Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: EMPOwNHbovsGEMZocil3T0p8Ng3eXSQZBslH08BXyHY=
Subject key identifier: 51:BC:C4:E2:F8:AE:BB:E6:0C:44:82:D6:F0:AE:68:05:18:AF:5E:CF
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 0197B7B37FBBAF0287D0984825D450C279F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: nRnC41+vCInq8C7jZ6LAUxR9u0bcbGs/r0uyaKZLlMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7f:bb:af:02:87:d0:98:48:25:d4:50:c2:79:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=51bcc4e2f8aebbe60c4482d6f0ae680518af5ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:0c:7f:37:4e:5a:28:3c:89:37:94:c1:e7:
40:89:db:17:e8:32:bf:ff:66:34:ed:76:b5:4c:e1:
c7:7e:d6:f2:50:68:73:3d:92:7b:f3:38:7b:28:7a:
fa:de:de:e4:a6:70:5a:c7:86:1c:00:66:9e:be:4d:
0a:90:66:75:83:c1:58:20:3b:ce:37:e0:53:31:42:
f4:f6:41:dc:be:89:1b:2c:4b:79:4a:78:c8:d7:59:
35:6d:97:52:2a:5c:6c:25:1c:bc:4e:d9:0f:ea:5d:
02:e7:38:a8:58:d4:df:3b:04:07:00:51:e5:19:56:
47:16:e8:90:1a:70:d0:7b:61:90:8e:6b:d3:73:6b:
2c:7d:b8:b4:d2:58:ac:bd:b1:1a:90:62:2d:2c:35:
e8:92:ed:cc:49:d7:73:32:62:2b:f8:8e:8b:a6:b7:
50:21:af:b6:f1:85:99:1a:6a:64:be:7e:c9:e6:d1:
4d:73:f7:2a:91:bd:2a:d3:c3:de:e8:02:09:d3:10:
17:c0:53:bf:20:5b:c7:18:60:70:50:1b:aa:5b:5a:
39:55:44:23:d1:1c:c1:25:30:5e:60:ce:7a:a9:0c:
fa:0c:1d:de:3a:e6:a1:05:24:c2:2b:3b:77:09:1c:
a8:4a:38:3b:33:e3:9d:80:23:79:18:74:49:f9:c8:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:C4:E2:F8:AE:BB:E6:0C:44:82:D6:F0:AE:68:05:18:AF:5E:CF
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:1f:fa:84:a0:2f:5c:cf:b4:42:cd:50:4e:ce:2f:1e:96:
bf:96:b3:eb:0e:59:4b:08:20:f8:8d:47:18:84:f5:bb:14:57:
0e:4d:38:71:c1:7b:02:6e:5c:06:12:f4:89:b3:c1:f1:98:eb:
da:52:a3:be:0c:8c:e9:cf:09:52:5c:f4:8a:06:ab:97:14:c6:
dc:38:64:11:50:00:8c:e8:8e:69:66:12:0f:c7:f7:b3:15:84:
ce:b7:8d:06:20:1b:29:45:6e:f5:ee:25:c8:64:bb:a0:e4:65:
1f:05:bc:86:35:48:f0:c4:9b:53:00:da:49:65:fe:85:c3:52:
b6:80:00:f0:a3:ec:8f:45:ed:1c:27:76:9c:6c:ad:22:43:9e:
27:67:c3:f8:21:82:28:fe:d9:47:1c:24:a2:7c:c3:0e:78:13:
1b:7a:c4:29:37:a3:d1:f9:d8:15:54:4a:c8:ce:87:fa:93:b8:
d9:b6:bd:05:c0:bf:63:c2:3c:df:8b:25:b8:be:54:0f:15:f7:
a4:e4:e0:3f:d4:79:9a:7b:57:20:66:67:81:c9:42:4b:20:5b:
d7:4c:b2:de:3f:e4:4e:41:63:74:e4:78:0e:f7:5f:c1:34:31:
ca:e5:ca:46:fb:ad:36:11:c8:0e:7b:15:01:06:5b:da:73:02:
51:99:08:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3+7rwKH0JhIJdRQwnnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1
MDEyN2EwHhcNMjUwNjI4MTgwMTIzWhcNMjUwNjI5MTgwMTIzWjAzMTEwLwYDVQQD
Eyg1MWJjYzRlMmY4YWViYmU2MGM0NDgyZDZmMGFlNjgwNTE4YWY1ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng4MfzdOWig8iTeUwedAidsX6DK/
/2Y07Xa1TOHHftbyUGhzPZJ78zh7KHr63t7kpnBax4YcAGaevk0KkGZ1g8FYIDvO
N+BTMUL09kHcvokbLEt5SnjI11k1bZdSKlxsJRy8TtkP6l0C5zioWNTfOwQHAFHl
GVZHFuiQGnDQe2GQjmvTc2ssfbi00lisvbEakGItLDXoku3MSddzMmIr+I6LprdQ
Ia+28YWZGmpkvn7J5tFNc/cqkb0q08Pe6AIJ0xAXwFO/IFvHGGBwUBuqW1o5VUQj
0RzBJTBeYM56qQz6DB3eOuahBSTCKzt3CRyoSjg7M+OdgCN5GHRJ+ciwXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG8xOL4rrvmDESC1vCuaAUYr17PMB8GA1UdIwQY
MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt
YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi
LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRUf+oSg
L1zPtELNUE7OLx6Wv5az6w5ZSwgg+I1HGIT1uxRXDk04ccF7Am5cBhL0ibPB8Zjr
2lKjvgyM6c8JUlz0igarlxTG3DhkEVAAjOiOaWYSD8f3sxWEzreNBiAbKUVu9e4l
yGS7oORlHwW8hjVI8MSbUwDaSWX+hcNStoAA8KPsj0XtHCd2nGytIkOeJ2fD+CGC
KP7ZRxwkonzDDngTG3rEKTej0fnYFVRKyM6H+pO42ba9BcC/Y8I834sluL5UDxX3
pOTgP9R5mntXIGZngclCSyBb10yy3j/kTkFjdOR4DvdfwTQxyuXKRvutNhHIDnsV
AQZb2nMCUZkIRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:15 2025 by rpki-client