Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: Se1f8oBSPQ2zz3juvdZWvE8XYHppUW6DX7en7Hlmicw=
Subject key identifier: 91:9C:F6:B7:52:C5:32:EB:97:95:46:31:D1:CC:39:5B:22:11:AA:DE
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 01983E3CEA7B7923AC24EECC75916D22D21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 15F9
Signing time: Thu 24 Jul 2025 21:00:36 +0000
Manifest this update: Thu 24 Jul 2025 21:00:36 +0000
Manifest next update: Fri 25 Jul 2025 21:00:36 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: riWPRPIGmfafvFsAR4ViWuYfBRuZRVmsuYljKyoybzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:ea:7b:79:23:ac:24:ee:cc:75:91:6d:22:d2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Jul 24 21:00:36 2025 GMT
Not After : Jul 25 21:00:36 2025 GMT
Subject: CN=919cf6b752c532eb97954631d1cc395b2211aade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:fe:d3:b5:ce:ec:d5:ec:85:85:40:64:ea:
97:a9:4a:df:12:4c:3b:a4:44:5b:99:c0:b2:04:2d:
de:89:e1:1e:38:9c:b2:fd:d7:d9:7f:b8:03:5b:a7:
dd:07:c0:e7:c4:6a:ed:03:a7:70:db:33:96:31:9c:
89:61:ba:4c:30:e7:3b:0e:63:f0:92:f6:20:03:4f:
2e:09:65:56:3f:da:3e:00:e5:ad:ac:58:38:14:fb:
99:38:af:35:b6:d5:88:44:6c:6a:74:dc:5b:0b:88:
43:00:90:a0:36:e4:79:52:99:02:6b:6f:ed:c8:c7:
6e:75:07:d0:43:51:58:97:3d:06:7b:c7:d2:42:22:
60:e1:20:01:3b:b0:18:0f:c1:37:31:be:86:fe:66:
b7:10:64:4e:17:38:60:35:24:49:11:d3:37:a3:b7:
bb:2a:0b:8c:ea:1e:5f:1c:95:87:77:0a:4e:e3:3c:
22:6a:c0:5b:f8:fb:54:7f:83:5b:39:ed:43:6c:4c:
fd:67:cc:3b:d0:20:a9:82:2f:88:23:f7:6a:96:3e:
b1:26:23:58:1f:16:e9:cb:ea:96:aa:07:16:80:61:
36:70:ae:3c:1a:93:31:30:2a:b1:be:67:bb:80:ee:
79:53:d1:96:c1:a5:f4:92:52:5f:e9:4b:d7:05:e1:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:F6:B7:52:C5:32:EB:97:95:46:31:D1:CC:39:5B:22:11:AA:DE
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fe:7e:7f:35:5b:5c:2f:92:16:b9:7a:62:37:d8:4e:26:25:
c2:b5:f7:a3:6a:60:ad:58:86:d7:54:c0:c3:32:bf:d6:e6:cf:
c8:65:cd:3c:fb:e7:bd:f4:73:82:58:fd:d0:6a:0b:e7:f8:81:
84:f7:eb:35:39:d5:c2:b3:e5:86:77:b3:7a:05:0f:50:79:cc:
01:13:c3:ff:cd:5e:be:67:14:2d:be:1e:c8:e6:be:1a:5c:cb:
ca:b8:3a:6b:5c:ad:4d:c9:8c:42:82:8c:aa:30:5b:3a:64:44:
19:5c:f9:5f:16:3a:93:9c:3b:2f:b5:bd:42:cd:3f:1e:1c:cc:
09:6f:94:2d:9b:2a:cc:6c:33:56:c6:f4:13:71:99:7d:4b:92:
14:6b:74:80:cd:2d:0e:4a:ff:18:d7:fc:cb:b8:06:6c:4f:6f:
b4:4e:1d:e5:2e:df:b7:86:b3:e8:f9:50:59:04:4c:60:37:64:
e8:f4:67:eb:14:2f:ef:1c:2c:02:ef:c6:07:7d:f9:3b:05:10:
28:54:6c:48:8b:3f:34:0e:74:ca:a0:50:67:92:50:ca:04:dc:
69:01:a2:22:c5:23:a6:f3:9b:24:78:4c:93:56:b3:60:8e:bb:
8b:85:7a:37:15:8c:20:46:2a:65:00:9b:19:e7:99:f7:65:58:
74:0f:26:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+POp7eSOsJO7MdZFtItIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODhhNTNmY2I5Njc3N2Y5OWUwMmRmODk0MGRkMDQwYjQ1
NGNkMWMwHhcNMjUwNzI0MjEwMDM2WhcNMjUwNzI1MjEwMDM2WjAzMTEwLwYDVQQD
Eyg5MTljZjZiNzUyYzUzMmViOTc5NTQ2MzFkMWNjMzk1YjIyMTFhYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+f+07XO7NXshYVAZOqXqUrfEkw7
pERbmcCyBC3eieEeOJyy/dfZf7gDW6fdB8DnxGrtA6dw2zOWMZyJYbpMMOc7DmPw
kvYgA08uCWVWP9o+AOWtrFg4FPuZOK81ttWIRGxqdNxbC4hDAJCgNuR5UpkCa2/t
yMdudQfQQ1FYlz0Ge8fSQiJg4SABO7AYD8E3Mb6G/ma3EGROFzhgNSRJEdM3o7e7
KguM6h5fHJWHdwpO4zwiasBb+PtUf4NbOe1DbEz9Z8w70CCpgi+II/dqlj6xJiNY
Hxbpy+qWqgcWgGE2cK48GpMxMCqxvme7gO55U9GWwaX0klJf6UvXBeG5tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGc9rdSxTLrl5VGMdHMOVsiEareMB8GA1UdIwQY
MBaAFC+IpT/Llnd/meAt+JQN0EC0VM0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2Mt
YWNjNGFhYzc4ZDBkLzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2MtYWNjNGFhYzc4ZDBk
LzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwf5+fzVb
XC+SFrl6YjfYTiYlwrX3o2pgrViG11TAwzK/1ubPyGXNPPvnvfRzglj90GoL5/iB
hPfrNTnVwrPlhnezegUPUHnMARPD/81evmcULb4eyOa+GlzLyrg6a1ytTcmMQoKM
qjBbOmREGVz5XxY6k5w7L7W9Qs0/HhzMCW+ULZsqzGwzVsb0E3GZfUuSFGt0gM0t
Dkr/GNf8y7gGbE9vtE4d5S7ft4az6PlQWQRMYDdk6PRn6xQv7xwsAu/GB335OwUQ
KFRsSIs/NA50yqBQZ5JQygTcaQGiIsUjpvObJHhMk1azYI67i4V6NxWMIEYqZQCb
GeeZ92VYdA8mbA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:31 2025 by rpki-client