Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: xO8+UFHzD7eK7QhsdWJmYdA7nsZeU4NWqzcKpzLE6yg=
Subject key identifier: A8:A4:7E:86:B6:43:9F:BF:34:8F:9E:96:31:DC:42:5E:AD:E4:31:23
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0197700817619ED65E0ABF1053FC23068541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0C72
Signing time: Sat 14 Jun 2025 20:01:07 +0000
Manifest this update: Sat 14 Jun 2025 20:01:07 +0000
Manifest next update: Sun 15 Jun 2025 20:01:07 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: uBibATD73x+zgaUQdZGGiAYzXbHmIXOEx+nzd/8aUZo=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:17:61:9e:d6:5e:0a:bf:10:53:fc:23:06:85:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jun 14 20:01:07 2025 GMT
Not After : Jun 15 20:01:07 2025 GMT
Subject: CN=a8a47e86b6439fbf348f9e9631dc425eade43123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:d8:8f:11:8d:68:a1:75:8a:d9:5d:8a:84:
65:29:c2:b6:2e:97:77:9e:9c:db:66:f9:63:91:07:
a2:c7:99:bd:a8:78:6b:c6:7a:a0:9a:4d:e5:51:df:
bf:5c:89:37:95:c0:da:01:1a:dd:e1:4c:1b:e8:c4:
5b:37:10:4e:6d:40:d8:6f:5f:07:c9:01:eb:37:d7:
f9:77:f0:9f:43:07:8b:53:16:14:93:c1:d1:a7:27:
be:1b:aa:73:f3:c1:b9:88:95:84:2c:89:d8:aa:0a:
56:55:f8:eb:fa:e6:b5:01:90:77:81:ae:61:38:31:
ab:b4:e9:cd:b2:19:f8:fb:d2:c8:f0:c0:fd:25:4a:
ac:fb:da:91:b0:8a:49:f1:6b:67:de:12:eb:da:68:
b0:7b:3d:4b:31:97:d7:a5:24:c1:56:fa:74:ec:6c:
73:f8:44:5f:7f:86:79:84:14:a9:c0:f5:32:fb:51:
c5:f3:0f:29:13:e0:57:dc:43:6c:80:35:fb:9d:4c:
4f:80:e3:8f:70:06:a3:cc:48:18:5f:de:f1:c6:5c:
1e:eb:85:e2:44:1a:97:7a:09:99:2c:c2:0e:3c:65:
af:dd:79:38:04:f1:1b:6c:d0:24:6a:66:9e:2f:a9:
21:3a:b6:62:46:f5:d0:f4:fe:38:b0:a4:71:28:63:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:7E:86:B6:43:9F:BF:34:8F:9E:96:31:DC:42:5E:AD:E4:31:23
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:47:c2:86:4c:9b:69:b3:eb:71:c0:4d:1e:2d:2e:3a:16:
d9:23:97:94:e0:7e:ba:ff:b3:61:cf:e6:4a:4f:e2:cd:15:75:
f5:cc:dc:97:9f:2b:bd:8c:41:5a:6f:05:e3:24:b1:36:3a:3c:
c7:a7:f2:a5:8f:95:2e:91:19:04:83:36:0e:dc:41:b6:da:52:
67:23:0f:be:e8:39:29:99:78:a2:fa:95:ca:eb:53:b1:11:54:
f0:9d:51:8c:0b:6a:03:72:56:76:b3:bb:e1:f1:71:46:e3:9d:
f4:7c:cb:46:32:d5:50:b7:1e:ad:e3:ee:48:74:12:07:58:75:
35:29:4e:3e:7a:dc:d4:17:9c:ba:07:e0:80:39:bc:4c:f2:4b:
50:60:b5:99:b8:82:91:80:2b:f8:5d:93:7a:17:ca:7d:3d:2d:
0f:4a:5f:a6:07:13:31:d6:d7:5c:cb:31:41:0a:3a:04:0f:5b:
1f:55:ac:76:f4:da:c1:91:66:6d:dd:c4:3f:c7:aa:a0:d6:ff:
14:ea:b0:bd:8c:06:fa:5d:13:21:b9:01:38:f8:89:d6:84:98:
b8:76:65:a6:a5:5c:9c:fb:9c:ce:6e:c3:3c:90:76:c6:07:7e:
11:42:3c:94:9d:85:ff:b3:a1:c7:7a:3c:8d:30:4d:f6:a3:32:
fc:4a:85:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwCBdhntZeCr8QU/wjBoVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NjBmZDU4NjQ4MjY4MDVjZjM2NTVlZWViMmZiODk4ZjM2
ZDk4MjEwHhcNMjUwNjE0MjAwMTA3WhcNMjUwNjE1MjAwMTA3WjAzMTEwLwYDVQQD
EyhhOGE0N2U4NmI2NDM5ZmJmMzQ4ZjllOTYzMWRjNDI1ZWFkZTQzMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps3YjxGNaKF1itldioRlKcK2Lpd3
npzbZvljkQeix5m9qHhrxnqgmk3lUd+/XIk3lcDaARrd4Uwb6MRbNxBObUDYb18H
yQHrN9f5d/CfQweLUxYUk8HRpye+G6pz88G5iJWELInYqgpWVfjr+ua1AZB3ga5h
ODGrtOnNshn4+9LI8MD9JUqs+9qRsIpJ8Wtn3hLr2miwez1LMZfXpSTBVvp07Gxz
+ERff4Z5hBSpwPUy+1HF8w8pE+BX3ENsgDX7nUxPgOOPcAajzEgYX97xxlwe64Xi
RBqXegmZLMIOPGWv3Xk4BPEbbNAkamaeL6khOrZiRvXQ9P44sKRxKGNVPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKikfoa2Q5+/NI+eljHcQl6t5DEjMB8GA1UdIwQY
MBaAFJdg/VhkgmgFzzZV7usvuJjzbZghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMt
ZDlhMTA0NDA0YWFmLzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMtZDlhMTA0NDA0YWFm
LzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpVHwoZM
m2mz63HATR4tLjoW2SOXlOB+uv+zYc/mSk/izRV19czcl58rvYxBWm8F4ySxNjo8
x6fypY+VLpEZBIM2DtxBttpSZyMPvug5KZl4ovqVyutTsRFU8J1RjAtqA3JWdrO7
4fFxRuOd9HzLRjLVULcerePuSHQSB1h1NSlOPnrc1BecugfggDm8TPJLUGC1mbiC
kYAr+F2TehfKfT0tD0pfpgcTMdbXXMsxQQo6BA9bH1WsdvTawZFmbd3EP8eqoNb/
FOqwvYwG+l0TIbkBOPiJ1oSYuHZlpqVcnPuczm7DPJB2xgd+EUI8lJ2F/7Ohx3o8
jTBN9qMy/EqFeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:18:00 2025 by rpki-client