Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: mZRmhFwOwTzuMn1fK5Wb9cLaWEJWm2BjlbC+6KENcM0=
Subject key identifier: 75:07:29:2C:20:67:4F:B0:94:AE:69:1B:76:C2:88:80:48:EC:88:B8
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 01976BBD556386C8525CFC1D477360F6C8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 0EB1
Signing time: Sat 14 Jun 2025 00:00:59 +0000
Manifest this update: Sat 14 Jun 2025 00:00:59 +0000
Manifest next update: Sun 15 Jun 2025 00:00:59 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: OZO6X6SkFMfsAxNUBGxrwA8EAeUqYvNonJ0ecJM/4kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:55:63:86:c8:52:5c:fc:1d:47:73:60:f6:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Jun 14 00:00:59 2025 GMT
Not After : Jun 15 00:00:59 2025 GMT
Subject: CN=7507292c20674fb094ae691b76c2888048ec88b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:35:5a:09:c6:68:45:1a:6b:34:f4:27:ec:
75:1f:7b:4c:51:23:e1:07:b8:54:78:d7:50:ad:48:
79:b5:52:0c:85:c9:a3:f2:34:b5:0c:5d:34:a9:24:
47:4b:83:a5:9b:60:2e:0e:f2:5e:23:fc:bb:e3:b6:
98:7f:86:0d:d5:ff:2b:37:ca:6e:bd:bb:f3:df:b6:
22:32:ce:10:c3:3c:bf:e1:df:65:af:10:a6:d6:d3:
c0:b0:c9:66:4b:db:d8:8c:df:84:ef:95:b1:f2:07:
cb:3c:97:30:6a:42:9b:52:b0:00:0b:77:47:48:13:
f7:9e:e6:c7:d9:42:62:15:b1:3a:85:8f:ec:ac:a3:
0a:41:d6:11:45:f3:4c:9e:da:ee:3f:d3:d9:36:c6:
a2:e4:2f:08:97:bf:5b:70:07:f8:ba:07:b3:81:a4:
6d:14:0f:43:6d:07:78:97:4b:e1:49:7a:7c:e1:46:
37:ed:0d:2d:2a:6e:29:e9:17:74:27:cc:21:67:c7:
84:67:b9:29:ff:66:e9:49:5d:ce:50:8b:68:c9:85:
85:1f:dc:ba:39:46:87:b5:b3:7f:95:33:c0:c0:ba:
3f:dd:6c:38:98:8a:32:61:22:72:7a:81:60:e1:9d:
52:13:a8:32:fa:e5:0e:ff:00:b9:49:fb:78:9f:ee:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:29:2C:20:67:4F:B0:94:AE:69:1B:76:C2:88:80:48:EC:88:B8
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:cd:43:6b:61:dd:a8:4e:f7:33:9f:3f:bf:12:3e:ee:da:
b0:74:dd:12:3c:25:b3:de:0d:b9:8f:48:5a:f9:2a:5f:64:78:
fb:0e:17:15:18:7c:82:53:c4:94:24:15:dd:da:68:3b:d3:bb:
dd:6c:a1:32:e3:71:64:31:16:fb:b0:59:62:3d:fd:80:aa:8f:
da:d0:91:a6:7f:f0:8a:79:7d:25:0b:3e:4d:70:f2:02:24:ae:
9e:72:b0:1d:a2:62:0e:88:dd:5d:9f:0c:d5:57:0d:67:99:fd:
f7:a5:7b:bf:19:9c:62:0b:b9:63:2e:78:f4:db:27:e4:1a:07:
df:b1:2c:aa:09:b6:1e:5c:57:46:08:ff:eb:9b:99:12:cc:0a:
1c:ea:58:0e:7b:63:23:8e:62:be:07:39:cd:f1:6a:08:a5:0b:
5f:3b:d9:ca:fc:75:f8:6a:aa:17:79:a0:e8:8d:a6:a2:45:c8:
2d:55:0c:c3:75:c1:26:d5:c2:51:27:ea:7f:0b:a7:48:cc:00:
10:dc:d6:72:d0:23:d0:62:69:49:3e:18:1e:7e:86:81:b4:1f:
4a:2f:a4:87:5f:59:f2:98:cf:c4:d1:cc:24:47:31:d0:2f:5d:
cf:b3:24:f4:2f:25:fb:a5:b7:39:de:2c:d1:db:8e:da:8e:dd:
2e:74:8d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvVVjhshSXPwdR3Ng9sjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDcyZTg1OTk1NzM1NWRhNWRkZDEzNDk2ZDcwZDcwNzcz
NDkxZjkwHhcNMjUwNjE0MDAwMDU5WhcNMjUwNjE1MDAwMDU5WjAzMTEwLwYDVQQD
Eyg3NTA3MjkyYzIwNjc0ZmIwOTRhZTY5MWI3NmMyODg4MDQ4ZWM4OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8g1WgnGaEUaazT0J+x1H3tMUSPh
B7hUeNdQrUh5tVIMhcmj8jS1DF00qSRHS4Olm2AuDvJeI/y747aYf4YN1f8rN8pu
vbvz37YiMs4Qwzy/4d9lrxCm1tPAsMlmS9vYjN+E75Wx8gfLPJcwakKbUrAAC3dH
SBP3nubH2UJiFbE6hY/srKMKQdYRRfNMntruP9PZNsai5C8Il79bcAf4ugezgaRt
FA9DbQd4l0vhSXp84UY37Q0tKm4p6Rd0J8whZ8eEZ7kp/2bpSV3OUItoyYWFH9y6
OUaHtbN/lTPAwLo/3Ww4mIoyYSJyeoFg4Z1SE6gy+uUO/wC5Sft4n+64JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUHKSwgZ0+wlK5pG3bCiIBI7Ii4MB8GA1UdIwQY
MBaAFJRHLoWZVzVdpd3RNJbXDXB3NJH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMt
NjBkMWVkODBjN2NmLzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMtNjBkMWVkODBjN2Nm
LzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVfNQ2th
3ahO9zOfP78SPu7asHTdEjwls94NuY9IWvkqX2R4+w4XFRh8glPElCQV3dpoO9O7
3WyhMuNxZDEW+7BZYj39gKqP2tCRpn/winl9JQs+TXDyAiSunnKwHaJiDojdXZ8M
1VcNZ5n996V7vxmcYgu5Yy549Nsn5BoH37Esqgm2HlxXRgj/65uZEswKHOpYDntj
I45ivgc5zfFqCKULXzvZyvx1+GqqF3mg6I2mokXILVUMw3XBJtXCUSfqfwunSMwA
ENzWctAj0GJpST4YHn6GgbQfSi+kh19Z8pjPxNHMJEcx0C9dz7Mk9C8l+6W3Od4s
0duO2o7dLnSNEw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:12 2025 by rpki-client