Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: nKKLhBHtlu87R7ekJD0heFiMCrEifEAHROByY29WXpM=
Subject key identifier: 21:7B:41:7F:FD:CB:16:BF:CD:ED:F3:49:D9:16:0F:C1:AA:E5:83:F3
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 0198D660207AD3069D53D260FD1530C35AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 04D6
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: UQK3KpYX7PcaAzUcLV6gdG+ngwG1fBAvqpXGEbQtYL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:20:7a:d3:06:9d:53:d2:60:fd:15:30:c3:5a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=217b417ffdcb16bfcdedf349d9160fc1aae583f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:a6:57:70:f1:b7:b3:94:90:2a:c3:8f:14:
66:be:85:e9:02:64:a8:c4:51:79:56:8e:b5:49:c4:
e8:09:cd:46:43:e9:3b:a3:cf:78:5f:f0:b8:07:6a:
61:7c:36:d4:e5:c4:69:ad:cc:36:2d:30:28:6d:df:
34:a4:d8:8a:88:42:3f:46:8e:9e:f2:ba:95:49:59:
cf:0a:87:0b:6d:d5:f9:6e:c7:23:35:c0:d3:30:c7:
03:b8:be:de:2b:ec:e7:e5:59:6a:85:03:60:01:52:
58:a9:93:c5:ee:32:b1:5c:ef:c4:d2:49:44:08:aa:
78:07:c8:54:1b:5b:b3:0b:29:71:e3:c1:56:57:65:
45:6c:c7:b6:cd:84:c2:d2:f4:f9:eb:26:97:5b:f7:
bb:d3:6b:3d:9f:ed:83:1f:d2:f5:26:a1:9d:d8:da:
1f:33:02:ef:cf:d6:8d:a4:ef:9d:b6:38:74:6c:a2:
d7:cb:29:11:4a:e6:24:ea:93:27:30:1e:a3:57:89:
87:d5:11:75:c5:d6:32:94:2b:45:e6:ce:13:23:58:
d6:bf:fb:dc:71:ac:e6:22:88:b0:e9:50:94:a1:b0:
6e:e9:2a:80:e9:c2:16:d6:7e:10:e3:e7:cf:66:6d:
43:8a:de:a9:bd:30:60:16:04:72:50:35:71:25:36:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:41:7F:FD:CB:16:BF:CD:ED:F3:49:D9:16:0F:C1:AA:E5:83:F3
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1a:a7:7c:79:7f:be:b1:2e:e6:c0:b2:26:8d:cd:96:2e:9f:
49:4f:2a:51:c5:d0:62:cf:3b:af:1d:e0:fc:32:33:57:8b:59:
9f:a8:db:2e:72:49:57:d5:a1:0f:ad:1b:3d:8f:01:36:7c:a2:
68:83:6b:33:20:e0:f1:e5:55:80:cb:87:d7:e7:b6:ac:23:10:
6e:06:54:c1:fb:6b:c6:a2:96:6b:64:e4:df:cb:0c:87:68:4f:
e8:27:b2:39:69:89:f4:df:b9:1d:68:90:07:c2:18:a1:6b:62:
5a:3a:f2:1b:fb:47:5e:dd:55:2d:9d:2f:81:27:bb:ab:84:af:
f5:b7:95:43:d4:dd:7d:84:95:9d:1c:f0:9a:1e:6d:5c:1f:a6:
98:12:56:f9:83:57:54:61:de:c5:f0:33:e4:6c:24:f0:2c:cc:
ac:fc:3b:be:fb:39:3f:c1:fa:bc:82:52:06:4f:aa:3c:91:6a:
d5:a5:2c:6f:33:d4:d6:aa:cb:e5:37:39:9f:0f:82:40:cd:be:
36:91:93:0a:9a:1f:e0:55:be:dd:da:ed:eb:8a:c0:8a:3b:74:
a9:ba:29:52:95:15:c6:8b:78:f3:13:9a:87:d7:35:08:67:43:
b7:92:ed:f3:ce:22:aa:3a:93:77:86:eb:7d:24:5e:a0:50:a1:
10:ee:c8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCB60wadU9Jg/RUww1qyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey
ODc2ODAwHhcNMjUwODIzMTAwMTIwWhcNMjUwODI0MTAwMTIwWjAzMTEwLwYDVQQD
EygyMTdiNDE3ZmZkY2IxNmJmY2RlZGYzNDlkOTE2MGZjMWFhZTU4M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4qmV3Dxt7OUkCrDjxRmvoXpAmSo
xFF5Vo61ScToCc1GQ+k7o894X/C4B2phfDbU5cRprcw2LTAobd80pNiKiEI/Ro6e
8rqVSVnPCocLbdX5bscjNcDTMMcDuL7eK+zn5VlqhQNgAVJYqZPF7jKxXO/E0klE
CKp4B8hUG1uzCylx48FWV2VFbMe2zYTC0vT56yaXW/e702s9n+2DH9L1JqGd2Nof
MwLvz9aNpO+dtjh0bKLXyykRSuYk6pMnMB6jV4mH1RF1xdYylCtF5s4TI1jWv/vc
cazmIoiw6VCUobBu6SqA6cIW1n4Q4+fPZm1Dit6pvTBgFgRyUDVxJTazbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF7QX/9yxa/ze3zSdkWD8Gq5YPzMB8GA1UdIwQY
MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt
MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5
LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBqnfHl/
vrEu5sCyJo3Nli6fSU8qUcXQYs87rx3g/DIzV4tZn6jbLnJJV9WhD60bPY8BNnyi
aINrMyDg8eVVgMuH1+e2rCMQbgZUwftrxqKWa2Tk38sMh2hP6CeyOWmJ9N+5HWiQ
B8IYoWtiWjryG/tHXt1VLZ0vgSe7q4Sv9beVQ9TdfYSVnRzwmh5tXB+mmBJW+YNX
VGHexfAz5Gwk8CzMrPw7vvs5P8H6vIJSBk+qPJFq1aUsbzPU1qrL5Tc5nw+CQM2+
NpGTCpof4FW+3drt64rAijt0qbopUpUVxot48xOah9c1CGdDt5Lt884iqjqTd4br
fSReoFChEO7Isw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:57 2025 by rpki-client