Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: kPVJOzG9bX1ZJb5yAyacAOTckf9Lp4HxU5jj1DQB5kE=
Subject key identifier: 58:5F:1B:72:1C:D0:78:D7:E5:31:32:5E:F5:86:88:96:C4:D8:CF:34
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 0197B5FC845A4DB52B5AD10EC4030DD805E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 09C1
Signing time: Sat 28 Jun 2025 10:01:54 +0000
Manifest this update: Sat 28 Jun 2025 10:01:54 +0000
Manifest next update: Sun 29 Jun 2025 10:01:54 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: +quzI6Z5W5Ypip3T3fpLU1I0eTrJi/whc8oIDt4rKg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:84:5a:4d:b5:2b:5a:d1:0e:c4:03:0d:d8:05:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: Jun 28 10:01:54 2025 GMT
Not After : Jun 29 10:01:54 2025 GMT
Subject: CN=585f1b721cd078d7e531325ef5868896c4d8cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:98:43:7c:c8:57:ff:bd:d0:99:4e:70:c7:
45:09:e8:43:60:62:f2:3c:43:44:50:23:e9:6e:88:
b9:2d:ff:8f:31:85:46:2b:c9:c1:14:d4:91:45:2b:
e9:5d:53:0d:cb:ca:e0:fb:70:b1:2f:1c:6a:ae:12:
c5:20:ca:fb:13:2b:05:09:e2:5b:aa:5d:87:6c:28:
8f:43:73:13:96:10:35:33:55:7c:53:be:ba:99:db:
3a:b9:f4:c7:b1:78:0e:ab:9e:f4:3f:59:87:56:a0:
a4:4c:04:d0:97:6f:fb:74:bd:20:58:32:e2:5e:38:
c2:b5:07:51:10:fe:4c:d3:0d:69:66:9c:aa:dd:5f:
0e:f3:a0:d0:f2:d8:f2:41:c3:14:d9:ec:84:65:82:
c0:2c:58:07:6e:4d:a5:c0:66:53:93:8b:13:ba:d2:
e1:c5:94:99:8b:8b:19:2f:1e:a6:05:77:ed:f9:96:
be:ab:11:d1:7d:b3:fb:38:4f:51:e8:1d:28:1f:ce:
21:06:ce:f1:3d:84:76:37:98:7f:04:03:34:dc:96:
aa:36:19:0f:a0:1b:21:dc:07:04:ae:37:05:78:2f:
43:15:b1:84:4f:0e:6e:15:7c:f7:f6:e7:db:f2:c4:
f6:b2:e4:23:53:88:b6:c6:c9:20:88:eb:26:3e:e7:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:1B:72:1C:D0:78:D7:E5:31:32:5E:F5:86:88:96:C4:D8:CF:34
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:ff:dd:97:a5:52:a0:e5:ee:e0:d9:32:40:88:38:2c:18:
b1:87:7b:58:a4:67:7a:da:58:f1:4b:9a:31:a2:06:f1:c2:02:
93:8d:9a:44:f4:8c:e7:c5:32:26:bd:4e:4a:9c:c0:ae:16:dc:
25:f7:15:38:bb:6d:39:22:ad:8a:a5:77:b2:59:79:80:f9:55:
5c:54:b5:16:e0:d3:18:40:7e:10:40:7d:98:c2:df:cc:a7:b2:
8a:e7:1a:ba:29:e9:98:0d:60:7e:f2:6a:b5:9e:1a:53:98:82:
e2:b5:e9:7f:8a:1e:f5:4b:33:cc:82:a1:e3:03:c9:1f:d0:9e:
8d:bd:81:3e:26:3c:0c:31:09:e6:25:4a:8d:37:76:cf:5b:71:
86:32:40:23:af:df:70:5a:54:46:ad:93:c2:be:ae:9a:6d:d5:
33:64:cd:16:3f:64:ce:3a:62:79:d9:18:74:fb:5d:27:5e:8e:
5b:50:48:62:54:5a:e7:fa:4e:40:d1:a8:30:61:95:e1:f4:2f:
0d:23:cd:2f:36:d7:6c:d1:9a:ad:e8:46:2e:af:a9:f2:88:ba:
c2:12:c7:ef:ec:83:28:a3:89:fc:01:3e:39:e6:02:0f:3a:9d:
92:ea:63:83:de:97:59:82:26:24:cc:06:e8:b3:88:cd:77:a3:
9d:be:b7:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/IRaTbUrWtEOxAMN2AXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmYwMTFhZGFhZWVjNDY1YjE4MmFlZTcwOWMzNjdjODdl
NThmMzgwHhcNMjUwNjI4MTAwMTU0WhcNMjUwNjI5MTAwMTU0WjAzMTEwLwYDVQQD
Eyg1ODVmMWI3MjFjZDA3OGQ3ZTUzMTMyNWVmNTg2ODg5NmM0ZDhjZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkuYQ3zIV/+90JlOcMdFCehDYGLy
PENEUCPpboi5Lf+PMYVGK8nBFNSRRSvpXVMNy8rg+3CxLxxqrhLFIMr7EysFCeJb
ql2HbCiPQ3MTlhA1M1V8U766mds6ufTHsXgOq570P1mHVqCkTATQl2/7dL0gWDLi
XjjCtQdREP5M0w1pZpyq3V8O86DQ8tjyQcMU2eyEZYLALFgHbk2lwGZTk4sTutLh
xZSZi4sZLx6mBXft+Za+qxHRfbP7OE9R6B0oH84hBs7xPYR2N5h/BAM03JaqNhkP
oBsh3AcErjcFeC9DFbGETw5uFXz39ufb8sT2suQjU4i2xskgiOsmPufjEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhfG3Ic0HjX5TEyXvWGiJbE2M80MB8GA1UdIwQY
MBaAFC4vARraruxGWxgq7nCcNnyH5Y84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQt
MjIyYmFmOTUzYjQ0LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQtMjIyYmFmOTUzYjQ0
LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY57/3Zel
UqDl7uDZMkCIOCwYsYd7WKRnetpY8UuaMaIG8cICk42aRPSM58UyJr1OSpzArhbc
JfcVOLttOSKtiqV3sll5gPlVXFS1FuDTGEB+EEB9mMLfzKeyiucauinpmA1gfvJq
tZ4aU5iC4rXpf4oe9UszzIKh4wPJH9Cejb2BPiY8DDEJ5iVKjTd2z1txhjJAI6/f
cFpURq2Twr6umm3VM2TNFj9kzjpiedkYdPtdJ16OW1BIYlRa5/pOQNGoMGGV4fQv
DSPNLzbXbNGarehGLq+p8oi6whLH7+yDKKOJ/AE+OeYCDzqdkupjg96XWYImJMwG
6LOIzXejnb63tA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:50 2025 by rpki-client