Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: 0ZHevqBe41vkF0HQjOIZFa13/KQL+QaPuncN/L06Hc4=
Subject key identifier: 5A:4C:E6:4B:C8:D8:B7:C0:5B:3C:83:D0:B3:9C:D4:A8:55:07:31:CE
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 0197B77BF100E0E584B0BB6E5F856AFACA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 159E
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: NThsKmK9huymRAhSqZyFPYSqrvhkAQgBJXFvY/5LOHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f1:00:e0:e5:84:b0:bb:6e:5f:85:6a:fa:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=5a4ce64bc8d8b7c05b3c83d0b39cd4a8550731ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:7f:28:16:7b:5d:3c:37:cc:0c:9d:8d:35:
51:02:17:0f:e5:27:81:0f:fd:16:a0:35:5a:c8:5f:
3d:d1:0b:95:81:8a:ec:c2:14:4d:05:16:c8:6f:54:
1c:b0:9d:54:df:42:e8:68:3e:cd:a4:54:6d:67:e4:
8c:81:48:5f:49:b5:62:92:e7:35:d9:46:c9:72:a9:
cd:74:9f:d5:e5:03:90:92:f5:f8:f5:fb:a5:7b:bf:
54:b7:cb:ed:d7:b9:fa:4a:1e:50:38:fc:54:ca:d9:
5e:5a:c9:c5:cc:15:81:29:84:3a:a1:8a:d6:63:bf:
29:5f:f7:cb:70:8b:53:c4:52:46:ac:2a:c0:71:1d:
bd:b1:c7:d5:23:27:f1:ff:9f:ea:15:fc:fd:4a:93:
58:84:fc:fc:3f:1e:80:76:b4:2f:51:52:e9:a5:e2:
2a:ed:3c:ec:96:a1:2c:6e:b4:d3:d8:fe:01:4a:3b:
58:97:fc:9c:47:6f:cf:a8:df:d6:b5:e4:28:c8:10:
be:d3:82:54:c4:c6:d4:78:2d:8c:ef:5b:30:7f:b0:
b6:ee:50:5f:ec:be:6b:54:b0:20:19:41:b7:f5:7c:
f5:56:97:0b:22:94:bb:0c:bc:64:25:94:f6:94:fd:
e8:17:54:9d:7a:fa:97:aa:e9:49:62:50:93:cd:51:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:E6:4B:C8:D8:B7:C0:5B:3C:83:D0:B3:9C:D4:A8:55:07:31:CE
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:57:f1:80:ba:65:51:6c:be:61:d3:3f:17:d0:ee:4b:3a:36:
73:fc:45:8f:f2:c8:72:58:15:73:e1:dc:b5:be:2c:f1:5a:48:
b1:3c:84:ed:7b:31:f1:cc:bb:28:c9:b5:9d:26:19:49:21:51:
1b:33:95:79:d8:6b:b3:76:97:a9:76:f2:4e:cd:d4:a6:a8:6b:
8c:7b:26:57:0c:ab:da:82:e5:3d:d1:da:16:9b:17:76:28:34:
82:65:8a:08:65:65:8d:3b:b9:3c:ab:7e:1b:03:a1:e8:8b:f7:
ed:9e:df:14:c2:b2:fc:15:97:0d:20:76:37:b6:10:ae:6a:5f:
1f:aa:e3:3c:8f:ae:73:ba:9f:0f:99:6a:fc:9c:62:18:77:4e:
8f:73:05:a5:f7:af:6c:97:3e:4b:d3:b8:4f:1b:09:5d:6f:47:
5a:75:8b:cd:19:92:b3:c3:52:e9:7c:2b:b1:2d:b5:2f:a2:88:
13:64:e2:67:94:06:5f:db:c3:e9:9e:9b:c5:64:a7:07:fc:35:
3b:e5:c4:e3:24:bb:15:52:d3:02:19:2c:f6:1b:9c:0f:bf:a9:
45:76:c9:9b:bf:55:f2:29:af:e7:c5:85:74:cc:f1:82:9e:7f:
61:70:4c:ee:27:2a:85:c3:88:c3:78:04:22:35:ab:ef:3c:15:
34:fb:2c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/EA4OWEsLtuX4Vq+soOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy
YjY5MDEwHhcNMjUwNjI4MTcwMDQyWhcNMjUwNjI5MTcwMDQyWjAzMTEwLwYDVQQD
Eyg1YTRjZTY0YmM4ZDhiN2MwNWIzYzgzZDBiMzljZDRhODU1MDczMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07N/KBZ7XTw3zAydjTVRAhcP5SeB
D/0WoDVayF890QuVgYrswhRNBRbIb1QcsJ1U30LoaD7NpFRtZ+SMgUhfSbVikuc1
2UbJcqnNdJ/V5QOQkvX49fule79Ut8vt17n6Sh5QOPxUytleWsnFzBWBKYQ6oYrW
Y78pX/fLcItTxFJGrCrAcR29scfVIyfx/5/qFfz9SpNYhPz8Px6AdrQvUVLppeIq
7TzslqEsbrTT2P4BSjtYl/ycR2/PqN/WteQoyBC+04JUxMbUeC2M71swf7C27lBf
7L5rVLAgGUG39Xz1VpcLIpS7DLxkJZT2lP3oF1SdevqXqulJYlCTzVFT0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpM5kvI2LfAWzyD0LOc1KhVBzHOMB8GA1UdIwQY
MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt
YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx
LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFfxgLpl
UWy+YdM/F9DuSzo2c/xFj/LIclgVc+Hctb4s8VpIsTyE7Xsx8cy7KMm1nSYZSSFR
GzOVedhrs3aXqXbyTs3UpqhrjHsmVwyr2oLlPdHaFpsXdig0gmWKCGVljTu5PKt+
GwOh6Iv37Z7fFMKy/BWXDSB2N7YQrmpfH6rjPI+uc7qfD5lq/JxiGHdOj3MFpfev
bJc+S9O4TxsJXW9HWnWLzRmSs8NS6XwrsS21L6KIE2TiZ5QGX9vD6Z6bxWSnB/w1
O+XE4yS7FVLTAhks9hucD7+pRXbJm79V8imv58WFdMzxgp5/YXBM7icqhcOIw3gE
IjWr7zwVNPssJA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:25 2025 by rpki-client