Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft
File: l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft (raw, json)
Hash identifier: 2zbsMflH8VSRAdHQ7inr/qgw16V9I/dH+lqzIbC7ic0=
Subject key identifier: 8B:8B:1D:63:77:1C:5E:E2:B3:A4:BA:43:46:C4:9D:49:B7:0A:17:82
Authority key identifier: 97:57:7F:84:18:8E:28:3F:DB:5D:7A:6F:CC:CC:48:56:C1:99:49:B8
Certificate issuer: /CN=97577f84188e283fdb5d7a6fcccc4856c19949b8
Certificate serial: 019845F64F034858D38C77A283541CB154D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1d_hBiOKD_bXXpvzMxIVsGZSbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft
Manifest number: 15FA
Signing time: Sat 26 Jul 2025 09:00:26 +0000
Manifest this update: Sat 26 Jul 2025 09:00:26 +0000
Manifest next update: Sun 27 Jul 2025 09:00:26 +0000
Files and hashes: 1: l1d_hBiOKD_bXXpvzMxIVsGZSbg.crl (hash: X57R9wp+alilHI3o29x1GRbU/H7YQBtYabZBQ9DOMAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1d_hBiOKD_bXXpvzMxIVsGZSbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:4f:03:48:58:d3:8c:77:a2:83:54:1c:b1:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97577f84188e283fdb5d7a6fcccc4856c19949b8
Validity
Not Before: Jul 26 09:00:26 2025 GMT
Not After : Jul 27 09:00:26 2025 GMT
Subject: CN=8b8b1d63771c5ee2b3a4ba4346c49d49b70a1782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:ed:2a:6f:81:4a:6f:f1:cd:dd:a6:21:10:
89:f8:4d:83:88:43:0f:1d:30:57:9a:36:d8:74:f8:
55:f0:c4:d7:65:39:c6:10:77:42:b0:bd:7b:97:d9:
48:45:37:f6:f7:38:78:2e:fa:c4:63:0d:dc:97:97:
00:e9:76:1a:35:76:af:3e:9c:04:a8:74:21:8e:42:
18:80:e8:48:ef:db:f3:38:97:da:ee:e6:46:65:45:
28:d8:4e:7b:be:8f:9f:2e:88:33:ee:3c:64:49:b4:
53:57:d4:32:97:59:58:65:c2:a1:5c:af:5a:48:9f:
fc:a4:77:13:ab:30:1b:3e:68:29:cd:ac:eb:f3:ca:
67:c8:ef:dc:fc:42:3a:ff:c3:0a:02:44:23:87:af:
c9:0d:da:d9:23:ca:03:58:40:14:10:d4:a3:57:36:
25:fb:07:da:be:08:2b:cb:b4:12:fa:a3:60:44:d5:
a4:6b:a9:70:9f:14:a3:da:42:32:f0:2e:07:c3:2e:
37:7b:78:03:b6:0a:2e:8d:22:68:ea:0f:74:40:57:
e5:f5:08:de:a1:8d:d1:96:c5:d4:59:5e:b3:53:c5:
2a:31:cb:44:92:a8:01:3a:50:bd:68:06:94:a0:20:
da:b3:42:48:2e:96:6b:93:4f:6b:db:ec:ae:72:98:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:1D:63:77:1C:5E:E2:B3:A4:BA:43:46:C4:9D:49:B7:0A:17:82
X509v3 Authority Key Identifier:
keyid:97:57:7F:84:18:8E:28:3F:DB:5D:7A:6F:CC:CC:48:56:C1:99:49:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1d_hBiOKD_bXXpvzMxIVsGZSbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/b384ba-40ec-42a4-8330-a1a64b49fa50/1/l1d_hBiOKD_bXXpvzMxIVsGZSbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:27:56:7d:32:b5:4f:fe:f6:c2:ee:ff:ea:d7:a8:3b:66:
