Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: hu8pQ8tnAjS22FC9Kco2+d7L9Yn5MTuaPx4gj2LB6E4=
Subject key identifier: F8:BE:3D:D3:DD:05:68:48:51:28:F1:36:F1:51:8F:12:25:71:D6:C3
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01974D0DFAD575360FF41B008BAF48A1CCFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 07
Signing time: Sun 08 Jun 2025 01:00:51 +0000
Manifest this update: Sun 08 Jun 2025 01:00:51 +0000
Manifest next update: Mon 09 Jun 2025 01:00:51 +0000
Files and hashes: 1: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: VdXPZCJz8U4lUZai0p0C9NKD2guRbN/1aEQ5AnyMBUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:fa:d5:75:36:0f:f4:1b:00:8b:af:48:a1:cc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Jun 8 01:00:51 2025 GMT
Not After : Jun 9 01:00:51 2025 GMT
Subject: CN=f8be3dd3dd0568485128f136f1518f122571d6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:bd:cb:95:1a:56:7a:7e:08:07:ba:11:c2:
5f:18:4c:df:08:6b:a2:7a:1a:3d:b7:48:ea:0e:38:
b5:53:dc:c5:f5:8a:cc:b2:46:d6:ba:ee:3a:68:ee:
56:df:b8:6e:c4:02:4c:f2:64:30:de:d6:50:49:24:
75:42:73:fa:6e:07:6f:44:4b:dd:8a:08:ca:af:fa:
47:32:2e:a4:a0:2e:3e:41:1c:fc:ce:e0:cb:b8:bd:
7e:1f:23:fb:39:9a:1b:c7:43:b7:e3:62:25:71:f0:
bb:66:32:50:3c:ee:c1:0a:de:cc:2b:9b:de:52:6a:
80:5a:58:16:31:1c:1b:9d:96:96:68:68:9c:c3:82:
72:ac:b7:05:59:4f:47:35:06:88:ec:d3:4f:b0:65:
15:ae:32:19:a1:1a:99:73:d3:50:8b:50:64:70:ec:
bd:75:0c:92:54:6a:4f:6d:a5:04:f9:3c:0c:a8:f3:
07:f9:e4:b2:38:01:9c:26:a2:1f:f0:71:78:7d:a5:
5c:8a:40:da:fa:42:ba:0b:e8:bc:d7:33:3c:88:79:
6d:1d:3e:10:8b:f2:7f:a5:41:cb:25:d3:2d:5f:c1:
62:36:97:99:2f:3e:13:bc:e0:f7:5e:52:d6:20:68:
19:9f:51:30:0a:d0:07:4c:f3:63:91:a7:e4:a0:ab:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:3D:D3:DD:05:68:48:51:28:F1:36:F1:51:8F:12:25:71:D6:C3
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:65:a7:2e:d9:7f:f7:c2:ed:bb:6a:33:ba:38:07:15:ac:03:
4d:64:e8:f1:f4:07:34:24:3c:64:90:f3:6f:b5:9c:31:c0:a7:
43:0d:aa:09:fa:f4:10:01:5e:76:b9:ea:0a:cb:0b:aa:ff:57:
ab:b5:7e:6e:1e:59:40:db:bd:b7:63:42:31:28:d7:4e:05:49:
4f:0e:39:ff:e8:df:2a:8b:e5:b2:1b:7c:ef:70:32:06:0d:3c:
64:2d:93:63:08:f9:01:b1:e8:9f:cd:95:9a:f9:e5:ca:11:8e:
8d:58:ec:79:b0:66:e7:ba:e9:f8:5c:45:cf:7c:28:7c:91:a3:
b0:f1:65:65:e1:18:43:7b:6e:30:3d:78:e7:59:d7:4f:4e:d3:
39:1d:e5:91:8c:f2:ce:cb:de:b5:49:f4:6a:32:0b:10:e2:d1:
75:f4:d4:8d:a9:31:62:22:0f:b3:03:d9:1f:6d:60:2b:a4:89:
4b:fb:13:9b:da:7f:19:c0:d4:27:ad:6e:5a:a9:89:7b:e3:48:
4d:7a:6b:88:fa:c1:18:f3:f6:a5:70:d8:1e:53:7e:ff:96:0e:
48:df:f2:a4:95:58:78:66:a1:01:22:04:e7:1d:22:f3:bc:4b:
7f:a5:78:56:30:0e:69:47:85:9f:29:f4:19:4b:98:6b:c2:42:
5f:b8:16:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDfrVdTYP9BsAi69Iocz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh
MTg0NTQwHhcNMjUwNjA4MDEwMDUxWhcNMjUwNjA5MDEwMDUxWjAzMTEwLwYDVQQD
EyhmOGJlM2RkM2RkMDU2ODQ4NTEyOGYxMzZmMTUxOGYxMjI1NzFkNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5m9y5UaVnp+CAe6EcJfGEzfCGui
eho9t0jqDji1U9zF9YrMskbWuu46aO5W37huxAJM8mQw3tZQSSR1QnP6bgdvREvd
igjKr/pHMi6koC4+QRz8zuDLuL1+HyP7OZobx0O342IlcfC7ZjJQPO7BCt7MK5ve
UmqAWlgWMRwbnZaWaGicw4JyrLcFWU9HNQaI7NNPsGUVrjIZoRqZc9NQi1BkcOy9
dQySVGpPbaUE+TwMqPMH+eSyOAGcJqIf8HF4faVcikDa+kK6C+i81zM8iHltHT4Q
i/J/pUHLJdMtX8FiNpeZLz4TvOD3XlLWIGgZn1EwCtAHTPNjkafkoKufzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi+PdPdBWhIUSjxNvFRjxIlcdbDMB8GA1UdIwQY
MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt
YTdiODU0NjBmMzY2LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2
LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGWnLtl/
98Ltu2ozujgHFawDTWTo8fQHNCQ8ZJDzb7WcMcCnQw2qCfr0EAFedrnqCssLqv9X
q7V+bh5ZQNu9t2NCMSjXTgVJTw45/+jfKovlsht873AyBg08ZC2TYwj5AbHon82V
mvnlyhGOjVjsebBm57rp+FxFz3wofJGjsPFlZeEYQ3tuMD1451nXT07TOR3lkYzy
zsvetUn0ajILEOLRdfTUjakxYiIPswPZH21gK6SJS/sTm9p/GcDUJ61uWqmJe+NI
TXpriPrBGPP2pXDYHlN+/5YOSN/ypJVYeGahASIE5x0i87xLf6V4VjAOaUeFnyn0
GUuYa8JCX7gWTA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:09 2025 by rpki-client