Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: nbZP7EhZ2Ypln0a59cqL9rcLcnK0kGpuXBOGqYkGLe0=
Subject key identifier: 27:F4:29:16:B7:C5:F3:F8:39:77:83:E1:D9:63:83:BB:95:54:05:A9
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 0198481BD0DAEEC53858CD98B24EA857102B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 10D2
Signing time: Sat 26 Jul 2025 19:00:39 +0000
Manifest this update: Sat 26 Jul 2025 19:00:39 +0000
Manifest next update: Sun 27 Jul 2025 19:00:39 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: DrlqEBs/WEJKTaf28Qdhyc2R076NtgkQwqyiCsBmnk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:d0:da:ee:c5:38:58:cd:98:b2:4e:a8:57:10:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Jul 26 19:00:39 2025 GMT
Not After : Jul 27 19:00:39 2025 GMT
Subject: CN=27f42916b7c5f3f8397783e1d96383bb955405a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:9b:57:51:63:eb:00:ba:15:31:55:fa:05:
4f:ca:76:a1:8d:9c:4d:7a:b1:49:f3:64:15:60:72:
d1:a4:56:fe:57:b9:59:88:f1:f5:6b:f8:56:b1:c3:
d3:4a:4c:0d:b8:bd:3d:f9:7b:dc:ee:c6:47:2e:42:
44:a3:b7:a5:a3:22:f6:cb:52:8f:52:b1:a6:ec:59:
63:f8:48:21:0d:6b:a4:de:90:c2:02:04:22:c6:15:
a7:00:51:c2:16:59:55:85:95:94:13:d6:bf:84:e7:
b0:58:e0:43:22:db:4b:94:35:42:c4:4e:d5:6f:34:
85:23:28:f0:65:d2:f7:34:d6:67:e7:13:db:11:e9:
ed:a2:0e:69:31:72:5d:11:e0:4e:a4:85:0c:9d:ac:
47:b0:d2:ed:c4:9d:4e:9b:6d:57:83:d3:65:6a:ea:
3e:0b:9f:2c:45:2c:ab:53:25:8f:76:97:57:5c:94:
3a:8c:76:f0:0b:c0:c9:6a:a3:83:95:dc:13:81:14:
7d:c1:d8:89:ba:d8:72:c8:46:f8:d1:3a:14:5c:9f:
63:2c:54:37:50:ee:9e:a4:e2:48:d3:5b:c3:90:70:
1a:06:34:90:24:92:23:b2:a7:b0:32:6a:9c:52:26:
e9:69:13:27:f7:37:5e:ae:d2:a3:77:1e:ea:e4:0d:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:29:16:B7:C5:F3:F8:39:77:83:E1:D9:63:83:BB:95:54:05:A9
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:9a:c0:12:c1:ae:37:65:0c:c3:1b:f4:2b:71:05:f8:63:
61:0c:7d:a9:37:cb:5f:1d:9f:f7:d7:80:88:db:f6:2a:c1:93:
8e:2d:fa:33:52:f0:ba:e6:a6:7c:f4:2c:31:f7:13:aa:29:f9:
9f:ac:2a:8d:b6:cb:da:35:67:e7:a2:22:60:28:c5:f8:c8:e2:
e7:82:03:f8:e6:c0:04:d6:57:ee:7f:de:d2:54:34:4e:1b:e7:
6f:e8:26:dd:1a:be:29:4e:7c:36:3c:8f:ef:17:29:db:43:48:
0c:d5:c4:47:41:a4:6d:78:d1:c4:65:c5:e4:05:28:4e:12:5d:
7c:2d:36:65:54:04:9a:4c:57:d7:cd:97:36:ff:4e:29:1e:db:
27:bb:77:02:d4:6a:04:18:7c:19:9c:87:3f:0a:1c:f7:84:4f:
21:30:18:86:22:e6:31:83:d3:3a:eb:4c:80:39:f9:63:45:78:
5b:ea:4c:74:14:95:08:3a:aa:ed:c5:57:36:7b:c9:b8:bc:36:
ce:f0:25:6b:c8:44:ea:3d:bf:30:f0:3e:fb:d4:99:d2:d0:f4:
d7:70:7a:3c:2e:b4:0f:c6:3a:ce:db:5b:a5:89:92:14:8c:ad:
c6:e2:bb:3f:7d:4d:29:78:11:89:67:b9:e5:d8:f9:b7:6a:5f:
17:5b:8f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG9Da7sU4WM2Ysk6oVxArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjMxMjY4ZjJmZjdlOGNlYWRmMWRlOTVmOTdmMGIxZDJi
MTVmOTYwHhcNMjUwNzI2MTkwMDM5WhcNMjUwNzI3MTkwMDM5WjAzMTEwLwYDVQQD
EygyN2Y0MjkxNmI3YzVmM2Y4Mzk3NzgzZTFkOTYzODNiYjk1NTQwNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOubV1Fj6wC6FTFV+gVPynahjZxN
erFJ82QVYHLRpFb+V7lZiPH1a/hWscPTSkwNuL09+Xvc7sZHLkJEo7eloyL2y1KP
UrGm7Flj+EghDWuk3pDCAgQixhWnAFHCFllVhZWUE9a/hOewWOBDIttLlDVCxE7V
bzSFIyjwZdL3NNZn5xPbEentog5pMXJdEeBOpIUMnaxHsNLtxJ1Om21Xg9Nlauo+
C58sRSyrUyWPdpdXXJQ6jHbwC8DJaqODldwTgRR9wdiJuthyyEb40ToUXJ9jLFQ3
UO6epOJI01vDkHAaBjSQJJIjsqewMmqcUibpaRMn9zdertKjdx7q5A2pcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf0KRa3xfP4OXeD4dljg7uVVAWpMB8GA1UdIwQY
MBaAFHSzEmjy/36M6t8d6V+X8LHSsV+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2It
ZDg1NDllZGY3Y2VmLzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2ItZDg1NDllZGY3Y2Vm
LzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCqawBLB
rjdlDMMb9CtxBfhjYQx9qTfLXx2f99eAiNv2KsGTji36M1LwuuamfPQsMfcTqin5
n6wqjbbL2jVn56IiYCjF+Mji54ID+ObABNZX7n/e0lQ0Thvnb+gm3Rq+KU58NjyP
7xcp20NIDNXER0GkbXjRxGXF5AUoThJdfC02ZVQEmkxX182XNv9OKR7bJ7t3AtRq
BBh8GZyHPwoc94RPITAYhiLmMYPTOutMgDn5Y0V4W+pMdBSVCDqq7cVXNnvJuLw2
zvAla8hE6j2/MPA++9SZ0tD013B6PC60D8Y6zttbpYmSFIytxuK7P31NKXgRiWe5
5dj5t2pfF1uPaA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:39:41 2025 by rpki-client