Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: +P9JevgEpweGhzOI3VeUvE8IBGNUzOOe89oGQnpd3yQ=
Subject key identifier: 43:BB:AB:36:F8:02:DF:9F:04:BE:21:CD:23:92:49:4A:FF:52:4D:F7
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019776E53C9BC99E7C4EC1174B28685D9E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 10AB
Signing time: Mon 16 Jun 2025 04:00:24 +0000
Manifest this update: Mon 16 Jun 2025 04:00:24 +0000
Manifest next update: Tue 17 Jun 2025 04:00:24 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: NesJ6aKsfOeYC9F6k+M+BJuOcVFJyWqL6BueA5+8Puw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:3c:9b:c9:9e:7c:4e:c1:17:4b:28:68:5d:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Jun 16 04:00:24 2025 GMT
Not After : Jun 17 04:00:24 2025 GMT
Subject: CN=43bbab36f802df9f04be21cd2392494aff524df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:08:9e:69:c6:71:c9:42:84:5e:b4:c8:60:
01:ce:a9:c1:c8:2b:86:b0:5e:0e:b8:93:b8:19:f3:
20:7f:fc:b2:6b:3d:11:2f:a7:1b:b2:a6:26:e8:9a:
94:9d:7a:f0:bc:45:6c:8f:50:b7:44:0e:e5:0d:96:
48:7b:17:b8:b8:4c:70:92:ba:26:1e:0a:29:50:df:
34:a1:d9:9d:b7:76:65:40:13:b6:7c:75:27:a0:a9:
74:dd:b5:38:7f:d4:b9:71:8c:d6:97:1e:46:3f:5f:
70:60:3c:03:74:58:78:e1:70:6a:f0:0b:9a:f8:21:
6e:d6:0f:5a:5b:ca:54:eb:70:6c:7b:18:13:f4:57:
4f:5c:08:2b:0d:f7:71:d7:4f:c8:89:e5:fe:b1:e9:
59:f6:92:cd:7d:50:69:e0:1b:44:7d:78:ec:98:72:
dd:52:b3:91:0e:de:14:a7:33:3a:41:37:d1:0a:95:
0d:6d:2b:e9:3f:b1:c7:91:c7:30:f5:31:40:3a:e8:
8a:3f:2f:7b:3d:a2:3a:91:67:69:82:7a:50:29:9f:
25:f0:9b:82:cb:46:3e:71:1c:ad:30:01:c1:d1:59:
6a:97:57:b1:4f:ab:4f:4a:1c:52:8d:03:bb:78:ad:
d0:99:33:8c:e7:31:e0:3e:73:c4:a3:52:bb:a9:ce:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:AB:36:F8:02:DF:9F:04:BE:21:CD:23:92:49:4A:FF:52:4D:F7
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:a3:21:34:08:d9:35:a1:99:1d:6d:a2:4d:f2:66:d0:e3:
12:68:c6:69:77:39:c7:37:13:4b:d5:3b:8b:66:64:26:0b:a5:
1d:64:6b:1e:de:20:75:63:2c:c0:ac:c0:d4:c3:d4:e8:40:fe:
0a:d0:59:82:69:91:32:9b:5e:21:05:9b:0c:6e:ac:8a:d3:c0:
da:18:8b:d5:3b:f1:cf:10:67:27:f9:aa:a1:ca:a3:7d:58:a7:
0a:a7:4c:16:cf:d8:fb:37:7a:57:d5:d6:ce:74:1c:c9:f6:d2:
1d:ad:20:68:4d:a4:65:ec:c2:d3:1f:86:ea:db:2c:0d:be:56:
7c:3a:b2:16:cf:dc:d4:e5:68:8e:fa:91:e6:0b:8d:ac:61:df:
58:26:42:cd:34:53:3d:cf:a3:e7:33:f7:c0:9d:6a:f8:37:80:
5e:b9:83:8a:22:41:43:eb:d3:12:42:1d:db:55:7a:49:d7:01:
e4:b5:6e:d5:c8:04:a0:10:16:44:bd:9c:59:c5:3e:3e:68:a6:
d1:ff:38:cf:9b:bc:8c:97:9d:77:15:9d:d0:15:eb:05:17:95:
52:5f:89:da:f8:20:b2:a3:48:4a:3f:4d:59:68:e0:c9:97:57:
fa:cb:78:79:b0:8f:f7:48:db:e9:18:7d:2f:87:e7:91:3d:34:
f9:de:86:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25TybyZ58TsEXSyhoXZ4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZGU4NWM2ODRmY2ZmODNlYzQxNDhhYjVmNmY2N2NkMTUw
NGY5M2QwHhcNMjUwNjE2MDQwMDI0WhcNMjUwNjE3MDQwMDI0WjAzMTEwLwYDVQQD
Eyg0M2JiYWIzNmY4MDJkZjlmMDRiZTIxY2QyMzkyNDk0YWZmNTI0ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXAInmnGcclChF60yGABzqnByCuG
sF4OuJO4GfMgf/yyaz0RL6cbsqYm6JqUnXrwvEVsj1C3RA7lDZZIexe4uExwkrom
HgopUN80odmdt3ZlQBO2fHUnoKl03bU4f9S5cYzWlx5GP19wYDwDdFh44XBq8Aua
+CFu1g9aW8pU63BsexgT9FdPXAgrDfdx10/IieX+selZ9pLNfVBp4BtEfXjsmHLd
UrORDt4UpzM6QTfRCpUNbSvpP7HHkccw9TFAOuiKPy97PaI6kWdpgnpQKZ8l8JuC
y0Y+cRytMAHB0Vlql1exT6tPShxSjQO7eK3QmTOM5zHgPnPEo1K7qc7gawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO7qzb4At+fBL4hzSOSSUr/Uk33MB8GA1UdIwQY
MBaAFJfehcaE/P+D7EFIq19vZ80VBPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjkt
NTAzMGQwYWU2ZWJjLzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjktNTAzMGQwYWU2ZWJj
LzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPmjITQI
2TWhmR1tok3yZtDjEmjGaXc5xzcTS9U7i2ZkJgulHWRrHt4gdWMswKzA1MPU6ED+
CtBZgmmRMpteIQWbDG6sitPA2hiL1TvxzxBnJ/mqocqjfVinCqdMFs/Y+zd6V9XW
znQcyfbSHa0gaE2kZezC0x+G6tssDb5WfDqyFs/c1OVojvqR5guNrGHfWCZCzTRT
Pc+j5zP3wJ1q+DeAXrmDiiJBQ+vTEkId21V6SdcB5LVu1cgEoBAWRL2cWcU+Pmim
0f84z5u8jJeddxWd0BXrBReVUl+J2vggsqNISj9NWWjgyZdX+st4ebCP90jb6Rh9
L4fnkT00+d6GmA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:23:36 2025 by rpki-client