Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: 1sskPJx0a/+LkOD+wqQj2ovrCr9a7htm4U4DrVKcMpM=
Subject key identifier: CC:F3:E8:EB:4A:EB:88:D3:CF:6A:EC:D8:AC:51:47:25:6B:2B:F4:73
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 0198D4E01ADBF5DE316FE79B557484EDE48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 0F6C
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: BIY3RIHeJxQV+GgzjwmmxQBvQhiRP/+4McQdztPsCS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1a:db:f5:de:31:6f:e7:9b:55:74:84:ed:e4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=ccf3e8eb4aeb88d3cf6aecd8ac5147256b2bf473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:42:9f:98:c4:0d:72:cf:9a:b8:f6:21:ab:
7c:7f:7b:b3:b9:61:85:cf:fc:76:8c:e0:8b:01:df:
42:86:cb:59:b8:b9:c1:7e:ef:88:d8:d6:a8:91:5b:
3a:21:c6:db:9a:11:cf:d3:79:a7:7f:eb:d7:ca:38:
ef:d3:d5:dd:17:30:1c:83:d0:cf:7b:16:ce:be:06:
f5:8e:fb:8c:7a:5d:56:10:76:81:19:30:99:51:e6:
fa:b5:1f:60:e0:8d:41:ff:96:4e:46:4b:0c:8c:71:
f3:d1:25:34:e6:b6:88:ad:2a:dc:1b:07:e8:bb:43:
83:db:86:9b:87:91:65:f0:ca:8d:34:8c:52:5a:88:
12:75:df:49:a4:e2:a7:2e:8b:2f:50:78:73:b5:bd:
61:ff:32:f1:ee:ad:2a:ae:9e:10:7f:79:9e:2e:d5:
db:79:31:81:7c:15:74:32:01:02:87:8e:61:98:cd:
7f:26:74:37:b6:e8:79:76:a3:e3:aa:c1:e5:f5:34:
80:a9:2a:92:f7:48:e2:e3:d6:e1:25:ce:b8:c2:de:
ec:de:2c:47:cd:92:5b:31:1f:80:08:cf:dc:a8:b6:
4b:cb:ee:93:5e:7f:20:0d:cd:45:ec:e9:39:1c:8c:
34:10:a4:75:94:51:76:c2:02:e2:c3:5a:26:90:63:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:E8:EB:4A:EB:88:D3:CF:6A:EC:D8:AC:51:47:25:6B:2B:F4:73
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2c:6d:77:a3:48:fd:93:53:f2:57:00:03:3f:af:e1:60:52:
9a:f8:1f:4e:e5:11:ba:4d:bd:a1:e5:d6:60:bc:66:3a:ce:8a:
d1:f9:e7:ba:3e:80:9c:cb:9e:32:5e:d3:b6:7b:8f:28:88:dc:
38:aa:bc:73:bd:35:b4:81:b7:e1:b5:ac:88:3d:04:37:b8:77:
fd:1c:f5:d9:62:61:20:0d:09:36:1a:82:e9:b2:27:6e:f0:50:
78:4a:c3:84:f7:63:2f:a9:ac:4d:a6:d7:c0:f1:9b:b0:27:3b:
88:69:9d:11:0d:c0:e5:eb:81:ed:cb:fb:c3:6c:a8:e1:4b:55:
80:ba:6a:90:63:82:75:cb:d5:cf:1e:16:6e:3b:23:bd:07:3b:
c8:53:ae:b3:17:9f:db:74:be:78:a7:d6:c8:84:89:12:cb:63:
05:fc:78:d3:1f:59:58:8c:28:f6:63:99:15:bf:e8:8a:65:3a:
5e:ea:28:d4:57:ef:f0:5f:d2:6e:77:66:ef:0a:fa:30:9d:28:
f7:51:97:fb:44:de:ae:1e:80:78:d4:f9:b8:34:c3:8b:08:92:
e0:eb:4d:9e:51:d6:4b:81:b8:86:97:61:05:41:ce:f0:0c:95:
db:e7:66:85:7d:03:91:95:19:49:28:9b:b8:4a:74:c2:e1:32:
15:79:b4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Brb9d4xb+ebVXSE7eSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDcyZTg1OTk1NzM1NWRhNWRkZDEzNDk2ZDcwZDcwNzcz
NDkxZjkwHhcNMjUwODIzMDMwMTUzWhcNMjUwODI0MDMwMTUzWjAzMTEwLwYDVQQD
EyhjY2YzZThlYjRhZWI4OGQzY2Y2YWVjZDhhYzUxNDcyNTZiMmJmNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7tCn5jEDXLPmrj2Iat8f3uzuWGF
z/x2jOCLAd9ChstZuLnBfu+I2NaokVs6IcbbmhHP03mnf+vXyjjv09XdFzAcg9DP
exbOvgb1jvuMel1WEHaBGTCZUeb6tR9g4I1B/5ZORksMjHHz0SU05raIrSrcGwfo
u0OD24abh5Fl8MqNNIxSWogSdd9JpOKnLosvUHhztb1h/zLx7q0qrp4Qf3meLtXb
eTGBfBV0MgECh45hmM1/JnQ3tuh5dqPjqsHl9TSAqSqS90ji49bhJc64wt7s3ixH
zZJbMR+ACM/cqLZLy+6TXn8gDc1F7Ok5HIw0EKR1lFF2wgLiw1omkGPPrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzz6OtK64jTz2rs2KxRRyVrK/RzMB8GA1UdIwQY
MBaAFJRHLoWZVzVdpd3RNJbXDXB3NJH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMt
NjBkMWVkODBjN2NmLzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMtNjBkMWVkODBjN2Nm
LzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCxtd6NI
/ZNT8lcAAz+v4WBSmvgfTuURuk29oeXWYLxmOs6K0fnnuj6AnMueMl7TtnuPKIjc
OKq8c701tIG34bWsiD0EN7h3/Rz12WJhIA0JNhqC6bInbvBQeErDhPdjL6msTabX
wPGbsCc7iGmdEQ3A5euB7cv7w2yo4UtVgLpqkGOCdcvVzx4WbjsjvQc7yFOusxef
23S+eKfWyISJEstjBfx40x9ZWIwo9mOZFb/oimU6Xuoo1Ffv8F/Sbndm7wr6MJ0o
91GX+0Terh6AeNT5uDTDiwiS4OtNnlHWS4G4hpdhBUHO8AyV2+dmhX0DkZUZSSib
uEp0wuEyFXm0uA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:54 2025 by rpki-client