxZWYzNmE5NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqnz7GXDY4jBVjQucc5HKCXdNOU/
FI31+Sh9h5t3D73oVKUE/9VMSbH9K4Fg6O81iu1hIInb36xWl6EpTWF+StlboKyd
rT4nzEmI6f7X5OPFRCVnOsB79P70xYY2zihLr0HCn6vjXNU66laowDKTdoB7VZJD
BMuttRIiKMl/22Da+OBcT3oFfKVymv+yFmqSsDEQJIhSp89tEPVJMRHTsWnkXy/S
bgokqn6DmVP8MYQtwJmLHgvy49Z3mSFkTEV9wO46TS0U2ChNzuO6Ywbd/vs7P9ou
geT8S9sFZzw07UUlSOenTEADQcul7XiubTREv8KHVWncS/dwFGURKQHjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXjWVGsl5Al4PsBqBi85R7zapS3MB8GA1UdIwQY
MBaAFJdtd0e74agBNUCnFtJcx4f4fbZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDIxM1I3dmhxQUUxUUtjVzBsekhoX2g5dG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNDkyZmYtMzE1NC00MzA0LWI5Mjct
ZDk5ODMyNjU3YTQ1LzEvbDIxM1I3dmhxQUUxUUtjVzBsekhoX2g5dG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iNDkyZmYtMzE1NC00MzA0LWI5MjctZDk5ODMyNjU3YTQ1
LzEvbDIxM1I3dmhxQUUxUUtjVzBsekhoX2g5dG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnFZXarO
IwDm3MdQY3p9kOTPbs4bX84DX3lUJyjV6Z46sZ+famtH0fYkpYd5+/k4AaYSzVTs
xtGdIq7t4ZNH9kpuV7TyPSit4euCx5Fa0QW2Musbj0V96wcVg2WehBSdROFaJg8D
BNTFuO/1Mh+makJq6VsgDLeU86FqLgARfym+nhamB07WzH29dBeoy1YQwQin+tsv
NAXv6zVSDy+ggwBgH5RVeG1rT04Z/dGhGgErMvPoI8D5+kFvgmI0odAxPAb9VuH7
pM11qgY3BhCq3VL26UAabuv8YW+SNtfbcARkP/wGR5TI5zWFXyJocVJoPdH51yJZ
YuD2ArpClIAISg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:08 2025 by rpki-client