Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: Joeu3iZwsy1ea7m/sffVvZfdFsgyHKJGIPBV9vHs52s=
Subject key identifier: 76:CE:CE:42:28:B8:A0:6B:A7:1B:11:BD:A3:24:26:A5:D0:EB:77:AD
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 019872984FB6BAD63947E1B16BFB738A041A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 0589
Signing time: Mon 04 Aug 2025 01:00:41 +0000
Manifest this update: Mon 04 Aug 2025 01:00:41 +0000
Manifest next update: Tue 05 Aug 2025 01:00:41 +0000
Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: Xw7ogdDUhNCAeNy1BeAmGKOa1syyoFJT3EECQeHWRfg=)
4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:4f:b6:ba:d6:39:47:e1:b1:6b:fb:73:8a:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Aug 4 01:00:41 2025 GMT
Not After : Aug 5 01:00:41 2025 GMT
Subject: CN=76cece4228b8a06ba71b11bda32426a5d0eb77ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:3a:85:84:04:72:18:88:a0:7f:cb:48:45:
da:e1:a8:9a:bf:3a:59:b7:93:8a:08:92:8c:b9:ec:
1a:40:f0:09:16:e5:57:03:f8:3e:14:98:62:b1:70:
74:cc:aa:2a:42:12:a7:58:89:c1:d6:14:51:3a:6a:
9b:21:2d:28:fc:2b:79:e8:7b:54:ad:2f:91:fb:2d:
cf:40:bf:c9:39:56:85:96:f7:37:d1:73:47:31:c1:
c1:bb:16:11:3b:90:61:16:09:6d:03:45:e6:39:b1:
f4:0f:16:c4:e6:54:77:66:18:45:b2:89:73:0a:5b:
62:61:a4:f3:b1:1c:38:d2:23:2b:8c:c9:96:bd:f0:
42:64:86:0a:d8:c3:dc:a4:15:46:b7:c3:31:fd:ea:
08:0b:a6:26:e8:c7:8b:32:cc:bc:d4:f1:13:19:48:
97:1f:b0:43:b0:18:d3:f4:bf:70:ad:f8:38:6f:58:
26:30:17:be:d4:b9:e3:07:fc:e8:b1:33:dc:29:6e:
df:50:d8:fc:c7:91:d5:cf:3d:18:53:13:4e:35:02:
ae:54:d2:ca:1d:a0:bc:ff:c7:c2:0f:7f:a1:a7:49:
7f:84:e2:2e:ea:ab:91:55:cb:6b:21:07:ac:b8:a2:
08:89:b5:96:96:52:9b:f9:2b:74:f3:80:66:3d:9f:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CE:CE:42:28:B8:A0:6B:A7:1B:11:BD:A3:24:26:A5:D0:EB:77:AD
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:55:08:91:32:d4:de:ef:dd:a6:71:55:ac:ff:31:a5:93:d1:
b5:ac:0b:d5:55:67:fd:dc:28:94:99:59:7f:15:b5:a3:f1:44:
b7:c3:a6:58:71:5c:39:7f:99:82:5f:c2:98:3e:58:31:85:a1:
bb:8d:28:e8:6b:69:e5:08:5b:fa:21:48:77:45:45:ba:d6:e2:
bf:bb:bb:db:76:fa:f5:f9:5f:12:d5:fb:d2:51:3c:a9:f1:60:
2f:63:e8:c9:e3:1e:6e:4d:1a:8c:fe:e7:6f:d1:c1:e9:4e:4d:
94:71:96:0a:d9:ae:2f:f6:d2:8e:ac:23:2f:16:79:12:e6:24:
08:b5:9e:94:c4:26:4a:1a:e6:84:c4:9a:65:b5:3a:53:16:eb:
e6:d5:10:2d:bf:bd:58:c3:1c:06:b4:0e:ee:7e:4b:43:44:bc:
28:5f:ba:85:be:aa:fc:f2:1e:41:b9:8f:6f:98:87:ed:88:71:
2b:e3:52:ba:0b:ff:41:79:48:bb:3d:88:4d:5f:b8:6c:1f:cd:
27:e9:10:b3:c5:91:9c:1c:da:81:27:48:c6:03:ec:86:56:59:
27:50:f0:f4:6b:e5:f8:19:95:a0:62:49:52:0f:c3:83:9f:2e:
2e:c2:06:11:6d:02:ea:47:dd:b8:fb:5b:9d:97:fa:96:9c:19:
f7:51:2f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymE+2utY5R+Gxa/tzigQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj
YjU2Y2EwHhcNMjUwODA0MDEwMDQxWhcNMjUwODA1MDEwMDQxWjAzMTEwLwYDVQQD
Eyg3NmNlY2U0MjI4YjhhMDZiYTcxYjExYmRhMzI0MjZhNWQwZWI3N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW46hYQEchiIoH/LSEXa4aiavzpZ
t5OKCJKMuewaQPAJFuVXA/g+FJhisXB0zKoqQhKnWInB1hRROmqbIS0o/Ct56HtU
rS+R+y3PQL/JOVaFlvc30XNHMcHBuxYRO5BhFgltA0XmObH0DxbE5lR3ZhhFsolz
CltiYaTzsRw40iMrjMmWvfBCZIYK2MPcpBVGt8Mx/eoIC6Ym6MeLMsy81PETGUiX
H7BDsBjT9L9wrfg4b1gmMBe+1LnjB/zosTPcKW7fUNj8x5HVzz0YUxNONQKuVNLK
HaC8/8fCD3+hp0l/hOIu6quRVctrIQesuKIIibWWllKb+St084BmPZ+QtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbOzkIouKBrpxsRvaMkJqXQ63etMB8GA1UdIwQY
MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt
Y2RmNGM2YjQyNGUxLzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx
LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1UIkTLU
3u/dpnFVrP8xpZPRtawL1VVn/dwolJlZfxW1o/FEt8OmWHFcOX+Zgl/CmD5YMYWh
u40o6Gtp5Qhb+iFId0VFutbiv7u723b69flfEtX70lE8qfFgL2PoyeMebk0ajP7n
b9HB6U5NlHGWCtmuL/bSjqwjLxZ5EuYkCLWelMQmShrmhMSaZbU6Uxbr5tUQLb+9
WMMcBrQO7n5LQ0S8KF+6hb6q/PIeQbmPb5iH7YhxK+NSugv/QXlIuz2ITV+4bB/N
J+kQs8WRnBzagSdIxgPshlZZJ1Dw9Gvl+BmVoGJJUg/Dg58uLsIGEW0C6kfduPtb
nZf6lpwZ91Evfg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:14 2025 by rpki-client