Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: WRmugQZzd+iRQQO6ko2RGrr18hbD8c2WE4Eq589m/T4=
Subject key identifier: 06:AB:DD:A5:DC:CC:66:59:95:F5:08:B1:DD:41:CE:99:EE:75:B8:4B
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0197B70F71CE69B6575F0A092056EB563F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:02:12 +0000
Manifest this update: Sat 28 Jun 2025 15:02:12 +0000
Manifest next update: Sun 29 Jun 2025 15:02:12 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: l8sCDY8kUpiXvH+ze20aL5IKRywbV2Af/UL/3yOc8Ls=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:71:ce:69:b6:57:5f:0a:09:20:56:eb:56:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jun 28 15:02:12 2025 GMT
Not After : Jun 29 15:02:12 2025 GMT
Subject: CN=06abdda5dccc665995f508b1dd41ce99ee75b84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:46:da:3b:50:1d:80:2e:db:ac:96:1a:93:
4f:b2:a9:b6:9a:d3:93:37:a4:7e:45:30:b9:46:5f:
f1:1d:91:b5:80:e4:46:cb:af:81:05:24:d6:54:00:
09:e7:cf:e5:3e:69:e2:8f:ec:cd:50:12:e1:69:e6:
f6:fa:f2:db:29:0c:76:13:7a:c6:58:97:35:47:70:
13:3a:75:38:b4:03:00:d1:5a:53:e4:61:e3:77:43:
be:38:a6:d3:34:b1:0f:83:db:c0:45:81:83:6e:50:
5c:c4:92:f1:ed:ae:01:c7:24:63:da:b6:69:ba:6e:
61:af:3a:6b:1c:9b:32:6b:21:ac:6b:3f:64:52:27:
07:a0:80:2a:0b:b5:87:45:a0:dc:ec:2e:5d:6f:c7:
fb:24:a6:cf:d4:26:25:7a:de:92:65:f6:fb:5c:b2:
4b:e6:67:10:ec:61:e7:12:e6:3f:fa:2d:44:db:42:
11:1d:97:5a:5e:da:2b:c8:58:04:73:14:74:60:ec:
16:dd:fb:57:7e:f9:3e:0b:11:57:26:31:15:33:a3:
a7:04:c7:dc:52:d3:a8:51:38:fd:15:ba:99:6f:ad:
4c:0a:5c:cb:2e:04:3d:ed:1a:3d:cc:3a:c3:58:7a:
5c:fd:3d:e0:b6:1c:9e:0c:8c:e1:f9:c5:6a:a1:7a:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:DD:A5:DC:CC:66:59:95:F5:08:B1:DD:41:CE:99:EE:75:B8:4B
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:79:4a:44:71:92:cc:4d:45:1d:83:09:a6:f8:75:25:c4:50:
01:41:b6:20:c1:93:14:4d:68:35:bb:d7:65:4b:d8:f2:47:95:
5d:c9:d9:5c:e3:b7:7e:07:94:08:03:a8:60:2c:da:b1:32:7c:
c9:fc:77:8d:37:de:41:36:20:c3:54:db:46:d8:cd:49:89:50:
c7:83:44:e7:fc:5a:2a:11:eb:69:e0:ae:a8:c3:6f:db:87:60:
08:c7:6d:d4:90:ef:ff:d1:ef:08:97:7a:7a:fe:ee:f8:95:7e:
63:2a:42:24:0a:1e:d8:b5:51:00:8f:d8:3e:c5:3c:0b:9a:80:
46:ce:05:57:ab:f4:a6:20:90:34:b8:93:5b:ad:6a:ee:80:8b:
41:c0:5d:7c:35:84:7c:e7:49:ac:61:57:23:80:2e:ef:6a:c1:
09:d7:a9:5b:d6:82:a3:8e:62:d7:2d:ee:56:5c:17:46:0f:5d:
40:d4:d5:f2:8f:61:88:55:5a:f3:fe:de:c1:a3:a3:b5:e0:4c:
05:6a:ca:55:9d:8a:59:aa:1a:b1:4c:05:c5:40:16:06:e3:2c:
39:7b:89:5f:52:a5:f3:87:b0:bb:73:a8:57:5e:7f:00:e8:36:
3b:0c:cd:29:be:f1:9a:a1:1a:2b:65:b2:17:a8:03:cc:a5:cf:
c9:bf:1b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D3HOabZXXwoJIFbrVj8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWYyY2QxYTlmMGRhNDM1ZjJlM2IzZWU3MGU2NGZkYWY0
YjYxMjEwHhcNMjUwNjI4MTUwMjEyWhcNMjUwNjI5MTUwMjEyWjAzMTEwLwYDVQQD
EygwNmFiZGRhNWRjY2M2NjU5OTVmNTA4YjFkZDQxY2U5OWVlNzViODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtG2jtQHYAu26yWGpNPsqm2mtOT
N6R+RTC5Rl/xHZG1gORGy6+BBSTWVAAJ58/lPmnij+zNUBLhaeb2+vLbKQx2E3rG
WJc1R3ATOnU4tAMA0VpT5GHjd0O+OKbTNLEPg9vARYGDblBcxJLx7a4BxyRj2rZp
um5hrzprHJsyayGsaz9kUicHoIAqC7WHRaDc7C5db8f7JKbP1CYlet6SZfb7XLJL
5mcQ7GHnEuY/+i1E20IRHZdaXtoryFgEcxR0YOwW3ftXfvk+CxFXJjEVM6OnBMfc
UtOoUTj9FbqZb61MClzLLgQ97Ro9zDrDWHpc/T3gthyeDIzh+cVqoXosWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAar3aXczGZZlfUIsd1BzpnudbhLMB8GA1UdIwQY
MBaAFNJfLNGp8NpDXy47PucOZP2vS2EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2Et
YzViNmFlY2I2YzljLzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2EtYzViNmFlY2I2Yzlj
LzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHlKRHGS
zE1FHYMJpvh1JcRQAUG2IMGTFE1oNbvXZUvY8keVXcnZXOO3fgeUCAOoYCzasTJ8
yfx3jTfeQTYgw1TbRtjNSYlQx4NE5/xaKhHraeCuqMNv24dgCMdt1JDv/9HvCJd6
ev7u+JV+YypCJAoe2LVRAI/YPsU8C5qARs4FV6v0piCQNLiTW61q7oCLQcBdfDWE
fOdJrGFXI4Au72rBCdepW9aCo45i1y3uVlwXRg9dQNTV8o9hiFVa8/7ewaOjteBM
BWrKVZ2KWaoasUwFxUAWBuMsOXuJX1Kl84ewu3OoV15/AOg2OwzNKb7xmqEaK2Wy
F6gDzKXPyb8bKA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:46 2025 by rpki-client