
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: Tgqjc7aeem3QcRgJNb/6GF4V5tL5h6pr9htNz9KeYqI=
Subject key identifier: F5:83:1F:41:DE:C5:F3:D8:23:BD:02:23:E9:39:35:FE:92:E0:AC:99
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 0197B6A20F5D7CBA5C0F77ACBE8E1CB8EFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 155D
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: 5jZJqNmPbb+LJ8j87/Nzmj+8VvXffD/a29lk0SvimEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0f:5d:7c:ba:5c:0f:77:ac:be:8e:1c:b8:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=f5831f41dec5f3d823bd0223e93935fe92e0ac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:8d:6d:28:f4:92:f5:96:ed:a3:a4:25:b6:
89:e1:f7:98:c6:ff:63:2c:cd:d0:fe:c4:2a:10:18:
d1:3a:21:f7:82:41:22:da:7b:f3:08:d4:d9:3d:7b:
44:ff:0a:f1:7b:7a:2e:51:58:ff:65:e8:10:d0:74:
89:23:25:70:38:30:0e:23:ba:6f:47:d7:22:30:fb:
9d:a5:fb:e3:24:cb:84:ab:40:b4:9b:23:8f:19:52:
56:14:47:40:40:9a:58:c2:56:40:4e:d8:60:f6:8f:
3d:2f:a0:57:06:d3:58:55:32:81:c1:14:cf:c2:f9:
9c:02:51:93:40:b2:2f:14:e2:46:e0:0c:8e:58:fd:
34:5a:93:f1:7a:e2:5c:8e:00:28:64:de:0e:ed:20:
ac:4c:ce:23:28:a2:f7:6f:b4:d0:e7:6a:1e:96:c4:
4f:bd:12:b9:ed:28:66:e8:f6:a9:af:3a:74:e0:21:
d5:a1:29:06:e6:e1:5b:14:0d:a7:1c:50:82:dd:71:
4d:42:80:f8:fb:93:bf:f8:ac:c3:87:c6:f3:5d:5b:
aa:ff:2b:0a:41:57:43:f8:1b:92:f7:2a:d9:d0:a2:
fa:3b:10:0e:b8:99:9a:0b:d9:5e:6a:d3:14:e7:2d:
4f:b5:77:47:0a:ee:1d:d3:14:4e:0c:04:bc:d6:c3:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:1F:41:DE:C5:F3:D8:23:BD:02:23:E9:39:35:FE:92:E0:AC:99
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:c6:ba:0d:0f:77:2b:6d:27:33:f5:ad:68:49:58:33:d2:
5f:fd:16:a8:96:a1:6b:40:de:25:a5:b8:32:13:f5:5d:b0:65:
c4:48:eb:51:6a:9b:4b:04:e0:54:11:43:7b:f3:b5:42:b8:9e:
23:6d:47:fe:38:5c:74:d3:a8:87:54:eb:6a:c2:20:2e:8a:e8:
e2:90:f7:96:5d:1a:3d:fd:86:6e:21:8a:ac:ef:94:76:a5:f7:
2e:c2:bd:41:06:98:29:ce:00:49:92:24:7f:e9:b7:35:f5:94:
c3:7f:db:e7:ec:ed:50:e0:74:56:0e:5f:26:68:f0:a3:e4:c7:
6c:d9:8b:ed:0d:80:33:44:f4:71:ea:3b:79:94:85:81:19:8e:
59:75:0e:d7:31:b3:fc:d2:10:23:a8:c6:e7:bd:f6:79:a0:d8:
91:85:c9:a7:88:8c:ff:8e:24:1f:23:d9:2b:f3:82:30:51:d6:
07:a2:17:f4:75:ba:c9:87:23:5d:b0:2a:38:46:d7:da:b2:5c:
4b:38:c5:9d:32:05:5a:22:16:d3:0d:1f:26:1b:1d:b2:62:ba:
27:96:16:47:f7:8f:2a:8f:5e:26:5b:7e:c3:99:c9:d9:1d:d7:
63:d8:4c:44:c2:9f:ed:40:92:c8:10:ac:7e:2f:2e:dc:cd:7c:
60:4f:c6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2og9dfLpcD3esvo4cuO/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx
ZjEzOTcwHhcNMjUwNjI4MTMwMjQzWhcNMjUwNjI5MTMwMjQzWjAzMTEwLwYDVQQD
EyhmNTgzMWY0MWRlYzVmM2Q4MjNiZDAyMjNlOTM5MzVmZTkyZTBhYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN2NbSj0kvWW7aOkJbaJ4feYxv9j
LM3Q/sQqEBjROiH3gkEi2nvzCNTZPXtE/wrxe3ouUVj/ZegQ0HSJIyVwODAOI7pv
R9ciMPudpfvjJMuEq0C0myOPGVJWFEdAQJpYwlZATthg9o89L6BXBtNYVTKBwRTP
wvmcAlGTQLIvFOJG4AyOWP00WpPxeuJcjgAoZN4O7SCsTM4jKKL3b7TQ52oelsRP
vRK57Shm6Paprzp04CHVoSkG5uFbFA2nHFCC3XFNQoD4+5O/+KzDh8bzXVuq/ysK
QVdD+BuS9yrZ0KL6OxAOuJmaC9leatMU5y1PtXdHCu4d0xRODAS81sNuQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWDH0HexfPYI70CI+k5Nf6S4KyZMB8GA1UdIwQY
MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt
MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0
LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRHGug0P
dyttJzP1rWhJWDPSX/0WqJaha0DeJaW4MhP1XbBlxEjrUWqbSwTgVBFDe/O1Qrie
I21H/jhcdNOoh1TrasIgLoro4pD3ll0aPf2GbiGKrO+UdqX3LsK9QQaYKc4ASZIk
f+m3NfWUw3/b5+ztUOB0Vg5fJmjwo+THbNmL7Q2AM0T0ceo7eZSFgRmOWXUO1zGz
/NIQI6jG5732eaDYkYXJp4iM/44kHyPZK/OCMFHWB6IX9HW6yYcjXbAqOEbX2rJc
SzjFnTIFWiIW0w0fJhsdsmK6J5YWR/ePKo9eJlt+w5nJ2R3XY9hMRMKf7UCSyBCs
fi8u3M18YE/GNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:35 2025 by rpki-client