Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: rimGXGLFES/1P5CUQaqs8YLQDcb0F9lJwj1ZpRYZFUM=
Subject key identifier: 34:4F:88:7F:C4:42:26:90:E3:5C:D3:EC:65:33:B5:D1:F5:75:DD:89
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 0198D660CD9DC86602FB06E9BD06A333974B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: BzP0K1Gat2Tv63NNeSiKcNhZAxYT7otsOD4sj7YT+D0=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cd:9d:c8:66:02:fb:06:e9:bd:06:a3:33:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=344f887fc4422690e35cd3ec6533b5d1f575dd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:3d:69:6f:74:08:9d:58:0a:c6:ec:48:e9:
a1:c1:e6:47:0d:35:39:f3:1d:53:6e:72:04:0e:3c:
51:ff:15:ee:15:a8:21:1d:38:92:4a:cf:c7:49:69:
3b:30:ba:c3:5e:ef:7d:f9:51:70:5c:b4:5a:f4:1b:
f2:30:84:d3:88:25:55:bc:d3:a7:94:17:00:c8:2e:
da:88:08:b4:f5:31:b2:b6:7b:0d:17:da:d6:82:b5:
29:c8:2b:c6:93:28:57:7f:1e:34:8b:d4:49:94:8a:
23:54:21:06:20:55:d3:7d:40:2d:7a:55:6e:35:0a:
49:4f:94:e4:5d:c0:fe:19:78:cc:74:79:80:80:73:
0e:64:2a:1b:ba:c3:3d:6e:58:7f:18:9f:64:f9:9f:
42:d2:75:af:97:37:4a:c2:01:d0:cd:f7:cd:db:c1:
7d:3f:68:74:60:c7:e8:b6:d6:92:0e:2d:56:cf:17:
50:61:27:1b:da:95:4d:63:0c:ae:d8:0b:df:f6:b5:
8e:86:81:87:93:db:b0:0d:fd:5a:c0:79:b3:28:bf:
53:b3:7f:e5:a3:62:5e:06:3e:3d:34:14:b6:87:d0:
57:8a:97:af:d0:a0:18:2e:d0:0b:a5:fa:59:7b:7d:
4f:07:39:52:aa:49:7c:34:aa:8e:a2:cf:8c:dc:d9:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:88:7F:C4:42:26:90:E3:5C:D3:EC:65:33:B5:D1:F5:75:DD:89
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6b:1e:38:44:85:b0:e4:56:6d:8c:3a:32:94:6b:f0:03:35:
34:25:e9:da:13:12:d7:73:e8:21:77:00:e4:09:be:ce:ca:e8:
b6:d5:35:13:c7:2c:62:8f:24:f7:f1:60:2f:f0:62:79:72:ff:
61:18:3d:c5:97:d4:19:71:30:67:a5:96:6f:8b:bf:ff:06:ac:
39:0e:c2:2b:ad:f9:0f:b2:a0:37:f2:24:2e:9d:01:15:05:04:
5b:bc:7c:d1:a8:22:85:45:16:19:c5:4e:9a:d3:6a:e0:35:2a:
84:37:4a:d0:1a:10:f2:b2:51:db:a7:fc:88:a9:c6:fa:72:97:
21:aa:d5:9c:8d:69:b3:d3:ee:39:0f:83:45:32:dd:02:96:12:
7d:01:cc:e4:31:55:6a:28:52:90:73:26:da:27:58:88:a2:40:
a3:a8:43:c5:64:1d:d9:14:7d:b5:55:c2:f4:b8:85:5c:fc:d4:
bb:34:5a:3e:9f:68:fe:00:70:2c:29:4a:e6:c4:ad:9c:64:df:
4b:98:db:c3:db:a8:59:2e:b0:02:cb:85:13:0b:80:8a:e7:8d:
ec:6b:af:27:b1:65:ef:17:56:fb:e6:8c:35:87:d9:df:4f:ac:
fd:a9:c1:64:b6:30:87:10:97:81:eb:b7:1f:92:4e:d6:89:db:
56:98:fa:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYM2dyGYC+wbpvQajM5dLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTcwNTIwNzU5NjFlOWQ5MGMyN2QwNzEyNWE0YjQ0NmNh
ZmQ3OTAwHhcNMjUwODIzMTAwMjA0WhcNMjUwODI0MTAwMjA0WjAzMTEwLwYDVQQD
EygzNDRmODg3ZmM0NDIyNjkwZTM1Y2QzZWM2NTMzYjVkMWY1NzVkZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRA9aW90CJ1YCsbsSOmhweZHDTU5
8x1TbnIEDjxR/xXuFaghHTiSSs/HSWk7MLrDXu99+VFwXLRa9BvyMITTiCVVvNOn
lBcAyC7aiAi09TGytnsNF9rWgrUpyCvGkyhXfx40i9RJlIojVCEGIFXTfUAtelVu
NQpJT5TkXcD+GXjMdHmAgHMOZCobusM9blh/GJ9k+Z9C0nWvlzdKwgHQzffN28F9
P2h0YMfottaSDi1WzxdQYScb2pVNYwyu2Avf9rWOhoGHk9uwDf1awHmzKL9Ts3/l
o2JeBj49NBS2h9BXipev0KAYLtALpfpZe31PBzlSqkl8NKqOos+M3NkXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRPiH/EQiaQ41zT7GUztdH1dd2JMB8GA1UdIwQY
MBaAFJdXBSB1lh6dkMJ9BxJaS0Rsr9eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEt
YmVhZmUwZWZjMDljLzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEtYmVhZmUwZWZjMDlj
LzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGseOESF
sORWbYw6MpRr8AM1NCXp2hMS13PoIXcA5Am+zsrottU1E8csYo8k9/FgL/BieXL/
YRg9xZfUGXEwZ6WWb4u//wasOQ7CK635D7KgN/IkLp0BFQUEW7x80agihUUWGcVO
mtNq4DUqhDdK0BoQ8rJR26f8iKnG+nKXIarVnI1ps9PuOQ+DRTLdApYSfQHM5DFV
aihSkHMm2idYiKJAo6hDxWQd2RR9tVXC9LiFXPzUuzRaPp9o/gBwLClK5sStnGTf
S5jbw9uoWS6wAsuFEwuAiueN7GuvJ7Fl7xdW++aMNYfZ30+s/anBZLYwhxCXgeu3
H5JO1onbVpj6Ag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:13 2025 by rpki-client