Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier: Nbh80YoI660MQEtOKIyy8yuczjOQbFH4H1fQ/X5B5Ow=
Subject key identifier: 3C:16:7C:27:C7:9C:5A:50:F8:3B:D3:56:B4:39:33:F5:1E:08:CA:7A
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial: 019849D2CAF857445727ACEE327D74687B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number: 0CE1
Signing time: Sun 27 Jul 2025 03:00:07 +0000
Manifest this update: Sun 27 Jul 2025 03:00:07 +0000
Manifest next update: Mon 28 Jul 2025 03:00:07 +0000
Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: BSqpR5Bf6FhRIKy5aFj/4OjCPk8bZVhS9+7bMHrfmhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ca:f8:57:44:57:27:ac:ee:32:7d:74:68:7b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Validity
Not Before: Jul 27 03:00:07 2025 GMT
Not After : Jul 28 03:00:07 2025 GMT
Subject: CN=3c167c27c79c5a50f83bd356b43933f51e08ca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:08:d2:6e:19:2f:46:ef:25:cf:3a:a2:23:
34:53:81:cb:d8:9a:9e:d0:fd:f4:45:6d:6e:b4:96:
35:05:9b:23:cb:1f:4c:dc:e2:de:bf:89:86:93:25:
94:5e:68:ac:0a:ba:33:96:e5:64:09:56:8f:05:08:
e8:9e:41:3f:28:a0:60:f4:68:e8:57:3e:08:7c:5c:
8f:42:4c:26:68:bb:ac:ba:9b:36:c8:54:c9:67:00:
fc:a2:1f:d5:4d:c3:c3:ba:47:84:96:c9:d6:c3:c0:
fb:b1:3f:3f:99:97:c4:05:89:ce:80:9b:e8:ca:4b:
3a:65:42:74:29:40:ee:df:bb:4a:04:4f:23:5f:8b:
30:15:32:7a:45:f4:97:12:00:88:8e:65:c4:7f:62:
a7:4d:06:4d:93:53:92:6e:9c:c0:bb:28:a1:3b:d1:
be:ca:98:34:ff:f8:61:8f:7c:3f:40:e8:35:87:f0:
b2:a5:f3:f1:d5:7c:59:a8:a0:8f:66:88:42:ac:30:
0e:dd:9c:2a:73:84:d3:49:eb:c7:d7:d7:ae:f1:26:
79:32:c3:fe:25:24:64:aa:83:dc:49:8d:2b:f9:8b:
18:c1:33:d4:29:a3:0e:d6:31:27:20:5d:b1:58:09:
22:f2:b0:f0:82:2a:b1:c9:dd:85:6e:9d:e9:2e:82:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:16:7C:27:C7:9C:5A:50:F8:3B:D3:56:B4:39:33:F5:1E:08:CA:7A
X509v3 Authority Key Identifier:
keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:97:7f:24:00:55:67:10:d2:f7:71:30:37:6b:44:80:db:4b:
5c:4b:c0:f9:10:cc:d3:da:ef:4e:9c:19:62:31:98:26:e2:2f:
25:0f:86:99:3b:07:e5:4e:e9:02:a1:10:97:d4:9a:7e:0f:86:
8f:44:87:cb:b3:57:0f:2a:dd:b3:5e:99:a1:2e:98:36:cd:fc:
ba:3e:9e:87:6b:b5:6a:8b:9a:c1:a8:1f:bf:66:d7:b2:e1:e3:
52:15:ac:ac:56:20:97:83:5b:f5:73:98:3b:1d:15:be:51:3c:
fb:b9:97:94:2e:79:e5:d3:3c:bf:97:62:72:6f:99:0d:82:1d:
ca:2c:5e:c9:29:29:7e:87:66:55:69:d9:06:92:3c:6e:27:80:
7c:7a:9d:a1:aa:af:17:7c:cd:95:b1:15:f6:2d:3d:2b:9d:ee:
3d:d9:f8:92:63:69:0f:18:d0:f3:94:3d:13:d3:5f:bf:b8:da:
40:58:5d:01:86:5d:6f:c9:9d:95:69:c4:eb:ac:23:2b:5c:0b:
26:5f:50:8b:bf:30:2c:33:83:76:8b:aa:9f:d1:88:b7:f5:b3:
7e:f1:03:3b:e5:86:dd:59:e5:f7:9b:fd:13:d4:3b:d6:2f:d4:
a5:31:1d:d8:b8:91:3b:f0:74:ab:dc:be:65:c9:05:59:09:48:
e4:ef:d4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0sr4V0RXJ6zuMn10aHs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZGVjNjcwYjc4MGMzYmY5NDAxZWYxYzExNWExZDg3ZmU4
ZjdjN2EwHhcNMjUwNzI3MDMwMDA3WhcNMjUwNzI4MDMwMDA3WjAzMTEwLwYDVQQD
EygzYzE2N2MyN2M3OWM1YTUwZjgzYmQzNTZiNDM5MzNmNTFlMDhjYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqcI0m4ZL0bvJc86oiM0U4HL2Jqe
0P30RW1utJY1BZsjyx9M3OLev4mGkyWUXmisCrozluVkCVaPBQjonkE/KKBg9Gjo
Vz4IfFyPQkwmaLusups2yFTJZwD8oh/VTcPDukeElsnWw8D7sT8/mZfEBYnOgJvo
yks6ZUJ0KUDu37tKBE8jX4swFTJ6RfSXEgCIjmXEf2KnTQZNk1OSbpzAuyihO9G+
ypg0//hhj3w/QOg1h/CypfPx1XxZqKCPZohCrDAO3Zwqc4TTSevH19eu8SZ5MsP+
JSRkqoPcSY0r+YsYwTPUKaMO1jEnIF2xWAki8rDwgiqxyd2Fbp3pLoIvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwWfCfHnFpQ+DvTVrQ5M/UeCMp6MB8GA1UdIwQY
MBaAFC/exnC3gMO/lAHvHBFaHYf+j3x6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQt
YWIxZDhlOTg0NGFmLzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQtYWIxZDhlOTg0NGFm
LzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5d/JABV
ZxDS93EwN2tEgNtLXEvA+RDM09rvTpwZYjGYJuIvJQ+GmTsH5U7pAqEQl9Safg+G
j0SHy7NXDyrds16ZoS6YNs38uj6eh2u1aouawagfv2bXsuHjUhWsrFYgl4Nb9XOY
Ox0VvlE8+7mXlC555dM8v5dicm+ZDYIdyixeySkpfodmVWnZBpI8bieAfHqdoaqv
F3zNlbEV9i09K53uPdn4kmNpDxjQ85Q9E9Nfv7jaQFhdAYZdb8mdlWnE66wjK1wL
Jl9Qi78wLDODdouqn9GIt/WzfvEDO+WG3Vnl95v9E9Q71i/UpTEd2LiRO/B0q9y+
ZckFWQlI5O/UuA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:24 2025 by rpki-client