Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
File: lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json)
Hash identifier: ptOgoQ4dJhsXjmDd4G0VgEvberUXjkigfUIeyYkfQ9U=
Subject key identifier: BB:C5:33:22:8D:3A:96:34:0D:C2:27:56:44:32:B2:A5:FE:D8:C1:E8
Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
Certificate issuer: /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Certificate serial: 019848F728905EC407EFA04221999F2EA5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
Manifest number: 0322
Signing time: Sat 26 Jul 2025 23:00:13 +0000
Manifest this update: Sat 26 Jul 2025 23:00:13 +0000
Manifest next update: Sun 27 Jul 2025 23:00:13 +0000
Files and hashes: 1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: xW8hn6ad93t0E+fTWP3msb1/rS5yT3djF5vDAB/BuAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:28:90:5e:c4:07:ef:a0:42:21:99:9f:2e:a5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Validity
Not Before: Jul 26 23:00:13 2025 GMT
Not After : Jul 27 23:00:13 2025 GMT
Subject: CN=bbc533228d3a96340dc227564432b2a5fed8c1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:a5:50:a2:4f:aa:7a:4d:48:00:3a:77:38:
5b:b7:a6:41:cb:8f:72:f6:19:a5:68:96:9d:62:fc:
c3:a8:e7:f9:f8:61:0e:38:68:39:94:17:cc:05:1d:
aa:82:69:f8:18:ea:02:cc:6f:7f:ab:41:40:c7:e0:
d9:fa:1c:5d:2a:0e:b5:b3:72:09:c5:87:b5:c8:66:
50:56:b1:3f:06:29:a8:89:c0:62:ce:18:5e:7b:dc:
75:74:9d:c3:f5:15:53:0f:5a:23:4d:a8:9d:66:1a:
b5:e9:a0:3f:81:31:86:e7:82:33:d0:8e:35:23:e1:
bf:bc:30:76:86:56:31:06:ae:f4:ad:1f:db:4d:bc:
15:ce:d7:d2:e1:0e:59:f7:68:a3:f9:13:b0:23:7b:
ee:3f:64:89:28:ab:44:30:a9:18:46:c3:dc:f9:2f:
90:c3:a4:e5:bd:9d:ce:7e:62:64:c4:59:ed:51:08:
57:a8:45:10:92:12:a4:c8:5f:d7:8a:73:48:a1:13:
84:1c:db:a5:bd:f4:7d:a4:ec:11:d9:33:02:be:2c:
98:96:44:53:66:79:3e:7b:6f:ab:35:8c:23:c1:f6:
b6:7d:57:c6:aa:2e:86:46:7e:a0:24:21:45:2b:84:
f8:11:a1:00:f4:91:e5:81:17:ce:04:af:fe:93:1f:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:33:22:8D:3A:96:34:0D:C2:27:56:44:32:B2:A5:FE:D8:C1:E8
X509v3 Authority Key Identifier:
keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bf:95:65:df:2c:8a:f0:d3:5e:64:8b:07:8e:c5:66:4f:bc:
1d:25:49:01:ed:ea:73:78:9a:1c:0f:df:b1:eb:e7:35:4c:02:
c2:09:6f:0b:ff:41:e4:82:15:70:8f:11:76:cf:7b:7d:b8:1e:
33:c9:69:e0:dc:2e:69:a0:dd:58:17:eb:d6:d8:bc:15:9a:f8:
5b:8c:c3:94:1a:12:1a:d6:86:83:2e:e8:37:29:92:74:af:56:
24:2e:c3:79:43:c7:39:4c:09:7a:45:cb:9c:18:a7:71:10:31:
5c:7f:ea:54:33:52:9f:41:13:5b:e9:2e:b4:1c:cf:d3:61:f2:
bd:28:d1:bf:b4:a1:63:9e:05:f8:3a:62:18:b6:30:7e:58:3b:
03:c0:d8:fb:cd:3d:28:d6:32:f9:09:5b:c0:72:5b:14:e3:1a:
83:d4:e5:37:86:27:5d:ec:2c:16:ec:55:b2:1b:7c:51:ae:ba:
4d:f8:51:73:3b:f8:a0:30:c9:84:84:be:ef:cd:8c:12:87:50:
cf:3d:e2:49:24:50:2c:32:e0:6c:49:df:59:67:6e:a3:50:70:
d2:b3:a9:72:56:4f:c0:84:82:70:dc:f7:56:8e:d8:b7:2d:0a:
c8:6f:9c:8a:26:cf:43:12:69:86:6d:8e:cf:7a:3d:0d:26:a5:
63:51:de:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9yiQXsQH76BCIZmfLqXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDNjODUwOTBmOWNjMmUyMjlkMzhmZGVhYmFlNjI2NTA4
YmRlYjgwHhcNMjUwNzI2MjMwMDEzWhcNMjUwNzI3MjMwMDEzWjAzMTEwLwYDVQQD
EyhiYmM1MzMyMjhkM2E5NjM0MGRjMjI3NTY0NDMyYjJhNWZlZDhjMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ClUKJPqnpNSAA6dzhbt6ZBy49y
9hmlaJadYvzDqOf5+GEOOGg5lBfMBR2qgmn4GOoCzG9/q0FAx+DZ+hxdKg61s3IJ
xYe1yGZQVrE/BimoicBizhhee9x1dJ3D9RVTD1ojTaidZhq16aA/gTGG54Iz0I41
I+G/vDB2hlYxBq70rR/bTbwVztfS4Q5Z92ij+ROwI3vuP2SJKKtEMKkYRsPc+S+Q
w6TlvZ3OfmJkxFntUQhXqEUQkhKkyF/XinNIoROEHNulvfR9pOwR2TMCviyYlkRT
Znk+e2+rNYwjwfa2fVfGqi6GRn6gJCFFK4T4EaEA9JHlgRfOBK/+kx/ocwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvFMyKNOpY0DcInVkQysqX+2MHoMB8GA1UdIwQY
MBaAFJUDyFCQ+cwuIp04/eq65iZQi964MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUt
ZjBkZDg3OWFlNTNhLzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUtZjBkZDg3OWFlNTNh
LzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7+VZd8s
ivDTXmSLB47FZk+8HSVJAe3qc3iaHA/fsevnNUwCwglvC/9B5IIVcI8Rds97fbge
M8lp4NwuaaDdWBfr1ti8FZr4W4zDlBoSGtaGgy7oNymSdK9WJC7DeUPHOUwJekXL
nBincRAxXH/qVDNSn0ETW+kutBzP02HyvSjRv7ShY54F+DpiGLYwflg7A8DY+809
KNYy+QlbwHJbFOMag9TlN4YnXewsFuxVsht8Ua66TfhRczv4oDDJhIS+782MEodQ
zz3iSSRQLDLgbEnfWWduo1Bw0rOpclZPwISCcNz3Vo7Yty0KyG+ciibPQxJphm2O
z3o9DSalY1HeDg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:16 2025 by rpki-client