Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: AdpebVRE4E+qKWpLGGQA5GruhassrIV3UcpNH8ktPII=
Subject key identifier: 7A:F6:6A:4F:B8:0B:4E:D8:96:C2:8B:1B:84:1F:E3:7E:C3:C4:31:32
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0197745261740A8628A3A9E10383BCBCA88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 16:00:45 +0000
Manifest this update: Sun 15 Jun 2025 16:00:45 +0000
Manifest next update: Mon 16 Jun 2025 16:00:45 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: rCLgaHwRSUzV6RSQpVWJh8tp6wQWACeXWlwI7v2vziA=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:61:74:0a:86:28:a3:a9:e1:03:83:bc:bc:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jun 15 16:00:45 2025 GMT
Not After : Jun 16 16:00:45 2025 GMT
Subject: CN=7af66a4fb80b4ed896c28b1b841fe37ec3c43132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:1f:cf:bf:e3:07:1f:45:b8:85:db:27:ac:
61:29:ab:4e:03:26:ab:f4:ec:c8:04:98:6e:89:f4:
2a:fd:87:a8:b3:6a:3f:c1:d5:ec:5a:fb:2d:b6:ae:
1c:77:30:c6:c4:88:68:21:66:20:23:a8:38:53:be:
be:c6:56:7c:90:02:8b:0a:49:f9:a4:83:c4:e6:03:
8b:ed:7b:d5:e9:50:1b:7a:82:e8:79:a0:7b:e8:f5:
c9:9f:77:a3:5c:59:c5:ae:6c:c6:51:e7:5c:cc:29:
83:73:a8:ff:00:74:06:4f:85:9b:66:6c:70:f3:64:
79:87:6b:55:0c:d6:23:b9:30:b4:16:78:44:96:dc:
62:db:37:08:33:45:28:d7:ef:8c:6c:c4:2b:25:e7:
c2:e5:e7:21:a6:1a:cf:d5:19:ca:8d:b8:f5:14:d0:
b9:41:df:67:75:7b:75:50:87:5a:d6:b7:33:de:1f:
bd:34:f4:91:fa:a7:fd:28:df:60:4d:15:6e:d2:2f:
a1:b2:c9:95:55:e3:e1:c5:db:11:21:6d:4b:c4:2c:
40:75:d4:ea:40:96:b4:49:31:c0:87:93:cf:10:93:
59:e0:d8:e9:ed:73:b9:26:8a:88:97:0f:99:3e:f0:
1e:9c:e9:07:e3:91:cd:e3:4d:f2:f5:02:54:f8:72:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F6:6A:4F:B8:0B:4E:D8:96:C2:8B:1B:84:1F:E3:7E:C3:C4:31:32
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8d:89:5a:2f:9a:55:22:f0:1e:5b:d9:49:51:fe:fe:6a:53:
78:0c:05:0f:10:d5:60:00:c5:48:3e:cd:2c:24:ef:9e:e3:7a:
69:7f:f7:0b:9b:ae:d2:bc:dc:42:6f:97:4a:34:2c:32:9a:08:
42:fd:a7:46:bc:de:05:5d:1f:92:f6:92:5a:76:39:97:12:35:
2b:2f:ce:ac:45:0d:e9:b7:6a:b9:f8:40:5d:49:76:b0:65:a1:
81:03:87:45:03:cf:58:00:f9:75:2f:5a:ae:75:e6:7a:dc:92:
e9:35:a8:da:30:0e:3e:fb:f7:d9:1d:04:6b:67:fb:fd:4e:c3:
26:3b:a7:df:35:4b:53:18:94:aa:c3:b0:06:95:b9:0c:98:8f:
a9:47:09:df:0d:79:03:f6:97:7d:e2:51:3d:d5:f4:4f:8e:65:
16:d7:d2:fc:17:67:92:37:a0:ff:61:93:84:80:2b:d8:7d:3e:
1a:3f:cf:bd:6b:35:91:1d:99:2d:a1:c3:e3:22:ec:7a:de:9e:
52:c2:d6:6f:74:22:e8:f6:ae:b5:c3:49:a0:0c:03:a2:62:a4:
7b:a8:a4:f5:96:27:77:db:50:00:48:aa:a8:39:30:6d:98:39:
72:a5:ef:63:31:72:45:ff:56:13:bf:fc:86:d1:ea:11:80:8c:
6b:1c:7c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0UmF0CoYoo6nhA4O8vKiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx
YjM2MmYwHhcNMjUwNjE1MTYwMDQ1WhcNMjUwNjE2MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg3YWY2NmE0ZmI4MGI0ZWQ4OTZjMjhiMWI4NDFmZTM3ZWMzYzQzMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qwfz7/jBx9FuIXbJ6xhKatOAyar
9OzIBJhuifQq/Yeos2o/wdXsWvsttq4cdzDGxIhoIWYgI6g4U76+xlZ8kAKLCkn5
pIPE5gOL7XvV6VAbeoLoeaB76PXJn3ejXFnFrmzGUedczCmDc6j/AHQGT4WbZmxw
82R5h2tVDNYjuTC0FnhEltxi2zcIM0Uo1++MbMQrJefC5echphrP1RnKjbj1FNC5
Qd9ndXt1UIda1rcz3h+9NPSR+qf9KN9gTRVu0i+hssmVVePhxdsRIW1LxCxAddTq
QJa0STHAh5PPEJNZ4Njp7XO5JoqIlw+ZPvAenOkH45HN403y9QJU+HL95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr2ak+4C07YlsKLG4Qf437DxDEyMB8GA1UdIwQY
MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt
NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0
LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI2JWi+a
VSLwHlvZSVH+/mpTeAwFDxDVYADFSD7NLCTvnuN6aX/3C5uu0rzcQm+XSjQsMpoI
Qv2nRrzeBV0fkvaSWnY5lxI1Ky/OrEUN6bdqufhAXUl2sGWhgQOHRQPPWAD5dS9a
rnXmetyS6TWo2jAOPvv32R0Ea2f7/U7DJjun3zVLUxiUqsOwBpW5DJiPqUcJ3w15
A/aXfeJRPdX0T45lFtfS/Bdnkjeg/2GThIAr2H0+Gj/PvWs1kR2ZLaHD4yLset6e
UsLWb3Qi6PautcNJoAwDomKke6ik9ZYnd9tQAEiqqDkwbZg5cqXvYzFyRf9WE7/8
htHqEYCMaxx8UA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:43:25 2025 by rpki-client