Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: dYky/pcbtsjlYS5dGZQgfjMwxp1z5EI2BwDyT2eYm/k=
Subject key identifier: 93:AF:30:59:87:36:BE:66:58:19:EA:E6:5F:66:85:23:64:FF:22:AF
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 0198D47431C996112FC0A7DA082B332A3820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 064D
Signing time: Sat 23 Aug 2025 01:04:01 +0000
Manifest this update: Sat 23 Aug 2025 01:04:01 +0000
Manifest next update: Sun 24 Aug 2025 01:04:01 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: YQsOLW+HSTfGaLLzRsF7MhMf4GDtUasuGlIUIXgxRN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:31:c9:96:11:2f:c0:a7:da:08:2b:33:2a:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Aug 23 01:04:01 2025 GMT
Not After : Aug 24 01:04:01 2025 GMT
Subject: CN=93af30598736be665819eae65f66852364ff22af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:97:bf:a4:37:3a:17:12:07:fd:e6:ef:79:
72:ce:ab:3f:35:b4:cc:46:b0:b1:6e:30:ed:3b:08:
67:2a:23:d7:7c:f7:ea:b6:80:e9:71:64:af:ec:86:
0b:7c:42:49:0d:ef:3e:a5:ee:f3:9a:d0:e8:bf:36:
91:96:31:79:97:3b:2e:5b:1d:ef:0f:3d:2a:3d:50:
e4:dc:db:17:df:35:66:14:c8:a7:1c:15:ff:60:3d:
cf:0e:18:b2:59:72:8d:3e:8a:41:fe:c2:fd:10:b1:
ba:1f:26:47:c8:10:9b:1f:4a:57:57:ed:cc:bb:a4:
02:16:7d:9e:19:80:0f:fa:f2:54:7f:32:a1:c7:ed:
b4:0c:3f:08:4b:cf:58:ba:eb:7e:9e:27:e4:ad:34:
c0:f7:48:ca:83:6f:bf:73:1d:16:ae:8d:56:d0:05:
cd:5b:42:10:5e:23:1e:2a:f6:15:6c:79:18:36:92:
d6:99:71:6a:3f:16:68:43:4e:d9:5f:55:7a:78:69:
62:fb:e6:8e:00:fa:48:12:4e:56:e3:54:da:0a:2c:
e7:8d:2e:67:27:5b:7c:04:a2:8b:4a:0c:21:a2:a6:
59:20:87:75:f8:86:d6:47:e2:33:38:5f:48:96:a3:
20:fa:e7:14:6f:92:67:fd:3c:80:a1:e6:f7:db:49:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:30:59:87:36:BE:66:58:19:EA:E6:5F:66:85:23:64:FF:22:AF
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d0:73:a8:ae:cf:84:55:dd:65:85:19:55:c4:af:6b:e2:a1:
f8:0b:c5:85:30:d3:de:f1:e8:cc:6b:36:26:d6:64:2c:6f:85:
ab:64:43:fc:c6:dc:7a:cd:14:f2:a2:54:94:e1:8a:dc:49:be:
de:4c:a2:ba:8a:fe:77:08:38:0f:99:b8:96:d8:d8:93:d4:60:
e0:20:3c:0f:eb:52:35:9d:04:c2:7f:8e:b6:4c:5d:04:98:04:
3b:f1:13:de:8f:0e:13:bf:a1:9d:bb:a2:a5:71:c0:43:8f:b6:
0e:53:38:e0:e9:36:6d:da:ad:56:64:9f:81:b1:02:76:e5:20:
3d:ed:85:32:17:78:81:9b:13:0b:61:23:17:df:3d:de:2f:4d:
b5:10:2f:a2:db:6f:1b:55:04:a0:0f:2e:c5:ce:f5:c7:86:ea:
8d:c7:b0:a4:8b:23:cf:cc:79:b7:2b:f9:34:a3:0c:34:da:bf:
04:d4:dc:83:b5:0c:10:7a:dc:b2:58:09:ce:e4:00:48:6b:bc:
b1:55:47:3c:fb:3d:15:b8:79:af:59:81:64:5a:d3:d9:83:d6:
5c:5e:36:ba:5a:57:fc:72:3c:45:c2:3c:e1:42:08:b4:8e:c2:
13:bd:1c:8b:b8:e3:f5:37:59:90:5f:1a:d0:f6:de:39:4a:4c:
f3:06:5e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDHJlhEvwKfaCCszKjggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZTI3MWExZDQ0N2U0MTA2MzBmYWMzYTY0MDZlMDRhODMw
NjdjNjcwHhcNMjUwODIzMDEwNDAxWhcNMjUwODI0MDEwNDAxWjAzMTEwLwYDVQQD
Eyg5M2FmMzA1OTg3MzZiZTY2NTgxOWVhZTY1ZjY2ODUyMzY0ZmYyMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJWXv6Q3OhcSB/3m73lyzqs/NbTM
RrCxbjDtOwhnKiPXfPfqtoDpcWSv7IYLfEJJDe8+pe7zmtDovzaRljF5lzsuWx3v
Dz0qPVDk3NsX3zVmFMinHBX/YD3PDhiyWXKNPopB/sL9ELG6HyZHyBCbH0pXV+3M
u6QCFn2eGYAP+vJUfzKhx+20DD8IS89Yuut+nifkrTTA90jKg2+/cx0Wro1W0AXN
W0IQXiMeKvYVbHkYNpLWmXFqPxZoQ07ZX1V6eGli++aOAPpIEk5W41TaCiznjS5n
J1t8BKKLSgwhoqZZIId1+IbWR+IzOF9IlqMg+ucUb5Jn/TyAoeb320momwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOvMFmHNr5mWBnq5l9mhSNk/yKvMB8GA1UdIwQY
MBaAFJficaHUR+QQYw+sOmQG4EqDBnxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEt
NWZmMjYyYWM4N2JhLzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEtNWZmMjYyYWM4N2Jh
LzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtBzqK7P
hFXdZYUZVcSva+Kh+AvFhTDT3vHozGs2JtZkLG+Fq2RD/Mbces0U8qJUlOGK3Em+
3kyiuor+dwg4D5m4ltjYk9Rg4CA8D+tSNZ0Ewn+OtkxdBJgEO/ET3o8OE7+hnbui
pXHAQ4+2DlM44Ok2bdqtVmSfgbECduUgPe2FMhd4gZsTC2EjF9893i9NtRAvottv
G1UEoA8uxc71x4bqjcewpIsjz8x5tyv5NKMMNNq/BNTcg7UMEHrcslgJzuQASGu8
sVVHPPs9Fbh5r1mBZFrT2YPWXF42ulpX/HI8RcI84UIItI7CE70ci7jj9TdZkF8a
0PbeOUpM8wZeBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:25 2025 by rpki-client