Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: A+sMD9lF0m6aRL1nKFubtq3Vs4IsD8CEqNwivY9YIWQ=
Subject key identifier: FB:87:3D:6A:8D:D1:2F:3B:C4:72:B7:B9:0D:B2:D3:37:2A:2C:B0:54
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 0198D58364F13FBFA92C6551B3362DCCC72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: 1728sKfT33QgdEK9oE95qgHzGfbebEfO3R/ZUHJVL0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:64:f1:3f:bf:a9:2c:65:51:b3:36:2d:cc:c7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=fb873d6a8dd12f3bc472b7b90db2d3372a2cb054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:ba:3b:77:5f:a3:b3:cc:09:b2:16:ec:f2:
11:06:a2:96:72:5b:2b:b3:6b:b1:fe:fa:4a:e3:8a:
cd:43:9f:9e:19:88:f5:95:aa:d7:34:e0:94:66:8d:
59:a8:af:1a:9b:3b:32:4b:ac:1a:28:94:99:19:dd:
55:0c:39:86:5c:03:17:df:39:b0:fc:e4:d3:76:a1:
63:c3:a4:e9:4e:45:3e:fd:21:df:4f:27:55:1f:6b:
7d:c4:11:61:de:dd:15:92:07:75:b3:7b:5f:fb:1c:
7b:f2:82:99:49:59:7f:f9:7c:ff:68:76:e5:53:db:
dc:cb:43:82:53:3b:43:7c:c5:89:ea:28:d4:98:22:
45:3f:d5:79:87:fb:ad:be:89:3f:51:ed:d9:7a:ab:
75:3f:d8:6c:eb:43:f8:23:fc:23:73:06:5a:2f:6e:
ae:2a:99:7d:f0:0f:b7:7c:d7:8f:54:45:d7:f6:84:
7a:0f:8d:e7:ee:eb:aa:13:cc:3d:bc:c9:fa:9c:d6:
c7:45:4a:bb:1f:cd:76:58:f1:5c:f9:ac:51:43:a9:
c6:59:f0:ea:17:ea:c5:05:aa:43:b0:0c:45:bc:82:
8d:91:f0:e2:51:e4:92:5e:cd:f8:b6:f1:c4:fb:ae:
e4:a0:bc:f3:80:dc:3f:61:3c:24:0f:5c:2f:8d:d3:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:3D:6A:8D:D1:2F:3B:C4:72:B7:B9:0D:B2:D3:37:2A:2C:B0:54
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:6a:d5:86:e2:af:fb:d4:b3:b1:3c:67:98:0b:90:07:cc:
fd:3c:e6:79:15:00:c0:76:2e:88:30:c4:bb:de:94:fb:88:f0:
4f:82:33:a5:31:c3:1a:9e:c8:b8:97:a4:ac:4b:5a:d1:50:3b:
73:84:40:28:ee:0f:bf:75:05:d2:13:48:10:ca:65:0d:26:16:
56:58:94:0b:27:57:bc:fe:bb:27:76:47:4b:5d:eb:0a:5f:54:
4e:eb:44:72:35:36:a0:ed:95:b5:77:40:14:9b:b2:1b:75:ee:
7d:e6:74:a5:17:b3:1b:de:7e:21:82:22:67:6d:73:64:51:d3:
e8:7e:92:a3:b2:eb:6b:cc:d4:10:93:e7:7b:90:af:99:dd:a0:
ac:d5:a9:ec:de:8b:ab:4a:d5:7e:2f:46:6b:a3:16:75:26:ee:
49:8a:91:39:c1:0a:b1:84:5b:0a:6a:f0:1e:3b:1d:9a:b5:b3:
24:12:30:ec:49:68:21:64:01:9c:92:7d:a1:ef:4e:7c:d6:56:
26:05:df:cb:f6:47:32:51:f0:15:d7:c1:ed:31:0c:ac:57:0b:
e9:bd:cb:51:8a:e3:66:60:5c:92:48:7a:af:2a:4b:4a:c4:55:
c2:e6:d1:cf:73:93:78:b1:b4:7d:ed:77:cc:8e:8f:6a:8c:1a:
b9:0d:c3:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2TxP7+pLGVRszYtzMcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1
MDEyN2EwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD
EyhmYjg3M2Q2YThkZDEyZjNiYzQ3MmI3YjkwZGIyZDMzNzJhMmNiMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G66O3dfo7PMCbIW7PIRBqKWclsr
s2ux/vpK44rNQ5+eGYj1larXNOCUZo1ZqK8amzsyS6waKJSZGd1VDDmGXAMX3zmw
/OTTdqFjw6TpTkU+/SHfTydVH2t9xBFh3t0Vkgd1s3tf+xx78oKZSVl/+Xz/aHbl
U9vcy0OCUztDfMWJ6ijUmCJFP9V5h/utvok/Ue3Zeqt1P9hs60P4I/wjcwZaL26u
Kpl98A+3fNePVEXX9oR6D43n7uuqE8w9vMn6nNbHRUq7H812WPFc+axRQ6nGWfDq
F+rFBapDsAxFvIKNkfDiUeSSXs34tvHE+67koLzzgNw/YTwkD1wvjdNGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuHPWqN0S87xHK3uQ2y0zcqLLBUMB8GA1UdIwQY
MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt
YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi
LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK1q1Ybi
r/vUs7E8Z5gLkAfM/TzmeRUAwHYuiDDEu96U+4jwT4IzpTHDGp7IuJekrEta0VA7
c4RAKO4Pv3UF0hNIEMplDSYWVliUCydXvP67J3ZHS13rCl9UTutEcjU2oO2VtXdA
FJuyG3XufeZ0pRezG95+IYIiZ21zZFHT6H6So7Lra8zUEJPne5Cvmd2grNWp7N6L
q0rVfi9Ga6MWdSbuSYqROcEKsYRbCmrwHjsdmrWzJBIw7EloIWQBnJJ9oe9OfNZW
JgXfy/ZHMlHwFdfB7TEMrFcL6b3LUYrjZmBckkh6rypLSsRVwubRz3OTeLG0fe13
zI6PaowauQ3D9A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:39 2025 by rpki-client