Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier: z6xg18ehQ6AHkjJLR2EGp2lNgL1DxTCFkuSYJ0AIxjo=
Subject key identifier: F0:DC:0D:F1:92:61:65:F5:80:5B:A2:C4:7F:5A:CE:9B:53:DE:9E:1F
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial: 0198D54E48B76C2BCD4B1357558510FA11E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number: 07F4
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: UYz9y++pfYbETdc91RSdSCGzdil0ra/xi1F+ZJriFss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:48:b7:6c:2b:cd:4b:13:57:55:85:10:fa:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=f0dc0df1926165f5805ba2c47f5ace9b53de9e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:64:8f:45:05:6c:7c:0b:75:75:c2:25:a7:
91:f4:ae:60:70:af:c9:5d:44:77:d5:87:f5:df:eb:
4c:9a:a0:c0:45:ae:32:a0:78:69:1c:1e:aa:22:5f:
df:dc:13:26:7b:2d:47:ab:c0:0f:e8:d0:3a:41:9d:
d0:68:d4:a8:2f:b7:c3:2b:00:27:11:84:17:d4:2d:
8f:1b:ab:8e:08:b4:f5:6b:d7:40:93:b9:44:05:f7:
2e:15:2a:42:3f:3e:3d:bc:15:b6:3b:6c:73:ec:07:
15:f4:f3:cf:06:2a:dc:c6:3f:2c:2f:d7:fa:ef:fe:
f6:b0:f2:e9:d9:3e:84:e2:99:a6:80:32:aa:51:e1:
fc:3f:bb:43:33:64:ea:17:f2:26:52:34:64:0d:07:
e3:1e:ec:ab:74:3d:f7:17:d6:8e:81:74:78:f6:20:
05:28:ec:75:98:e9:4e:0d:7f:fb:72:87:22:86:e4:
62:65:ee:a1:55:6a:0e:fd:e1:a7:76:68:15:a2:51:
92:42:cd:e7:4d:f6:36:bb:08:fe:4f:95:d6:5d:bb:
79:2f:a7:a0:df:42:03:88:e0:f4:32:df:65:9e:f7:
82:f8:a3:3c:9a:d0:22:2f:49:e4:c4:88:97:75:e4:
ae:6e:95:0f:a6:f1:50:e6:57:0f:45:d9:d9:1e:81:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:0D:F1:92:61:65:F5:80:5B:A2:C4:7F:5A:CE:9B:53:DE:9E:1F
X509v3 Authority Key Identifier:
keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:4a:da:54:fe:7d:a0:11:d0:1e:7d:3c:2d:8b:06:57:4f:
1f:88:27:ea:73:5c:b9:fe:48:65:ce:1f:22:85:a9:da:64:63:
72:0f:77:62:e6:f6:71:17:eb:4f:46:a6:22:8a:b3:86:92:51:
e3:d6:38:8e:c4:d3:8e:56:9b:6b:39:6f:ba:7f:a1:24:e0:4e:
15:f1:e6:06:46:99:0c:5d:5d:76:de:8c:c3:6c:f0:e8:f9:77:
7f:87:e7:f7:34:bd:d2:a5:88:90:5c:51:4a:01:59:45:35:38:
a7:2a:7a:f4:cf:fa:9e:76:b3:0e:ff:a7:7b:fe:68:69:51:1e:
ed:a1:e8:99:11:00:15:4e:10:2f:c7:3a:dd:98:a8:a5:ff:58:
3e:9e:e9:bf:7c:a5:9b:78:0b:4e:cf:e3:69:b9:7c:90:74:0e:
df:a4:8f:56:9b:61:77:8a:2e:7c:2b:c0:b7:72:f8:b5:65:dc:
b3:79:d1:5e:cd:b5:e0:75:05:7c:d1:b3:ca:8b:97:00:09:90:
1c:19:c0:38:2d:4b:de:6f:26:2d:84:be:15:50:bf:28:d1:57:
40:dc:48:a3:6a:46:12:a2:66:54:87:12:79:6e:d8:51:dd:e7:
9b:81:cc:51:9a:5a:23:52:c6:44:61:29:df:71:20:5d:ba:f4:
47:56:49:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTki3bCvNSxNXVYUQ+hHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YjZjYjQ4ODQxY2U1MTliMjgzNTljYWYxYmNlMzQwZTMz
NjgxZWYwHhcNMjUwODIzMDUwMjE0WhcNMjUwODI0MDUwMjE0WjAzMTEwLwYDVQQD
EyhmMGRjMGRmMTkyNjE2NWY1ODA1YmEyYzQ3ZjVhY2U5YjUzZGU5ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCdkj0UFbHwLdXXCJaeR9K5gcK/J
XUR31Yf13+tMmqDARa4yoHhpHB6qIl/f3BMmey1Hq8AP6NA6QZ3QaNSoL7fDKwAn
EYQX1C2PG6uOCLT1a9dAk7lEBfcuFSpCPz49vBW2O2xz7AcV9PPPBircxj8sL9f6
7/72sPLp2T6E4pmmgDKqUeH8P7tDM2TqF/ImUjRkDQfjHuyrdD33F9aOgXR49iAF
KOx1mOlODX/7cocihuRiZe6hVWoO/eGndmgVolGSQs3nTfY2uwj+T5XWXbt5L6eg
30IDiOD0Mt9lnveC+KM8mtAiL0nkxIiXdeSubpUPpvFQ5lcPRdnZHoHdCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDcDfGSYWX1gFuixH9azptT3p4fMB8GA1UdIwQY
MBaAFJe2y0iEHOUZsoNZyvG840DjNoHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZGQ5MmUtM2IxMS00MTZmLWFlOTMt
NDZlYTY1NmJmMzg5LzEvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iZGQ5MmUtM2IxMS00MTZmLWFlOTMtNDZlYTY1NmJmMzg5
LzEvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmVK2lT+
faAR0B59PC2LBldPH4gn6nNcuf5IZc4fIoWp2mRjcg93Yub2cRfrT0amIoqzhpJR
49Y4jsTTjlabazlvun+hJOBOFfHmBkaZDF1ddt6Mw2zw6Pl3f4fn9zS90qWIkFxR
SgFZRTU4pyp69M/6nnazDv+ne/5oaVEe7aHomREAFU4QL8c63Ziopf9YPp7pv3yl
m3gLTs/jabl8kHQO36SPVpthd4oufCvAt3L4tWXcs3nRXs214HUFfNGzyouXAAmQ
HBnAOC1L3m8mLYS+FVC/KNFXQNxIo2pGEqJmVIcSeW7YUd3nm4HMUZpaI1LGRGEp
33EgXbr0R1ZJlg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:45 2025 by rpki-client