Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: tqmeSAFeej+dEiUGzggkoE/S7NpoCY6IGpzKEc+9LLY=
Subject key identifier: 69:E9:4A:E6:42:21:41:07:E7:C7:CF:FE:21:9B:28:3A:8E:D9:7B:0E
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 0198D472933A95608FAA2C4E4D1CA19AA4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 06D2
Signing time: Sat 23 Aug 2025 01:02:15 +0000
Manifest this update: Sat 23 Aug 2025 01:02:15 +0000
Manifest next update: Sun 24 Aug 2025 01:02:15 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: 3MxHkUFzB/8UpOjBU/no4Mja1KZC3gk/Sp584BBku0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:93:3a:95:60:8f:aa:2c:4e:4d:1c:a1:9a:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Aug 23 01:02:15 2025 GMT
Not After : Aug 24 01:02:15 2025 GMT
Subject: CN=69e94ae642214107e7c7cffe219b283a8ed97b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:4d:95:1e:e1:bb:cf:87:f9:b4:54:6a:89:
77:b2:c0:75:c5:a9:e9:33:b1:fe:17:75:6f:be:be:
cd:12:23:6b:17:09:13:40:90:df:0e:b8:77:13:d7:
77:e7:a0:e2:b1:83:3d:74:72:bb:d1:fc:93:53:e4:
52:e8:02:f0:cf:65:32:66:1b:b8:9c:16:34:61:39:
d9:f1:f9:a9:72:bb:6c:78:60:0f:21:32:e0:8c:40:
c4:7e:1e:73:26:e9:87:94:ff:a8:8c:13:a3:d7:4c:
bc:ff:b1:b8:c3:ab:9c:cd:c2:4a:67:e5:b5:29:08:
c1:9a:59:dd:46:ab:19:c5:90:d2:25:70:12:8e:02:
fb:1d:0e:2e:7e:3f:84:33:bf:e0:a5:da:13:af:00:
b3:46:8f:4a:93:73:85:76:7b:a0:cc:44:42:e3:b1:
cc:f2:1d:cf:49:9f:e8:33:4f:27:9d:96:61:c6:54:
63:bd:87:50:13:6c:3f:b6:fe:75:70:85:77:1d:4e:
8f:47:aa:16:7b:7e:93:7e:8e:b8:d4:f7:94:f4:ba:
ce:d4:c2:59:ca:f3:5d:a5:5f:e4:6e:ec:37:22:0c:
8e:88:13:8c:04:3f:42:14:cb:db:28:bc:de:e0:07:
b1:8a:40:66:95:f4:01:04:f9:e5:6d:ae:98:fa:86:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:4A:E6:42:21:41:07:E7:C7:CF:FE:21:9B:28:3A:8E:D9:7B:0E
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c9:0a:7c:aa:dc:8e:92:da:f1:2d:8e:cf:8b:43:79:68:bb:
54:78:58:57:b4:a2:9e:f3:2e:2a:22:5e:04:c5:68:80:cd:23:
35:c2:ba:17:36:08:fa:0d:57:08:a1:8c:ba:01:b3:49:47:ac:
3f:7e:30:e5:31:fe:4e:e4:58:21:08:50:89:7f:93:de:22:ec:
eb:77:c2:e0:88:fe:65:79:02:18:1f:7d:6f:13:17:4b:a7:55:
5e:d9:c1:5b:90:c2:e0:15:13:d6:61:ac:bb:5a:04:c8:ed:19:
9c:18:48:e2:b6:40:85:d9:ec:bd:68:b4:6e:d1:d3:aa:76:52:
f0:67:f9:56:35:9d:97:73:00:81:ef:d4:d7:03:48:63:bf:0e:
77:fe:fb:e7:59:c1:43:59:d2:ad:44:7f:86:dd:ef:c4:c9:90:
a3:24:57:31:c5:64:4e:c7:9b:d4:46:d2:55:54:44:52:8b:9d:
50:a2:6e:7a:da:15:ba:a8:1f:1b:dc:cd:a2:77:b1:a2:25:a3:
db:fa:c4:87:82:b4:ec:96:39:ff:39:11:6d:f5:bc:70:88:89:
1e:d1:ca:28:a7:e9:f0:4a:48:1f:1e:9b:8b:3a:be:97:a5:82:
d2:59:5f:5f:33:63:9b:52:0d:dd:1c:a9:4c:31:52:0b:cf:44:
fa:a7:d0:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcpM6lWCPqixOTRyhmqTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi
NmY5ZjgwHhcNMjUwODIzMDEwMjE1WhcNMjUwODI0MDEwMjE1WjAzMTEwLwYDVQQD
Eyg2OWU5NGFlNjQyMjE0MTA3ZTdjN2NmZmUyMTliMjgzYThlZDk3YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ANNlR7hu8+H+bRUaol3ssB1xanp
M7H+F3Vvvr7NEiNrFwkTQJDfDrh3E9d356DisYM9dHK70fyTU+RS6ALwz2UyZhu4
nBY0YTnZ8fmpcrtseGAPITLgjEDEfh5zJumHlP+ojBOj10y8/7G4w6uczcJKZ+W1
KQjBmlndRqsZxZDSJXASjgL7HQ4ufj+EM7/gpdoTrwCzRo9Kk3OFdnugzERC47HM
8h3PSZ/oM08nnZZhxlRjvYdQE2w/tv51cIV3HU6PR6oWe36Tfo641PeU9LrO1MJZ
yvNdpV/kbuw3IgyOiBOMBD9CFMvbKLze4AexikBmlfQBBPnlba6Y+oYQNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnpSuZCIUEH58fP/iGbKDqO2XsOMB8GA1UdIwQY
MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt
NTlkOWQ0OGVhM2IxLzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix
LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8kKfKrc
jpLa8S2Oz4tDeWi7VHhYV7SinvMuKiJeBMVogM0jNcK6FzYI+g1XCKGMugGzSUes
P34w5TH+TuRYIQhQiX+T3iLs63fC4Ij+ZXkCGB99bxMXS6dVXtnBW5DC4BUT1mGs
u1oEyO0ZnBhI4rZAhdnsvWi0btHTqnZS8Gf5VjWdl3MAge/U1wNIY78Od/7751nB
Q1nSrUR/ht3vxMmQoyRXMcVkTseb1EbSVVREUoudUKJuetoVuqgfG9zNonexoiWj
2/rEh4K07JY5/zkRbfW8cIiJHtHKKKfp8EpIHx6bizq+l6WC0llfXzNjm1IN3Ryp
TDFSC89E+qfQKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:35 2025 by rpki-client