Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: IMS+NPIKyIeO4/y5R85eikH01MrRKm9yDLzSBJU8sC0=
Subject key identifier: 67:8F:65:28:74:D5:C3:68:57:8E:2E:81:5E:EF:5F:53:FF:F9:2D:29
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0198496583C4E3F322365FA1BC990B5A6606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1319
Signing time: Sun 27 Jul 2025 01:00:46 +0000
Manifest this update: Sun 27 Jul 2025 01:00:46 +0000
Manifest next update: Mon 28 Jul 2025 01:00:46 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: aU1q0NKRSnDywp07o1H/VT3s1oBI8dUOJtMJxkkgHkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:83:c4:e3:f3:22:36:5f:a1:bc:99:0b:5a:66:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jul 27 01:00:46 2025 GMT
Not After : Jul 28 01:00:46 2025 GMT
Subject: CN=678f652874d5c368578e2e815eef5f53fff92d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:92:12:3d:08:e8:af:19:81:98:07:d3:cb:
b5:fc:cc:ef:e5:4a:aa:ae:b7:72:fd:4a:ce:7a:9b:
4e:f9:42:9d:3e:3c:f1:c3:b3:7b:dd:74:ba:09:41:
d5:62:97:dc:bc:23:4f:4d:9e:1d:86:fb:03:b7:64:
3a:0b:e9:57:18:98:57:76:ba:38:9f:76:a5:47:47:
f7:35:14:4a:a1:c1:d9:6e:2d:cf:dc:e3:20:ef:22:
e0:7e:60:e6:71:8b:2a:98:36:b7:58:85:3b:f6:5c:
15:64:93:43:05:44:b6:cf:3b:b0:9d:b0:0c:94:9c:
2c:6f:5b:a5:96:c0:a6:17:22:1b:5f:a8:06:e3:d8:
36:d0:95:f8:0e:43:c7:65:da:98:38:da:5c:75:1d:
28:2d:bc:35:6a:c3:2a:46:ee:49:62:66:5f:1f:1b:
15:7e:2e:1a:ba:b2:38:49:63:fb:34:7d:51:85:d4:
86:2b:38:8c:83:7b:37:56:7a:5d:bf:92:78:46:c6:
c4:06:0d:49:64:07:41:f2:ec:45:a7:df:59:76:2e:
13:94:48:6b:57:38:1d:39:37:bd:ab:ef:7e:ac:92:
9b:8e:45:b1:08:00:cd:fd:8a:9b:c8:c5:03:c5:9a:
20:15:e2:6e:3d:e7:40:b7:15:d9:73:17:75:3c:c8:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:65:28:74:D5:C3:68:57:8E:2E:81:5E:EF:5F:53:FF:F9:2D:29
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:16:f8:56:ba:fc:f5:a1:ee:0c:b4:f9:24:a5:10:e4:92:8b:
ff:f0:24:99:7f:42:9f:e6:56:97:b9:d4:b7:cb:5a:d1:0e:ca:
19:04:47:aa:7a:e3:0a:8c:5c:32:a9:aa:50:0e:48:65:3e:33:
d7:71:28:01:25:a3:47:9e:fb:28:99:80:57:90:8f:1e:b3:45:
22:05:83:23:cf:5b:f0:01:50:bd:f9:0a:12:4f:21:69:61:f5:
c1:24:75:5d:0a:87:a7:c7:ec:2d:fa:05:ba:2f:f4:ab:65:3d:
00:df:5e:8c:f7:f5:ac:cd:07:4b:11:2d:7e:67:ef:0d:15:20:
ef:05:65:df:1b:ee:b5:09:bf:d0:5e:5c:85:2f:e0:7a:a8:80:
bd:5e:dd:68:32:cd:80:7e:98:5a:46:51:3c:67:67:c1:90:81:
36:13:fa:6b:a1:39:4f:bd:37:0d:0a:b0:01:28:79:83:e1:96:
6b:90:a5:06:b8:c1:a3:14:98:73:b0:5b:2d:98:64:60:b6:84:
f2:ff:10:77:18:50:40:1c:71:f6:f0:bb:78:8d:f8:fe:ad:80:
3d:9b:e7:79:14:79:fc:8e:6d:c6:2f:a8:de:bb:a1:74:cd:64:
97:69:21:97:04:28:96:53:39:b9:ca:25:00:4b:e7:5e:e6:fd:
02:d0:bd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZYPE4/MiNl+hvJkLWmYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTk1MjlkZDMxNzA2NDVkNzZjZjZhYzA2NTk1MDZjYzY0
OWNhOTAwHhcNMjUwNzI3MDEwMDQ2WhcNMjUwNzI4MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg2NzhmNjUyODc0ZDVjMzY4NTc4ZTJlODE1ZWVmNWY1M2ZmZjkyZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojySEj0I6K8ZgZgH08u1/Mzv5Uqq
rrdy/UrOeptO+UKdPjzxw7N73XS6CUHVYpfcvCNPTZ4dhvsDt2Q6C+lXGJhXdro4
n3alR0f3NRRKocHZbi3P3OMg7yLgfmDmcYsqmDa3WIU79lwVZJNDBUS2zzuwnbAM
lJwsb1ullsCmFyIbX6gG49g20JX4DkPHZdqYONpcdR0oLbw1asMqRu5JYmZfHxsV
fi4aurI4SWP7NH1RhdSGKziMg3s3Vnpdv5J4RsbEBg1JZAdB8uxFp99Zdi4TlEhr
VzgdOTe9q+9+rJKbjkWxCADN/YqbyMUDxZogFeJuPedAtxXZcxd1PMjoOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGePZSh01cNoV44ugV7vX1P/+S0pMB8GA1UdIwQY
MBaAFJdZUp3TFwZF12z2rAZZUGzGScqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYt
ZGU0YWNjYjAwZGQ3LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYtZGU0YWNjYjAwZGQ3
LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBb4Vrr8
9aHuDLT5JKUQ5JKL//AkmX9Cn+ZWl7nUt8ta0Q7KGQRHqnrjCoxcMqmqUA5IZT4z
13EoASWjR577KJmAV5CPHrNFIgWDI89b8AFQvfkKEk8haWH1wSR1XQqHp8fsLfoF
ui/0q2U9AN9ejPf1rM0HSxEtfmfvDRUg7wVl3xvutQm/0F5chS/geqiAvV7daDLN
gH6YWkZRPGdnwZCBNhP6a6E5T703DQqwASh5g+GWa5ClBrjBoxSYc7BbLZhkYLaE
8v8QdxhQQBxx9vC7eI34/q2APZvneRR5/I5txi+o3ruhdM1kl2khlwQollM5ucol
AEvnXub9AtC9SA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:06:49 2025 by rpki-client