Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: hDQ9hPJMzVos+CPrT0aicCc43aooBWgcdPpx7c0RZ1c=
Subject key identifier: 9F:B1:8C:62:38:2B:48:5B:C7:A7:E6:39:A4:31:1A:FB:9B:52:9D:D2
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 01976C62300805196BDC413805C9AC9A4936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 03:01:03 +0000
Manifest this update: Sat 14 Jun 2025 03:01:03 +0000
Manifest next update: Sun 15 Jun 2025 03:01:03 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: a/ChgLXCneHVTSjuOnVDkCTGV5DwCyZ1johVRB6oZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:30:08:05:19:6b:dc:41:38:05:c9:ac:9a:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Jun 14 03:01:03 2025 GMT
Not After : Jun 15 03:01:03 2025 GMT
Subject: CN=9fb18c62382b485bc7a7e639a4311afb9b529dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:59:5f:f3:2d:de:13:a1:70:91:ba:e9:e2:
78:80:21:02:b3:4c:f7:5d:a8:53:59:ee:b4:b1:6f:
75:31:30:9f:15:71:cf:59:49:f2:00:9f:47:35:3a:
1a:60:ed:50:38:66:f1:46:35:74:dc:cc:95:fb:09:
94:55:15:0d:bb:28:d9:f0:d2:75:89:a0:63:0d:2d:
ee:40:af:26:bd:24:24:62:39:51:dd:aa:22:b5:d4:
d0:f4:20:69:7f:a6:1a:74:88:1c:79:66:f3:9d:4b:
7f:1f:d9:98:7e:d4:77:b6:d2:da:eb:c2:5b:db:9d:
c5:62:3f:18:ae:9e:b5:a6:fa:20:93:62:46:e7:f9:
f4:c9:2d:49:e6:ce:3c:c8:94:2b:13:fb:c7:42:b9:
e2:01:7c:5a:0b:a9:69:8c:7a:be:ad:eb:54:6c:3c:
95:17:5e:1c:29:89:34:21:ec:62:d6:79:23:87:f3:
df:40:c7:31:1e:ca:79:e7:68:b3:2b:8e:81:5b:5f:
c3:36:41:91:e8:16:55:66:6a:de:66:e4:9d:53:a2:
cc:1e:55:ee:29:71:54:bd:5c:87:b3:a1:df:20:7d:
1b:54:fb:cc:5b:67:72:90:ef:7d:89:26:bc:22:7a:
d2:51:8a:bd:28:09:40:60:f4:ef:8f:7a:69:15:1e:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:8C:62:38:2B:48:5B:C7:A7:E6:39:A4:31:1A:FB:9B:52:9D:D2
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:c6:9b:4d:8f:63:e0:bd:fc:18:d0:aa:21:d2:40:4b:4b:
9e:bf:4c:99:47:75:5f:79:98:de:a1:4d:41:e0:14:9d:dd:48:
68:e2:9f:c7:03:4c:8a:77:62:04:ae:1c:9a:81:85:04:f4:44:
a3:6d:8e:d9:5d:9f:47:f5:e9:bb:64:e8:92:cd:be:9b:9a:73:
de:13:dc:cd:c7:20:a2:20:12:e2:23:7e:24:cb:e0:fc:51:6c:
17:66:a2:2b:87:69:fe:2c:10:a3:b1:82:92:4a:6f:00:43:0e:
e3:fa:f9:cc:97:1f:6f:c4:17:72:92:ae:45:e6:40:0b:c0:a8:
6d:4f:cd:f3:2e:dd:5a:ab:d3:75:92:d0:bc:db:fa:78:62:03:
87:ee:78:6e:b6:bd:1d:de:b0:52:72:99:e0:54:bb:29:8a:3c:
ce:db:06:e0:8c:1c:3d:fb:25:3f:1c:ad:0d:ee:63:16:a1:39:
45:c0:da:93:4a:7d:e9:bb:e2:d4:70:fb:58:11:fd:9d:51:de:
89:4f:8d:13:73:97:e0:aa:b0:89:d3:e9:d4:16:9d:3c:3e:45:
e8:35:4a:76:90:23:ca:ba:3b:c4:96:0e:ce:66:0e:9b:5f:d8:
1c:01:fc:59:e5:76:75:8e:f3:9a:c2:24:f5:4f:af:7f:f8:53:
52:27:da:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYjAIBRlr3EE4Bcmsmkk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1
MDEyN2EwHhcNMjUwNjE0MDMwMTAzWhcNMjUwNjE1MDMwMTAzWjAzMTEwLwYDVQQD
Eyg5ZmIxOGM2MjM4MmI0ODViYzdhN2U2MzlhNDMxMWFmYjliNTI5ZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ZZX/Mt3hOhcJG66eJ4gCECs0z3
XahTWe60sW91MTCfFXHPWUnyAJ9HNToaYO1QOGbxRjV03MyV+wmUVRUNuyjZ8NJ1
iaBjDS3uQK8mvSQkYjlR3aoitdTQ9CBpf6YadIgceWbznUt/H9mYftR3ttLa68Jb
253FYj8Yrp61pvogk2JG5/n0yS1J5s48yJQrE/vHQrniAXxaC6lpjHq+retUbDyV
F14cKYk0Iexi1nkjh/PfQMcxHsp552izK46BW1/DNkGR6BZVZmreZuSdU6LMHlXu
KXFUvVyHs6HfIH0bVPvMW2dykO99iSa8InrSUYq9KAlAYPTvj3ppFR5ENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+xjGI4K0hbx6fmOaQxGvubUp3SMB8GA1UdIwQY
MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt
YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi
LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoXGm02P
Y+C9/BjQqiHSQEtLnr9MmUd1X3mY3qFNQeAUnd1IaOKfxwNMindiBK4cmoGFBPRE
o22O2V2fR/Xpu2Toks2+m5pz3hPczccgoiAS4iN+JMvg/FFsF2aiK4dp/iwQo7GC
kkpvAEMO4/r5zJcfb8QXcpKuReZAC8CobU/N8y7dWqvTdZLQvNv6eGIDh+54bra9
Hd6wUnKZ4FS7KYo8ztsG4IwcPfslPxytDe5jFqE5RcDak0p96bvi1HD7WBH9nVHe
iU+NE3OX4KqwidPp1BadPD5F6DVKdpAjyro7xJYOzmYOm1/YHAH8WeV2dY7zmsIk
9U+vf/hTUifaeg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:56 2025 by rpki-client