
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: C89PlfQ0tn8Az4CkvHJf9cEIjVRZPUCwsf+UDJE90VM=
Subject key identifier: 53:A4:F0:64:64:2D:6B:04:EC:52:17:E5:C5:8E:19:35:50:F2:87:7C
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 0197B6A03D7B0019C74F6467AD1F944CDF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0B0F
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=)
2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=)
3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: fdW+vciQqwgB8jltiphhH1Okj6/H3YsY0UkNFgpmpdQ=)
4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3d:7b:00:19:c7:4f:64:67:ad:1f:94:4c:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=53a4f064642d6b04ec5217e5c58e193550f2877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:00:38:88:4d:ab:99:7f:c4:58:fe:89:f8:
15:a0:43:af:5e:a0:29:ba:41:e3:c2:0d:31:ec:0c:
a4:ed:a2:4f:8b:e5:95:21:83:d2:60:73:98:5c:ae:
7e:b9:78:6b:03:99:8a:7f:b5:bf:c8:28:f6:8f:a9:
09:20:04:de:a5:97:dd:b6:59:82:f0:ea:ec:50:b2:
ed:6a:16:5d:08:03:5f:b8:90:f0:63:8d:2d:8e:f1:
ad:cd:05:a0:7d:b0:4f:8a:e3:dc:09:34:69:a1:b4:
b8:5a:43:ec:8c:6d:b6:25:a8:d0:d7:4c:ac:73:cc:
9a:3e:ad:64:73:3d:8a:b3:6e:62:44:4a:dd:6c:3b:
b8:ee:09:b2:3e:90:ad:6d:39:dd:6a:4b:f9:bb:7b:
56:f5:28:9a:74:d0:58:8d:7e:c4:50:5b:d0:88:43:
f7:60:1d:36:7d:21:28:02:13:ef:0d:6d:f0:29:bf:
12:f6:58:eb:8a:1c:98:12:c3:5a:f7:3b:35:a9:75:
5a:4b:c5:56:f4:5a:82:77:fb:d0:df:cb:a9:67:f6:
ba:14:09:35:a1:35:f7:16:cc:0e:a7:84:1a:43:88:
ff:78:98:67:06:a1:63:e9:cb:35:be:1f:ab:89:38:
3b:f3:93:7e:de:b7:d0:e3:9d:5a:ff:c4:1c:74:b9:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:F0:64:64:2D:6B:04:EC:52:17:E5:C5:8E:19:35:50:F2:87:7C
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b7:27:21:f8:31:13:e4:8f:32:af:44:bd:5b:42:b5:ae:63:
39:d0:51:a5:78:7e:1b:c2:9c:f7:31:74:62:97:30:80:40:fd:
a7:43:3c:21:79:a9:b6:61:9e:f1:90:58:a6:7e:3b:43:97:b5:
cf:da:08:58:bc:5a:c9:8a:61:cd:86:1a:00:39:ef:ae:d8:ad:
6c:dd:c7:46:6f:f2:a4:96:c0:1f:30:fd:f5:de:28:98:16:a7:
61:87:5a:4e:0f:a5:c9:82:f7:7a:37:27:be:c6:9a:58:0e:bd:
e8:1a:38:6a:22:c1:b0:d5:30:06:13:f6:dc:46:1d:c8:23:eb:
95:6f:ba:2d:69:65:25:ba:e1:83:c5:d3:67:52:7d:db:17:0f:
8f:ad:a6:3b:10:e8:1b:b5:b2:b4:b8:5f:90:a0:a0:c6:3c:c8:
49:aa:7f:05:18:d4:d7:58:0f:e1:7f:29:78:c7:ce:b7:4c:f3:
30:ea:13:bf:fc:4d:4c:ec:0c:1e:d4:ed:16:4d:a7:97:58:de:
93:8d:30:92:65:92:44:47:dc:db:fe:b3:31:9c:23:d1:fa:8f:
e9:4a:13:40:6c:17:84:cd:17:f6:8d:b2:e0:d5:9b:b1:0a:44:
6f:61:a1:f9:8a:3f:1b:27:20:7e:07:b8:6c:13:54:f1:29:4c:
38:c6:53:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oD17ABnHT2RnrR+UTN8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx
YzdmNzUwHhcNMjUwNjI4MTMwMDQ0WhcNMjUwNjI5MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg1M2E0ZjA2NDY0MmQ2YjA0ZWM1MjE3ZTVjNThlMTkzNTUwZjI4NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArioAOIhNq5l/xFj+ifgVoEOvXqAp
ukHjwg0x7Ayk7aJPi+WVIYPSYHOYXK5+uXhrA5mKf7W/yCj2j6kJIATepZfdtlmC
8OrsULLtahZdCANfuJDwY40tjvGtzQWgfbBPiuPcCTRpobS4WkPsjG22JajQ10ys
c8yaPq1kcz2Ks25iRErdbDu47gmyPpCtbTndakv5u3tW9SiadNBYjX7EUFvQiEP3
YB02fSEoAhPvDW3wKb8S9ljrihyYEsNa9zs1qXVaS8VW9FqCd/vQ38upZ/a6FAk1
oTX3FswOp4QaQ4j/eJhnBqFj6cs1vh+riTg785N+3rfQ451a/8QcdLnV/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOk8GRkLWsE7FIX5cWOGTVQ8od8MB8GA1UdIwQY
MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt
YTM4ZTFlY2E0ZmQ0LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0
LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbcnIfgx
E+SPMq9EvVtCta5jOdBRpXh+G8Kc9zF0YpcwgED9p0M8IXmptmGe8ZBYpn47Q5e1
z9oIWLxayYphzYYaADnvrtitbN3HRm/ypJbAHzD99d4omBanYYdaTg+lyYL3ejcn
vsaaWA696Bo4aiLBsNUwBhP23EYdyCPrlW+6LWllJbrhg8XTZ1J92xcPj62mOxDo
G7WytLhfkKCgxjzISap/BRjU11gP4X8peMfOt0zzMOoTv/xNTOwMHtTtFk2nl1je
k40wkmWSREfc2/6zMZwj0fqP6UoTQGwXhM0X9o2y4NWbsQpEb2Gh+Yo/Gycgfge4
bBNU8SlMOMZTVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:03 2025 by rpki-client