Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: PeyGFkFnfQo8ZguNYZRDfmNyZmptLr4HiJ9JGArNnyU=
Subject key identifier: EB:28:D0:A6:C3:E2:C2:6E:AE:58:A8:84:E9:DD:4B:A3:31:0B:B9:E9
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 0198D4DFDCF5CC2651D0CD3459E7FA5FDE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 155F
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: Oyl8Pkzbljws2spFSUmX269aYC0Ons3kCTWYQRJCgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:f5:cc:26:51:d0:cd:34:59:e7:fa:5f:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=eb28d0a6c3e2c26eae58a884e9dd4ba3310bb9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:b8:1d:6d:56:48:ee:b9:6f:86:40:1c:d1:
11:4e:c2:ab:77:d3:ed:76:92:96:1e:51:1d:69:29:
62:9e:12:5c:34:0d:86:ef:95:70:c1:dc:20:4a:c7:
b7:60:01:01:45:bd:21:41:c8:56:92:64:25:fa:51:
53:fa:5e:eb:85:d1:6c:c7:75:7f:fb:4b:aa:a3:06:
0c:9d:40:ed:14:4b:ed:47:f9:9e:ea:93:3c:59:f8:
14:a5:fd:e1:da:ca:72:fe:1e:dc:22:5f:14:8c:e1:
6d:fd:2e:72:7c:11:a2:7a:2d:24:c2:06:5d:cd:f3:
7f:e3:9d:e3:c4:a6:16:ec:05:5a:6b:2e:76:6e:20:
24:b8:87:5e:99:17:86:ea:bc:d6:3c:4a:0c:2b:94:
96:78:31:37:81:89:9a:2a:14:c5:85:41:75:79:34:
c6:b5:a3:91:c5:4e:72:65:40:41:bd:4a:9a:96:fd:
fc:0d:ba:25:13:41:e4:0c:d7:ba:77:78:18:99:bf:
1b:86:37:a0:90:27:52:1a:05:c2:87:73:76:3a:fc:
90:c1:57:09:df:40:36:ca:0a:29:cb:dc:69:5a:0f:
c8:8a:44:72:4f:ea:4c:b6:de:9c:47:11:f3:98:7e:
75:1a:10:9e:1d:89:8b:27:de:e4:15:18:8d:e3:22:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:D0:A6:C3:E2:C2:6E:AE:58:A8:84:E9:DD:4B:A3:31:0B:B9:E9
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a8:a2:d9:29:e4:95:f2:0c:17:31:f7:72:6a:93:fb:cc:6a:
d9:d5:4a:e9:96:45:d4:bd:5b:1e:52:2f:98:a9:a1:7a:7b:d4:
33:fa:84:64:f0:3a:70:0d:a0:59:c7:c8:c8:6c:6b:84:4f:76:
2f:40:f0:4b:f7:cc:c9:f1:f4:5a:cd:2e:21:42:9a:99:ad:9b:
fe:9c:ee:f1:2a:42:3a:bf:c2:5d:be:1b:a8:f3:0e:87:75:1c:
1a:bc:8a:f0:03:86:e6:e3:8a:fb:9b:1f:3e:5d:a6:79:d6:e6:
1c:2c:96:bc:31:df:47:55:43:51:d1:87:9e:4c:00:bb:60:89:
18:07:65:dc:1f:a2:e2:48:e8:9d:b0:62:a6:6b:93:29:ac:ea:
c4:a2:19:06:26:30:fb:c8:49:61:59:72:07:98:11:1d:5d:bb:
86:7f:11:69:29:88:e3:27:f7:39:53:b4:1b:54:76:ae:48:6f:
e7:0c:9f:f9:a2:58:84:a6:23:6f:54:fa:fc:1d:6b:a8:1c:59:
31:45:f7:6c:d5:7a:af:ef:f0:7d:3c:d1:91:58:af:49:ca:b9:
4f:42:89:a2:3f:c3:9c:98:49:f0:ab:41:b9:17:49:7e:07:d6:
fc:d3:b3:ea:68:a0:72:cf:b0:51:77:bd:86:fb:bb:6e:06:50:
9c:13:c4:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39z1zCZR0M00Wef6X951MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjVjODhjNWVkOTRhZjFjOTlkNTAxYmEwMjk1ZjQwNDM3
MjUxYzQwHhcNMjUwODIzMDMwMTM3WhcNMjUwODI0MDMwMTM3WjAzMTEwLwYDVQQD
EyhlYjI4ZDBhNmMzZTJjMjZlYWU1OGE4ODRlOWRkNGJhMzMxMGJiOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y24HW1WSO65b4ZAHNERTsKrd9Pt
dpKWHlEdaSlinhJcNA2G75VwwdwgSse3YAEBRb0hQchWkmQl+lFT+l7rhdFsx3V/
+0uqowYMnUDtFEvtR/me6pM8WfgUpf3h2spy/h7cIl8UjOFt/S5yfBGiei0kwgZd
zfN/453jxKYW7AVaay52biAkuIdemReG6rzWPEoMK5SWeDE3gYmaKhTFhUF1eTTG
taORxU5yZUBBvUqalv38DbolE0HkDNe6d3gYmb8bhjegkCdSGgXCh3N2OvyQwVcJ
30A2ygopy9xpWg/IikRyT+pMtt6cRxHzmH51GhCeHYmLJ97kFRiN4yK1RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOso0KbD4sJurliohOndS6MxC7npMB8GA1UdIwQY
MBaAFPS1yIxe2UrxyZ1QG6ApX0BDclHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDIt
YzU3YWRhZDFiZmEzLzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDItYzU3YWRhZDFiZmEz
LzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6ii2Snk
lfIMFzH3cmqT+8xq2dVK6ZZF1L1bHlIvmKmhenvUM/qEZPA6cA2gWcfIyGxrhE92
L0DwS/fMyfH0Ws0uIUKama2b/pzu8SpCOr/CXb4bqPMOh3UcGryK8AOG5uOK+5sf
Pl2medbmHCyWvDHfR1VDUdGHnkwAu2CJGAdl3B+i4kjonbBipmuTKazqxKIZBiYw
+8hJYVlyB5gRHV27hn8RaSmI4yf3OVO0G1R2rkhv5wyf+aJYhKYjb1T6/B1rqBxZ
MUX3bNV6r+/wfTzRkVivScq5T0KJoj/DnJhJ8KtBuRdJfgfW/NOz6migcs+wUXe9
hvu7bgZQnBPEtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:21 2025 by rpki-client