Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: AFA1lWQQaubrMh3f0fHwpx2EucNHMcTivMBk3oKp3Do=
Subject key identifier: FF:42:BB:59:81:35:E1:BE:5F:11:87:95:43:6F:BE:2B:67:13:AF:11
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 019778D485AA87D072DAA86081A71AF5C19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 153D
Signing time: Mon 16 Jun 2025 13:01:23 +0000
Manifest this update: Mon 16 Jun 2025 13:01:23 +0000
Manifest next update: Tue 17 Jun 2025 13:01:23 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: jKyvdtHM+O7Kx1gfk/jmKXgNPKV/EuKxMYjF9Lmt7w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:85:aa:87:d0:72:da:a8:60:81:a7:1a:f5:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Jun 16 13:01:23 2025 GMT
Not After : Jun 17 13:01:23 2025 GMT
Subject: CN=ff42bb598135e1be5f118795436fbe2b6713af11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:50:37:b0:48:54:36:29:d4:67:c0:0b:a3:
32:f1:8b:ab:22:10:84:cd:9f:4c:73:82:44:cc:48:
0b:05:da:3a:86:a5:e5:7d:57:87:e7:dc:17:f0:1e:
8d:1b:11:26:e7:80:b2:29:d5:f9:d3:f6:01:a3:2b:
48:72:a0:29:4e:04:2a:0a:4e:2d:0f:8c:d4:65:73:
e8:11:07:9a:b5:89:ee:da:01:24:d8:ec:1d:3b:be:
00:fa:e8:27:22:25:3e:91:11:d3:45:09:b8:bb:2e:
a9:c0:9e:63:36:92:be:e6:d5:3e:77:6b:75:d2:0f:
4f:dc:45:99:9e:18:22:19:6d:e0:b4:59:45:c9:e2:
9a:14:78:d4:0c:f8:14:95:1b:11:e9:aa:d5:c4:dd:
68:d9:e4:c3:07:b7:06:fc:9c:5e:7c:14:4e:b2:2e:
84:e6:01:fe:a8:41:71:78:e8:8c:10:48:c3:9f:56:
22:a4:29:b3:9b:4e:d4:a3:4a:3c:5f:76:4c:54:06:
a6:4b:2e:a3:ff:65:98:3c:3b:7b:28:66:24:2b:f1:
75:11:b6:a3:55:5d:ad:e9:9b:03:a0:42:ed:8b:d5:
2c:6e:4a:8d:f3:f6:56:0e:fa:de:5d:72:06:f4:ac:
d1:1d:cf:e9:f1:21:cb:c8:eb:a7:df:0b:40:70:be:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:BB:59:81:35:E1:BE:5F:11:87:95:43:6F:BE:2B:67:13:AF:11
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c6:e6:84:56:43:90:65:4a:08:06:40:fb:3d:60:d5:4e:cd:
2e:9c:1b:48:b0:33:6c:d0:e8:65:9e:74:0c:80:7a:fd:9f:d1:
72:b6:96:6d:51:58:81:35:ce:b5:10:75:c7:49:68:0a:45:9e:
3f:57:37:01:c6:68:ec:c1:fa:55:0b:ae:a7:72:6a:c7:f5:d1:
8d:1c:0b:d6:d6:90:d9:47:b8:af:b5:3e:23:0a:0e:c6:5b:07:
9d:83:9e:53:0f:59:6b:c4:0b:dc:17:a1:42:a6:fd:9d:7a:dc:
55:0e:ca:22:47:21:b8:38:bc:58:b2:ff:48:80:dd:86:38:88:
69:39:d4:47:45:9e:14:87:9d:e8:9a:29:50:9e:74:dc:67:70:
70:6a:0c:08:35:ad:e7:80:19:9c:a6:ec:ce:5e:a3:20:d4:20:
82:0e:86:d3:86:64:30:8a:d5:85:fc:56:45:20:53:e0:ea:b0:
d9:44:ae:96:62:91:81:60:f5:ad:73:f0:19:d7:aa:1d:92:e1:
d1:ea:90:e0:fb:c2:d5:8e:5d:37:c4:91:62:ea:2c:9a:2e:be:
3c:71:48:39:ea:09:d1:b2:b4:b9:6a:a9:8d:45:10:18:05:ae:
de:16:cb:05:6d:ce:22:3a:47:c7:52:08:11:c4:3b:d7:e0:02:
51:1c:28:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd41IWqh9By2qhggaca9cGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx
ZjEzOTcwHhcNMjUwNjE2MTMwMTIzWhcNMjUwNjE3MTMwMTIzWjAzMTEwLwYDVQQD
EyhmZjQyYmI1OTgxMzVlMWJlNWYxMTg3OTU0MzZmYmUyYjY3MTNhZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9QN7BIVDYp1GfAC6My8YurIhCE
zZ9Mc4JEzEgLBdo6hqXlfVeH59wX8B6NGxEm54CyKdX50/YBoytIcqApTgQqCk4t
D4zUZXPoEQeatYnu2gEk2OwdO74A+ugnIiU+kRHTRQm4uy6pwJ5jNpK+5tU+d2t1
0g9P3EWZnhgiGW3gtFlFyeKaFHjUDPgUlRsR6arVxN1o2eTDB7cG/JxefBROsi6E
5gH+qEFxeOiMEEjDn1YipCmzm07Uo0o8X3ZMVAamSy6j/2WYPDt7KGYkK/F1Ebaj
VV2t6ZsDoELti9UsbkqN8/ZWDvreXXIG9KzRHc/p8SHLyOun3wtAcL7yiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9Cu1mBNeG+XxGHlUNvvitnE68RMB8GA1UdIwQY
MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt
MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0
LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcbmhFZD
kGVKCAZA+z1g1U7NLpwbSLAzbNDoZZ50DIB6/Z/RcraWbVFYgTXOtRB1x0loCkWe
P1c3AcZo7MH6VQuup3Jqx/XRjRwL1taQ2Ue4r7U+IwoOxlsHnYOeUw9Za8QL3Beh
Qqb9nXrcVQ7KIkchuDi8WLL/SIDdhjiIaTnUR0WeFIed6JopUJ503GdwcGoMCDWt
54AZnKbszl6jINQggg6G04ZkMIrVhfxWRSBT4Oqw2USulmKRgWD1rXPwGdeqHZLh
0eqQ4PvC1Y5dN8SRYuosmi6+PHFIOeoJ0bK0uWqpjUUQGAWu3hbLBW3OIjpHx1II
EcQ71+ACURwoVA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:29:07 2025 by rpki-client