Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: ZFJDsF/vI08ok3UaEnRs2HqWABXTJ6Clk5TOu7ruLNQ=
Subject key identifier: D5:52:2C:15:C6:64:30:56:70:65:AE:A5:03:F1:36:6D:A4:8C:CE:AC
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 0199FDD8EAA4089C5BF6FF7481374402D207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 13E5
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: soAjWGpgnfhiRcXsy1Lqij/PBPlp7yVX8MXUo2aiMQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ea:a4:08:9c:5b:f6:ff:74:81:37:44:02:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=d5522c15c66430567065aea503f1366da48cceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:22:f0:6c:81:b5:31:ae:8e:37:65:86:c1:
5e:3c:0f:69:a5:8c:0b:17:c9:bd:fc:77:fb:e9:ba:
79:45:de:17:3a:10:ea:79:12:4b:41:2a:23:31:0f:
7b:7e:84:75:c7:54:ca:c4:99:fb:f6:51:94:4c:3e:
5d:e4:8f:28:83:8d:1b:f4:2d:e4:01:55:90:c7:17:
7b:d5:ce:98:31:0b:63:d5:fb:24:76:e9:85:a4:84:
f4:2c:3a:1a:36:40:a0:6a:bf:5c:77:7a:0e:18:d3:
9e:6c:0a:2a:b8:ef:e3:20:0c:84:3b:89:f3:66:9d:
0b:82:5d:d1:c0:36:21:3c:16:91:46:1d:1e:b5:f8:
fe:63:e6:a3:d5:c9:4d:fa:a7:6c:77:a4:c7:92:4e:
68:8f:7f:ef:60:2e:b1:7b:17:3a:5a:1e:95:6b:18:
bc:e6:d9:28:01:57:b2:ff:ff:2a:f6:54:a1:2a:6a:
39:b0:cd:ff:0f:fc:e6:0b:c4:03:48:4a:21:5b:e5:
7c:46:85:78:95:ee:f7:d1:ad:54:71:17:35:b0:7f:
d3:9d:04:6c:72:01:93:4b:0d:7b:b5:4a:b9:ce:38:
79:99:09:77:a2:61:f0:ab:b5:8d:71:61:cb:94:c7:
b9:fb:2b:bd:e3:d2:75:35:a4:5d:02:64:ee:d4:2f:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:2C:15:C6:64:30:56:70:65:AE:A5:03:F1:36:6D:A4:8C:CE:AC
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cb:97:2c:4c:f4:a0:fc:03:e8:b5:1d:82:f3:97:6f:80:64:
d8:8f:51:72:b2:91:4e:73:16:90:24:ec:b2:34:d1:73:28:5c:
24:7c:b1:20:12:48:9a:41:73:e3:f8:61:c0:94:22:9c:3c:bc:
ee:54:12:db:cd:f1:93:ef:91:8c:2e:5b:86:22:9e:05:81:a4:
ed:b8:6f:32:24:8b:c5:e7:a8:69:8a:61:ba:2b:30:8b:96:97:
21:a2:78:b7:3d:bb:66:35:df:76:af:84:a2:61:e5:28:5b:4d:
1c:09:04:2c:75:17:b9:56:5f:d0:dd:ea:62:8c:69:54:81:fc:
95:37:0f:ab:a3:0b:d3:57:69:2c:03:05:9f:58:f2:51:65:57:
3f:76:69:e2:40:16:09:f4:6f:05:f6:0c:bf:35:03:ad:c8:96:
1e:ac:06:cc:7c:ca:16:ce:a9:82:3c:28:b2:7f:cd:2b:9e:64:
a9:e4:10:7c:f7:3a:24:3b:d9:fe:34:5e:78:28:11:5b:38:87:
68:c0:6b:a3:d8:a6:3f:f7:6c:a6:5e:87:76:7d:e7:49:9a:1e:
78:19:40:2f:45:0c:71:af:ce:3c:bd:da:94:a6:8d:70:cc:52:
c9:dd:92:ad:1a:23:1d:40:c7:07:77:1b:7f:4f:14:c8:9c:29:
e4:c1:a9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92OqkCJxb9v90gTdEAtIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDlhZDc2NTlkYTEzNGVkNDgwNzRmNGRiOTM0MWNlODc1
MTdkZjQwHhcNMjUxMDE5MTkwMTE1WhcNMjUxMDIwMTkwMTE1WjAzMTEwLwYDVQQD
EyhkNTUyMmMxNWM2NjQzMDU2NzA2NWFlYTUwM2YxMzY2ZGE0OGNjZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp8i8GyBtTGujjdlhsFePA9ppYwL
F8m9/Hf76bp5Rd4XOhDqeRJLQSojMQ97foR1x1TKxJn79lGUTD5d5I8og40b9C3k
AVWQxxd71c6YMQtj1fskdumFpIT0LDoaNkCgar9cd3oOGNOebAoquO/jIAyEO4nz
Zp0Lgl3RwDYhPBaRRh0etfj+Y+aj1clN+qdsd6THkk5oj3/vYC6xexc6Wh6Vaxi8
5tkoAVey//8q9lShKmo5sM3/D/zmC8QDSEohW+V8RoV4le730a1UcRc1sH/TnQRs
cgGTSw17tUq5zjh5mQl3omHwq7WNcWHLlMe5+yu949J1NaRdAmTu1C/IgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVSLBXGZDBWcGWupQPxNm2kjM6sMB8GA1UdIwQY
MBaAFJdJrXZZ2hNO1IB09NuTQc6HUX30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUt
MzJkNzljYzQ5ZjIyLzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUtMzJkNzljYzQ5ZjIy
LzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcuXLEz0
oPwD6LUdgvOXb4Bk2I9RcrKRTnMWkCTssjTRcyhcJHyxIBJImkFz4/hhwJQinDy8
7lQS283xk++RjC5bhiKeBYGk7bhvMiSLxeeoaYphuiswi5aXIaJ4tz27ZjXfdq+E
omHlKFtNHAkELHUXuVZf0N3qYoxpVIH8lTcPq6ML01dpLAMFn1jyUWVXP3Zp4kAW
CfRvBfYMvzUDrciWHqwGzHzKFs6pgjwosn/NK55kqeQQfPc6JDvZ/jReeCgRWziH
aMBro9imP/dspl6Hdn3nSZoeeBlAL0UMca/OPL3alKaNcMxSyd2SrRojHUDHB3cb
f08UyJwp5MGpSw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:25 2025 by rpki-client