Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: slwYSJ4sSaNI2qYiYD21P5Rtx4NGUN89DFhQEO7NkZ4=
Subject key identifier: FE:8A:66:15:C9:AA:CF:46:9C:25:BD:CE:A1:5C:B4:89:FC:BC:2E:3D
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019A01B5245539BAAD6C29235337E72D83A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:00:39 +0000
Manifest this update: Mon 20 Oct 2025 13:00:39 +0000
Manifest next update: Tue 21 Oct 2025 13:00:39 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: f1G71tA6TqUN2ZdKjSg6g1Li93a9hLMtr6SVnDlqLCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:24:55:39:ba:ad:6c:29:23:53:37:e7:2d:83:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Oct 20 13:00:39 2025 GMT
Not After : Oct 21 13:00:39 2025 GMT
Subject: CN=fe8a6615c9aacf469c25bdcea15cb489fcbc2e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:73:d0:1f:c2:cf:c1:03:12:9f:de:5e:0c:
5b:0b:5a:82:de:b3:e4:0a:dc:6d:39:98:f3:cd:41:
97:8c:1a:a3:ec:02:8c:7f:0f:da:6b:c4:a3:1c:82:
0b:7a:6c:f5:61:5c:bd:e5:2b:92:61:c1:b8:d0:a0:
5f:f4:d5:eb:17:d8:79:62:bd:76:fb:c6:86:17:d6:
aa:ea:55:b6:b9:f4:dc:2b:08:ba:69:31:b6:52:55:
92:99:db:07:d4:2d:40:ad:2d:59:ba:85:f5:6d:8f:
52:0d:c5:5f:93:f3:c8:5e:b0:81:07:37:49:ac:f1:
19:09:6b:54:ff:6e:e4:8f:9a:c2:47:97:af:fd:ba:
f9:ee:1f:94:93:62:7b:c7:6b:82:66:9d:92:14:02:
5b:e7:94:3c:d0:aa:1e:41:87:14:6a:a2:e3:ac:67:
ab:5e:cf:82:7c:b4:59:8f:e2:fd:b8:49:3c:dd:99:
b8:29:4a:ab:d0:92:0e:67:6e:18:0a:09:18:be:52:
61:78:de:5f:e1:18:4f:82:c8:ed:6f:3f:d3:f0:34:
09:7c:40:ec:6f:f7:c0:a1:fc:a0:9d:05:47:08:26:
ff:00:90:c0:03:a8:4e:39:2b:15:12:c4:2c:b7:97:
12:cb:e1:6b:c1:b8:e5:fc:b2:ec:2e:6a:1d:96:55:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:66:15:C9:AA:CF:46:9C:25:BD:CE:A1:5C:B4:89:FC:BC:2E:3D
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:18:78:93:70:19:29:79:62:7c:f0:a8:62:eb:ae:85:34:55:
32:be:f7:cb:3e:c6:2f:bc:4b:7d:2b:4c:6d:ba:c8:d5:34:e9:
c5:46:67:5e:ec:75:47:38:71:c2:03:21:ff:98:cf:6f:7a:bd:
d0:4a:c1:27:41:58:3e:98:d2:1b:ea:7e:b8:29:94:1b:08:4c:
5a:cc:14:67:5c:e2:80:f4:c5:a5:4e:42:6d:e6:2d:36:cd:de:
0a:5b:4e:09:76:87:eb:75:e5:77:64:63:ab:73:64:fa:c3:4e:
98:e8:51:e0:20:90:bc:02:68:76:4c:38:5f:b1:07:e7:eb:ea:
a3:70:8f:e5:86:26:d3:68:c2:47:30:67:cd:c1:12:8a:c3:18:
90:15:37:89:43:0e:48:3c:80:e6:f1:34:ed:c0:b7:b8:f2:fc:
e2:7e:8b:c1:a8:c7:f3:6a:eb:c8:94:20:20:ad:26:50:1d:f1:
5f:cd:86:34:02:28:5c:93:fe:a7:90:da:cc:ca:44:9e:19:69:
ee:b4:83:54:99:53:9a:43:be:63:4f:5d:13:1c:83:7e:e2:ae:
e6:08:7a:b3:79:a5:d4:27:df:98:d8:28:57:53:b5:67:0a:1c:
10:a4:47:12:5f:04:36:3e:2b:7d:95:cd:56:2d:ed:e4:f2:db:
7c:13:51:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtSRVObqtbCkjUzfnLYOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm
Y2ExYTUwHhcNMjUxMDIwMTMwMDM5WhcNMjUxMDIxMTMwMDM5WjAzMTEwLwYDVQQD
EyhmZThhNjYxNWM5YWFjZjQ2OWMyNWJkY2VhMTVjYjQ4OWZjYmMyZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bNz0B/Cz8EDEp/eXgxbC1qC3rPk
CtxtOZjzzUGXjBqj7AKMfw/aa8SjHIILemz1YVy95SuSYcG40KBf9NXrF9h5Yr12
+8aGF9aq6lW2ufTcKwi6aTG2UlWSmdsH1C1ArS1ZuoX1bY9SDcVfk/PIXrCBBzdJ
rPEZCWtU/27kj5rCR5ev/br57h+Uk2J7x2uCZp2SFAJb55Q80KoeQYcUaqLjrGer
Xs+CfLRZj+L9uEk83Zm4KUqr0JIOZ24YCgkYvlJheN5f4RhPgsjtbz/T8DQJfEDs
b/fAofygnQVHCCb/AJDAA6hOOSsVEsQst5cSy+Frwbjl/LLsLmodllXJJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6KZhXJqs9GnCW9zqFctIn8vC49MB8GA1UdIwQY
MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt
ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5
LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihh4k3AZ
KXlifPCoYuuuhTRVMr73yz7GL7xLfStMbbrI1TTpxUZnXux1RzhxwgMh/5jPb3q9
0ErBJ0FYPpjSG+p+uCmUGwhMWswUZ1zigPTFpU5CbeYtNs3eCltOCXaH63Xld2Rj
q3Nk+sNOmOhR4CCQvAJodkw4X7EH5+vqo3CP5YYm02jCRzBnzcESisMYkBU3iUMO
SDyA5vE07cC3uPL84n6LwajH82rryJQgIK0mUB3xX82GNAIoXJP+p5DazMpEnhlp
7rSDVJlTmkO+Y09dExyDfuKu5gh6s3ml1CffmNgoV1O1ZwocEKRHEl8ENj4rfZXN
Vi3t5PLbfBNR0A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:56 2025 by rpki-client