Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: Id70uhai6QUj6EJcAkMXn981P2CEwqz2+phI9SS5O7I=
Subject key identifier: E7:C8:57:D7:52:63:C6:2C:83:24:2A:A8:97:03:51:FB:AB:3D:8E:CE
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0197B7454FE201837C1B69D6E70A56EE00F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 08C4
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: +PygDl8IT3vtbknhPEsDdjMATlupBplhUS8mpm8SLv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4f:e2:01:83:7c:1b:69:d6:e7:0a:56:ee:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=e7c857d75263c62c83242aa8970351fbab3d8ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:57:6e:bf:65:8b:1e:1b:74:00:cf:2a:81:
9d:15:0e:12:57:0b:05:51:ae:56:74:0a:e9:64:c7:
be:5a:75:07:f8:dd:e9:92:ed:0a:d4:02:b9:1c:0a:
62:58:71:4c:64:df:01:b0:1b:b1:e4:3b:04:66:ae:
c1:bf:e2:c0:5e:25:b9:23:0c:e7:9d:b8:80:f5:0f:
29:d9:e6:6b:8f:51:e5:b7:ea:0d:62:5b:36:81:9b:
65:22:07:ef:6f:0b:97:61:0b:5f:1f:81:3a:40:de:
7b:79:4a:0e:a8:c2:c4:59:32:9a:79:74:ee:4e:3f:
cf:ed:ae:3c:9a:5f:f6:eb:15:94:f4:97:27:0d:c4:
41:93:a8:ec:55:e4:48:2d:88:59:a6:89:06:27:9a:
7b:07:ea:ae:ae:7e:89:f0:d5:15:62:fb:50:da:71:
16:51:f1:78:26:5f:d7:90:a7:63:b5:78:fc:ce:42:
57:77:83:38:13:eb:1e:db:5d:78:4f:05:91:89:13:
39:06:65:25:4b:e3:eb:8e:ab:33:d7:96:2d:fb:ba:
2c:27:6a:71:03:06:73:07:6b:4b:6b:d8:72:b9:65:
ce:8e:c5:a0:32:2b:7d:0c:3d:ce:69:2e:2f:59:38:
94:5c:7e:08:ff:dc:e3:50:5d:20:3b:e1:d3:94:35:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:57:D7:52:63:C6:2C:83:24:2A:A8:97:03:51:FB:AB:3D:8E:CE
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e0:02:92:ba:45:b2:59:6d:5c:8e:82:cf:ab:82:81:52:c0:
15:46:00:3b:8b:81:83:e7:6c:ad:85:0f:d5:c2:37:d1:4a:cf:
60:1c:28:6a:69:2a:d8:88:b6:be:11:85:27:7e:3d:ce:0f:fc:
69:9d:10:47:e2:86:9c:03:06:21:6a:b1:48:d2:ff:a0:fd:06:
b9:26:2a:59:f1:88:bc:b6:ad:ad:65:96:f8:a1:36:13:c4:93:
2f:71:b9:82:5c:7f:e3:d1:3a:fe:14:34:52:94:6c:d6:00:36:
00:d2:c4:11:80:39:f8:8f:3d:32:e7:7c:c8:a3:fc:f7:73:2b:
56:09:25:8b:57:11:b3:02:1a:ed:8c:89:b5:a2:ba:fc:31:31:
ff:4a:15:b0:d6:51:95:ba:67:56:73:97:44:d2:05:fd:ef:88:
dd:eb:69:29:cb:8c:32:0b:2f:a2:55:0b:54:d6:9f:b5:d5:07:
a2:ed:3f:08:84:5f:e0:16:7c:6b:a9:aa:c2:dd:24:e4:4a:38:
95:e5:ff:ca:f1:24:f2:3d:f7:fa:59:1d:d5:bb:e3:07:67:c4:
32:be:d3:9f:c3:cf:c8:b0:da:78:33:4f:e0:15:e6:df:df:1d:
5e:fd:bd:2e:e2:f4:39:14:63:fb:a1:fb:45:3e:a9:58:f1:a6:
3b:a8:20:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RU/iAYN8G2nW5wpW7gD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjUwNjI4MTYwMTAyWhcNMjUwNjI5MTYwMTAyWjAzMTEwLwYDVQQD
EyhlN2M4NTdkNzUyNjNjNjJjODMyNDJhYTg5NzAzNTFmYmFiM2Q4ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcRXbr9lix4bdADPKoGdFQ4SVwsF
Ua5WdArpZMe+WnUH+N3pku0K1AK5HApiWHFMZN8BsBux5DsEZq7Bv+LAXiW5Iwzn
nbiA9Q8p2eZrj1Hlt+oNYls2gZtlIgfvbwuXYQtfH4E6QN57eUoOqMLEWTKaeXTu
Tj/P7a48ml/26xWU9JcnDcRBk6jsVeRILYhZpokGJ5p7B+qurn6J8NUVYvtQ2nEW
UfF4Jl/XkKdjtXj8zkJXd4M4E+se2114TwWRiRM5BmUlS+Prjqsz15Yt+7osJ2px
AwZzB2tLa9hyuWXOjsWgMit9DD3OaS4vWTiUXH4I/9zjUF0gO+HTlDWzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfIV9dSY8YsgyQqqJcDUfurPY7OMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuACkrpF
slltXI6Cz6uCgVLAFUYAO4uBg+dsrYUP1cI30UrPYBwoamkq2Ii2vhGFJ349zg/8
aZ0QR+KGnAMGIWqxSNL/oP0GuSYqWfGIvLatrWWW+KE2E8STL3G5glx/49E6/hQ0
UpRs1gA2ANLEEYA5+I89Mud8yKP893MrVgkli1cRswIa7YyJtaK6/DEx/0oVsNZR
lbpnVnOXRNIF/e+I3etpKcuMMgsvolULVNaftdUHou0/CIRf4BZ8a6mqwt0k5Eo4
leX/yvEk8j33+lkd1bvjB2fEMr7Tn8PPyLDaeDNP4BXm398dXv29LuL0ORRj+6H7
RT6pWPGmO6ggIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:28 2025 by rpki-client