Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: TfSvNOTehJBs8pOdEvaDP/74Bm6WdixF/lj3kReNVa4=
Subject key identifier: C4:80:C9:8B:9B:83:B8:D4:94:CC:97:EE:54:AB:A4:79:CF:83:55:97
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 0197C6EF9CDE19F6DC62CB6E9BAFCB630D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0C71
Signing time: Tue 01 Jul 2025 17:01:21 +0000
Manifest this update: Tue 01 Jul 2025 17:01:21 +0000
Manifest next update: Wed 02 Jul 2025 17:01:21 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: x/ULfdLhuRloVhzQARpNw9DKXmIpzhBKo95+QLyn3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:9c:de:19:f6:dc:62:cb:6e:9b:af:cb:63:0d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Jul 1 17:01:21 2025 GMT
Not After : Jul 2 17:01:21 2025 GMT
Subject: CN=c480c98b9b83b8d494cc97ee54aba479cf835597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:cc:1c:11:42:78:04:d9:0a:68:b1:d2:27:
50:dd:ed:eb:e3:91:1d:2e:e5:c7:f5:86:cb:57:2e:
dc:de:9f:c8:b3:5c:8e:21:d2:81:65:1f:ca:a0:c4:
f3:0e:f1:85:05:a4:7e:3d:58:22:c9:9e:5e:f0:f5:
91:d8:93:c0:f4:7f:33:97:0f:ef:a3:50:71:64:cc:
34:e0:62:c2:6e:05:5a:40:84:59:2b:6b:1b:46:8a:
e6:38:f5:bd:e6:12:07:01:82:de:6e:4f:94:86:05:
03:cd:d6:c0:bd:04:cb:70:60:cc:61:7f:29:a9:25:
07:ff:65:f8:be:3b:e7:52:8e:b3:d4:ca:15:41:7a:
52:74:06:2a:33:23:b4:7b:6d:0e:d9:49:17:da:c4:
25:58:31:7b:80:2a:08:74:94:bb:af:3f:6d:f4:bf:
2a:a7:51:87:cc:6a:89:a6:29:0c:d0:21:b6:47:76:
d5:08:73:29:23:db:30:99:6c:3c:f5:16:1a:9d:81:
08:db:2e:65:5e:4e:ab:97:cf:4e:53:51:17:bf:60:
a4:c3:bc:c8:78:18:4c:a6:e9:b3:b6:f6:20:3e:29:
e1:44:51:eb:d1:e8:45:df:3a:da:67:5e:0d:d6:ed:
75:d9:c8:a7:99:ba:5e:3e:70:0a:c3:67:5b:4f:b6:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:C9:8B:9B:83:B8:D4:94:CC:97:EE:54:AB:A4:79:CF:83:55:97
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:26:9b:2a:59:95:b3:39:5d:32:bc:be:f2:3c:98:0c:75:3d:
68:2a:86:28:bc:00:45:e4:7d:cd:0b:f3:78:87:e4:d5:0d:1e:
49:d7:1e:fd:fc:39:6a:a2:25:18:2f:c2:f6:3f:00:b9:d3:4e:
9d:d6:49:8f:70:b2:a7:61:a8:6b:fd:f4:96:ba:04:e1:d2:da:
62:6c:22:83:cd:d8:d7:e3:91:f9:76:c1:d3:b7:52:ea:68:52:
ef:b0:c7:bd:89:b8:b0:fe:ce:e2:64:da:4e:2f:12:ca:b6:1f:
9f:60:d5:38:2e:58:a0:99:57:59:1b:df:15:53:69:55:b9:ac:
be:17:3b:21:0b:4e:67:fb:37:0e:ac:70:dd:7b:bd:3e:f9:3c:
76:09:56:38:b3:06:51:aa:97:84:b0:9d:74:ed:bc:7f:6e:c2:
e6:a7:3a:f0:ce:e8:e5:5b:1f:a1:41:d0:25:b1:a2:83:66:a9:
6b:75:1c:3b:1d:82:65:23:7f:e7:35:0d:56:64:6e:84:a5:7f:
f2:a2:d5:bc:d5:77:51:11:d0:c5:c7:ed:72:ac:ea:86:44:1f:
34:40:62:d7:fa:e5:d5:da:ea:c0:00:6e:1b:f8:c1:f0:9d:b5:
de:0a:9b:87:8f:11:97:a0:83:82:99:e9:d8:be:01:f1:66:c9:
f9:12:63:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfG75zeGfbcYstum6/LYw09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGU1MTIyNTY5ZGU1MmNkNTBhZWM3OTM0OTRiZjFjZTdj
MjVmYzgwHhcNMjUwNzAxMTcwMTIxWhcNMjUwNzAyMTcwMTIxWjAzMTEwLwYDVQQD
EyhjNDgwYzk4YjliODNiOGQ0OTRjYzk3ZWU1NGFiYTQ3OWNmODM1NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3jMHBFCeATZCmix0idQ3e3r45Ed
LuXH9YbLVy7c3p/Is1yOIdKBZR/KoMTzDvGFBaR+PVgiyZ5e8PWR2JPA9H8zlw/v
o1BxZMw04GLCbgVaQIRZK2sbRormOPW95hIHAYLebk+UhgUDzdbAvQTLcGDMYX8p
qSUH/2X4vjvnUo6z1MoVQXpSdAYqMyO0e20O2UkX2sQlWDF7gCoIdJS7rz9t9L8q
p1GHzGqJpikM0CG2R3bVCHMpI9swmWw89RYanYEI2y5lXk6rl89OU1EXv2Ckw7zI
eBhMpumztvYgPinhRFHr0ehF3zraZ14N1u112cinmbpePnAKw2dbT7ZoLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSAyYubg7jUlMyX7lSrpHnPg1WXMB8GA1UdIwQY
MBaAFC+OUSJWneUs1QrseTSUvxznwl/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2Et
ODY4OGIxZTUzNTcxLzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2EtODY4OGIxZTUzNTcx
LzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSabKlmV
szldMry+8jyYDHU9aCqGKLwAReR9zQvzeIfk1Q0eSdce/fw5aqIlGC/C9j8AudNO
ndZJj3Cyp2Goa/30lroE4dLaYmwig83Y1+OR+XbB07dS6mhS77DHvYm4sP7O4mTa
Ti8SyrYfn2DVOC5YoJlXWRvfFVNpVbmsvhc7IQtOZ/s3Dqxw3Xu9Pvk8dglWOLMG
UaqXhLCddO28f27C5qc68M7o5VsfoUHQJbGig2apa3UcOx2CZSN/5zUNVmRuhKV/
8qLVvNV3URHQxcftcqzqhkQfNEBi1/rl1drqwABuG/jB8J213gqbh48Rl6CDgpnp
2L4B8WbJ+RJjbQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:47:38 2025 by rpki-client