Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: h1264SSQI+80nRFpju1neRRvsHie59BHkap0UR8iHfY=
Subject key identifier: FB:E4:57:8E:EC:99:92:D9:E2:B4:C4:DD:C7:0E:A2:50:FC:E1:F4:96
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 0197B6A0F94648E427680A2D629538C36988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 02E4
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: u8sYW5HPPeXGrC3XpW41oigjxxMfrNvOZAp5/betp0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f9:46:48:e4:27:68:0a:2d:62:95:38:c3:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=fbe4578eec9992d9e2b4c4ddc70ea250fce1f496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:a3:ea:b7:f3:d0:6f:1a:4a:22:c6:6a:05:
a6:9c:80:8f:81:03:6a:0a:06:23:b5:a5:6c:c3:d7:
97:ed:d0:a6:da:b5:60:d7:d1:02:92:71:f9:a6:18:
b5:ff:6d:f0:08:4b:64:81:6f:9a:a4:e9:3f:41:4e:
ea:b8:40:66:70:a1:46:74:43:3f:87:19:86:fe:58:
bb:b4:a0:c7:1d:ef:f1:e6:4a:d8:62:3f:d1:d7:26:
66:75:cd:df:1c:bc:87:7b:98:f2:47:9e:97:15:af:
17:7c:6f:af:4a:e4:55:89:40:73:40:a2:bc:30:4d:
52:9c:2d:d3:0a:ea:44:fc:6a:a5:66:81:0f:06:49:
01:c5:a3:ea:60:ef:67:b1:a0:89:b5:af:00:b7:c4:
3e:c3:84:9f:99:d5:be:f6:22:7b:61:05:86:2a:a9:
99:a0:c3:25:fe:45:0f:90:f7:63:1a:ef:5a:be:92:
d2:4a:25:f1:fa:42:1d:5c:54:5f:28:b4:98:42:02:
4d:99:b0:87:1f:98:04:73:5a:10:03:6d:3d:49:95:
77:9d:a9:3d:65:7d:e1:57:39:a6:d8:01:c4:86:3f:
d6:df:3f:54:ae:14:1d:cd:d2:b9:60:f6:b1:43:29:
e2:18:76:3a:db:0a:84:6c:e3:63:a7:fc:1b:ec:cd:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:57:8E:EC:99:92:D9:E2:B4:C4:DD:C7:0E:A2:50:FC:E1:F4:96
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:6c:12:31:f8:41:ee:e9:20:8d:87:52:17:94:e9:cd:2c:
1e:55:5d:37:37:0e:f7:e8:78:c9:e9:50:35:2b:4c:bc:8e:cb:
b6:ee:37:82:1c:ed:11:cf:3c:66:82:c6:7a:2f:b0:c3:f8:b3:
3b:70:fd:90:2a:4b:4a:c0:43:89:73:9a:f1:90:d9:96:ae:d5:
c2:14:a5:66:15:53:24:35:b4:9b:83:b7:4f:fa:92:ee:78:6b:
23:67:c2:80:51:98:61:a5:fe:2b:81:f4:b1:7c:9a:51:68:26:
e0:d6:9f:1a:b9:9a:48:f5:5e:de:df:23:63:a2:96:23:e4:9e:
bd:ea:b1:65:56:3f:6a:78:b8:97:f4:ab:18:e9:22:ea:6e:6f:
a3:c7:c9:b5:d4:5c:73:40:69:c4:b7:bc:52:ec:d0:80:99:d2:
e3:53:45:7f:f3:f4:98:66:a7:cc:79:66:5d:ee:eb:74:49:bb:
79:59:df:b8:4f:7f:db:05:53:a9:65:5b:27:5c:13:6e:a1:78:
ea:e0:58:9b:11:39:3d:92:69:13:1e:a5:91:74:13:7e:16:43:
43:b3:06:14:5e:ac:3c:0f:b0:dd:45:73:e3:0a:80:26:21:46:
b1:57:00:f5:db:bd:b3:b8:96:a7:da:b3:15:e4:49:77:fc:a3:
88:3e:92:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPlGSOQnaAotYpU4w2mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTQ4YmQ2ZjJhZDE1OGU2MjRmZDhlODllOWVmNWYxYmRi
MWQzOWEwHhcNMjUwNjI4MTMwMTMyWhcNMjUwNjI5MTMwMTMyWjAzMTEwLwYDVQQD
EyhmYmU0NTc4ZWVjOTk5MmQ5ZTJiNGM0ZGRjNzBlYTI1MGZjZTFmNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRSj6rfz0G8aSiLGagWmnICPgQNq
CgYjtaVsw9eX7dCm2rVg19ECknH5phi1/23wCEtkgW+apOk/QU7quEBmcKFGdEM/
hxmG/li7tKDHHe/x5krYYj/R1yZmdc3fHLyHe5jyR56XFa8XfG+vSuRViUBzQKK8
ME1SnC3TCupE/GqlZoEPBkkBxaPqYO9nsaCJta8At8Q+w4SfmdW+9iJ7YQWGKqmZ
oMMl/kUPkPdjGu9avpLSSiXx+kIdXFRfKLSYQgJNmbCHH5gEc1oQA209SZV3nak9
ZX3hVzmm2AHEhj/W3z9UrhQdzdK5YPaxQyniGHY62wqEbONjp/wb7M1whQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvkV47smZLZ4rTE3ccOolD84fSWMB8GA1UdIwQY
MBaAFJeUi9byrRWOYk/Y6J6e9fG9sdOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNzI3YmYtNzcwOS00YjMzLWI2MTgt
YTZjNTAwMGM3MTg0LzEvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNzI3YmYtNzcwOS00YjMzLWI2MTgtYTZjNTAwMGM3MTg0
LzEvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzVsEjH4
Qe7pII2HUheU6c0sHlVdNzcO9+h4yelQNStMvI7Ltu43ghztEc88ZoLGei+ww/iz
O3D9kCpLSsBDiXOa8ZDZlq7VwhSlZhVTJDW0m4O3T/qS7nhrI2fCgFGYYaX+K4H0
sXyaUWgm4NafGrmaSPVe3t8jY6KWI+SeveqxZVY/ani4l/SrGOki6m5vo8fJtdRc
c0BpxLe8UuzQgJnS41NFf/P0mGanzHlmXe7rdEm7eVnfuE9/2wVTqWVbJ1wTbqF4
6uBYmxE5PZJpEx6lkXQTfhZDQ7MGFF6sPA+w3UVz4wqAJiFGsVcA9du9s7iWp9qz
FeRJd/yjiD6SiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:16 2025 by rpki-client