Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: xRDoJzklR0ZbS5OrUHD4y3YM2h1/fGedXXqMAdvksN0=
Subject key identifier: 89:DA:46:F1:98:7F:8E:FC:A9:24:6E:D1:13:C9:52:07:E4:29:CF:3B
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 0198D65F7FB54A1755D3C74A7CC000607FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: Y7Ve78gnAQP0VM3UYvD/2MkdIxjT/M0UC6pi+1FIhWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:7f:b5:4a:17:55:d3:c7:4a:7c:c0:00:60:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=89da46f1987f8efca9246ed113c95207e429cf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:44:0c:bd:0c:12:43:50:36:53:a4:8e:ca:
55:b5:db:02:6c:63:e8:40:03:e8:22:36:f4:b0:bc:
3b:95:ff:07:b5:3a:0c:45:c0:c4:74:3b:95:9a:ef:
aa:ff:fe:79:1a:de:83:6e:dc:2a:48:95:8c:0d:cf:
d0:43:40:b7:97:03:9e:94:30:81:65:6d:f7:3f:df:
45:d3:b2:af:8b:3d:17:cd:ca:9e:d1:c8:77:d4:68:
bd:26:f5:3a:63:fe:9d:67:8c:ea:4a:38:7e:23:48:
80:78:8a:6a:6a:a6:7d:53:af:a4:67:4a:98:5f:d5:
2a:b9:18:86:23:be:15:42:aa:8f:fb:3a:91:95:43:
4e:27:49:76:f4:10:c0:e1:72:b2:61:56:c3:7b:97:
a3:2c:4c:10:e7:65:3b:40:0d:92:3e:75:55:f9:3d:
6a:79:34:ab:07:b9:e9:7e:91:61:34:a8:bb:9a:64:
13:51:2f:82:3c:12:39:04:6d:67:0b:da:07:ef:50:
eb:94:19:f6:01:79:06:d1:e7:3a:13:5f:17:c9:d5:
09:e4:fc:11:b5:eb:8d:b9:b9:a5:e1:da:19:83:81:
52:c6:6d:21:61:a4:38:2a:d3:21:e7:7f:2b:82:54:
5c:bc:b5:88:ef:09:af:e3:fe:41:29:9f:ca:48:57:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:46:F1:98:7F:8E:FC:A9:24:6E:D1:13:C9:52:07:E4:29:CF:3B
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7c:b7:9c:be:41:c4:40:58:be:ff:57:05:91:1b:05:b8:14:
59:7e:0e:26:ed:3f:9c:2d:3a:61:f2:b9:a4:4f:8c:bf:41:67:
66:1f:ed:ae:9a:9e:f6:9a:cf:36:c1:a7:7d:d2:79:39:fb:dd:
6f:c2:db:94:90:65:77:d0:aa:cd:84:81:e8:44:e0:dd:37:c6:
36:b1:94:2c:40:8e:5a:8e:6d:f4:ab:a6:85:f1:89:f0:2e:06:
34:a1:b3:07:be:23:a7:6b:a8:e6:37:34:3a:b7:c8:60:6a:ab:
f7:24:70:12:c3:31:28:24:1d:2d:b9:c0:59:b5:f0:88:33:7d:
22:81:cd:51:bc:43:5e:0a:78:66:45:33:02:d5:db:30:55:bc:
1c:ec:54:52:d1:a8:15:45:c8:ed:61:66:b8:00:f4:ed:ad:a2:
7c:8e:00:17:23:dc:71:21:a6:ce:6e:39:ef:ed:01:dc:d9:71:
60:83:c4:e8:97:ec:b7:6d:e9:b8:77:87:0e:33:9c:a1:03:02:
e2:a1:0f:c9:e3:45:4b:f2:38:fb:e9:b8:59:83:5a:98:af:8c:
99:b4:02:71:11:8b:2a:4d:40:d5:0c:d6:95:06:ac:c8:fb:5c:
e3:ec:ee:30:cd:45:88:3f:03:f0:42:40:7e:ec:00:53:60:e3:
e2:3d:9b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX3+1ShdV08dKfMAAYH/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm
Y2ExYTUwHhcNMjUwODIzMTAwMDM5WhcNMjUwODI0MTAwMDM5WjAzMTEwLwYDVQQD
Eyg4OWRhNDZmMTk4N2Y4ZWZjYTkyNDZlZDExM2M5NTIwN2U0MjljZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfZEDL0MEkNQNlOkjspVtdsCbGPo
QAPoIjb0sLw7lf8HtToMRcDEdDuVmu+q//55Gt6DbtwqSJWMDc/QQ0C3lwOelDCB
ZW33P99F07Kviz0Xzcqe0ch31Gi9JvU6Y/6dZ4zqSjh+I0iAeIpqaqZ9U6+kZ0qY
X9UquRiGI74VQqqP+zqRlUNOJ0l29BDA4XKyYVbDe5ejLEwQ52U7QA2SPnVV+T1q
eTSrB7npfpFhNKi7mmQTUS+CPBI5BG1nC9oH71DrlBn2AXkG0ec6E18XydUJ5PwR
teuNubml4doZg4FSxm0hYaQ4KtMh538rglRcvLWI7wmv4/5BKZ/KSFd4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInaRvGYf478qSRu0RPJUgfkKc87MB8GA1UdIwQY
MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt
ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5
LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFny3nL5B
xEBYvv9XBZEbBbgUWX4OJu0/nC06YfK5pE+Mv0FnZh/trpqe9prPNsGnfdJ5Ofvd
b8LblJBld9CqzYSB6ETg3TfGNrGULECOWo5t9KumhfGJ8C4GNKGzB74jp2uo5jc0
OrfIYGqr9yRwEsMxKCQdLbnAWbXwiDN9IoHNUbxDXgp4ZkUzAtXbMFW8HOxUUtGo
FUXI7WFmuAD07a2ifI4AFyPccSGmzm457+0B3NlxYIPE6Jfst23puHeHDjOcoQMC
4qEPyeNFS/I4++m4WYNamK+MmbQCcRGLKk1A1QzWlQasyPtc4+zuMM1FiD8D8EJA
fuwAU2Dj4j2bXg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:47 2025 by rpki-client