78:cd:08:da:73:f6:9d:66:f5:d4:5a:49:35:eb:71:e4:2b:06:
e4:ed:f4:26:9c:da:81:39:46:a4:13:09:c0:41:d7:07:94:a8:
ac:51:5d:4d:04:d4:55:cf:79:57:f0:2d:d4:bc:9e:87:b6:78:
21:83:fd:ee:5f:ca:d4:e7:52:ba:eb:c0:f6:86:6a:6f:c1:d4:
0a:20:e3:c4:e9:11:64:13:44:14:e4:47:92:f3:7a:c5:5c:af:
94:0b:61:eb:23:a0:dc:cc:0e:6e:de:8e:a2:48:92:cd:ea:ec:
e3:b5:a5:f8:ad:1f:64:0d:1f:13:82:d8:9d:49:1d:2e:dc:19:
b5:01:bc:59:33:01:9a:e0:ab:a7:ce:e3:5b:94:b8:d1:33:e9:
8b:dd:2f:ae:f1:21:bb:95:72:ef:99:46:bf:1f:40:ed:79:fc:
e4:1d:e3:1a:58:35:c0:c0:7d:23:62:e6:e2:81:38:2b:95:f1:
28:3b:70:70:76:b8:69:7a:48:94:69:4d:24:ae:fc:a8:51:25:
5d:1e:0d:d0:60:8e:ca:2a:10:df:37:70:20:63:17:80:d4:8c:
49:47:4f:f6:3d:36:21:16:24:19:65:eb:d5:e2:3a:8d:e1:09:
8e:08:f6:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9k8DSFjTjHeig1QcsVTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTc3Zjg0MTg4ZTI4M2ZkYjVkN2E2ZmNjY2M0ODU2YzE5
OTQ5YjgwHhcNMjUwNzI2MDkwMDI2WhcNMjUwNzI3MDkwMDI2WjAzMTEwLwYDVQQD
Eyg4YjhiMWQ2Mzc3MWM1ZWUyYjNhNGJhNDM0NmM0OWQ0OWI3MGExNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0DtKm+BSm/xzd2mIRCJ+E2DiEMP
HTBXmjbYdPhV8MTXZTnGEHdCsL17l9lIRTf29zh4LvrEYw3cl5cA6XYaNXavPpwE
qHQhjkIYgOhI79vzOJfa7uZGZUUo2E57vo+fLogz7jxkSbRTV9Qyl1lYZcKhXK9a
SJ/8pHcTqzAbPmgpzazr88pnyO/c/EI6/8MKAkQjh6/JDdrZI8oDWEAUENSjVzYl
+wfavggry7QS+qNgRNWka6lwnxSj2kIy8C4Hwy43e3gDtgoujSJo6g90QFfl9Qje
oY3RlsXUWV6zU8UqMctEkqgBOlC9aAaUoCDas0JILpZrk09r2+yucpjTlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuLHWN3HF7is6S6Q0bEnUm3CheCMB8GA1UdIwQY
MBaAFJdXf4QYjig/2116b8zMSFbBmUm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFkX2hCaU9LRF9iWFhwdnpNeElWc0daU2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iMzg0YmEtNDBlYy00MmE0LTgzMzAt
YTFhNjRiNDlmYTUwLzEvbDFkX2hCaU9LRF9iWFhwdnpNeElWc0daU2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9iMzg0YmEtNDBlYy00MmE0LTgzMzAtYTFhNjRiNDlmYTUw
LzEvbDFkX2hCaU9LRF9iWFhwdnpNeElWc0daU2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI8nVn0y
tU/+9sLu/+rXqDtmeM0I2nP2nWb11FpJNetx5CsG5O30JpzagTlGpBMJwEHXB5So
rFFdTQTUVc95V/At1Lyeh7Z4IYP97l/K1OdSuuvA9oZqb8HUCiDjxOkRZBNEFORH
kvN6xVyvlAth6yOg3MwObt6OokiSzers47Wl+K0fZA0fE4LYnUkdLtwZtQG8WTMB
muCrp87jW5S40TPpi90vrvEhu5Vy75lGvx9A7Xn85B3jGlg1wMB9I2Lm4oE4K5Xx
KDtwcHa4aXpIlGlNJK78qFElXR4N0GCOyioQ3zdwIGMXgNSMSUdP9j02IRYkGWXr
1eI6jeEJjgj2Pg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 18:58:16 2025 by rpki-client