Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: J7r4h0KNLhw2d+wHyvwEjy5+Q3QYd9BnIIW5N1EDf98=
Subject key identifier: 3A:B2:D0:5C:D0:CB:A6:9D:2E:57:D0:3E:56:8A:6C:90:7B:65:19:A9
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 01974A7ACF99E43152D6E27E57D452F12AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 059C
Signing time: Sat 07 Jun 2025 13:00:51 +0000
Manifest this update: Sat 07 Jun 2025 13:00:51 +0000
Manifest next update: Sun 08 Jun 2025 13:00:51 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: hv6ERxJHMpTpeuzrBE4ycELck/+T5aeY6QfZlLIn7ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:cf:99:e4:31:52:d6:e2:7e:57:d4:52:f1:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Jun 7 13:00:51 2025 GMT
Not After : Jun 8 13:00:51 2025 GMT
Subject: CN=3ab2d05cd0cba69d2e57d03e568a6c907b6519a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:c7:02:05:0b:3c:ab:4d:84:6c:f3:83:e4:
06:47:0b:12:ea:d8:d9:c2:2c:0a:30:4b:69:c3:ba:
4d:05:cd:f5:3b:93:b3:00:c1:20:f6:33:94:aa:39:
d2:38:a5:b0:ab:7e:ad:f1:df:a3:b2:6e:f1:f8:69:
99:5c:d1:5e:bd:c9:b9:18:7c:e5:52:37:94:df:11:
3f:97:83:a5:3e:65:91:4c:2a:86:cd:4f:e1:7b:10:
52:eb:4b:70:9f:3f:d4:fb:89:7d:e3:dd:9f:b9:14:
70:18:53:d5:8d:7d:c1:d6:ac:c6:c3:32:f0:0a:f9:
5c:78:ea:6a:bc:8e:22:8d:da:a6:bc:68:86:1d:46:
54:a3:d9:f6:4e:ca:96:af:4f:6b:88:7a:1b:63:88:
cc:19:5b:d0:b3:d1:4e:da:55:e4:ee:92:63:9f:6f:
29:8a:74:cd:e0:cb:ae:56:78:38:ab:df:b4:68:60:
5f:ef:b1:8e:30:47:3d:68:4a:2a:2f:c7:73:c9:84:
5e:28:85:db:4a:c1:88:01:bf:2c:55:e5:cc:5b:c8:
8b:43:dd:20:4d:8f:8f:ba:88:92:8a:64:8a:05:4b:
69:a7:76:ba:2b:90:75:03:e8:d2:e3:39:c9:6f:ae:
e7:0c:20:92:55:67:92:ac:7d:88:10:7c:c3:a9:1a:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B2:D0:5C:D0:CB:A6:9D:2E:57:D0:3E:56:8A:6C:90:7B:65:19:A9
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:67:26:6c:fe:f9:f2:55:ab:3f:fd:c1:45:4d:9b:a2:86:a4:
07:93:98:46:1a:df:c0:28:c2:43:9d:4f:05:a6:29:ac:48:c7:
46:85:95:2c:b2:2f:07:25:83:22:bb:f8:1f:37:6c:4b:0a:c5:
38:24:2e:d6:cf:11:ce:bc:ca:64:52:5c:fc:85:6e:7c:64:fe:
64:88:54:8d:b9:6a:3d:93:7e:66:ea:30:3e:94:6e:1b:58:ee:
34:2a:33:e5:91:a3:46:92:f0:16:d7:7a:9b:9c:2e:18:22:6e:
ea:0a:01:49:79:e0:58:42:f4:00:c8:22:6f:b1:70:64:d4:1c:
ea:7c:b5:3f:ea:00:2c:a0:7c:c6:8e:85:89:cd:56:fd:e6:b4:
a4:03:20:7d:d2:f8:03:f6:b8:d2:07:4f:03:d0:e1:14:ab:78:
80:a3:ba:cf:36:28:9c:2b:db:43:ae:32:58:e0:a1:8e:b7:44:
2e:89:8f:e8:80:e9:53:e1:9f:fc:b1:79:24:c6:fb:d2:b1:a7:
83:fb:c0:57:74:2c:52:93:83:4e:c0:06:c9:0c:36:08:d6:59:
a4:5a:f6:3e:14:b1:18:6e:0e:16:5f:20:eb:68:27:bc:72:bb:
5f:cc:7b:b0:21:42:d0:f2:59:c4:39:cc:b8:ba:c0:7e:bc:10:
c8:02:04:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKes+Z5DFS1uJ+V9RS8SrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGNmNzIxYzA4YzhlOWJjNTI0MmQ1NjE5NjY3NzIxNzM1
MDQ1NWMwHhcNMjUwNjA3MTMwMDUxWhcNMjUwNjA4MTMwMDUxWjAzMTEwLwYDVQQD
EygzYWIyZDA1Y2QwY2JhNjlkMmU1N2QwM2U1NjhhNmM5MDdiNjUxOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuDHAgULPKtNhGzzg+QGRwsS6tjZ
wiwKMEtpw7pNBc31O5OzAMEg9jOUqjnSOKWwq36t8d+jsm7x+GmZXNFevcm5GHzl
UjeU3xE/l4OlPmWRTCqGzU/hexBS60twnz/U+4l9492fuRRwGFPVjX3B1qzGwzLw
CvlceOpqvI4ijdqmvGiGHUZUo9n2TsqWr09riHobY4jMGVvQs9FO2lXk7pJjn28p
inTN4MuuVng4q9+0aGBf77GOMEc9aEoqL8dzyYReKIXbSsGIAb8sVeXMW8iLQ90g
TY+PuoiSimSKBUtpp3a6K5B1A+jS4znJb67nDCCSVWeSrH2IEHzDqRqJ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqy0FzQy6adLlfQPlaKbJB7ZRmpMB8GA1UdIwQY
MBaAFJVM9yHAjI6bxSQtVhlmdyFzUEVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFV6M0ljQ01qcHZGSkMxV0dXWjNJWE5RUlZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yODIzZGQtMjVhMS00NGEwLWJmYzEt
Y2JiZDA4YWQzZWMyLzEvbFV6M0ljQ01qcHZGSkMxV0dXWjNJWE5RUlZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yODIzZGQtMjVhMS00NGEwLWJmYzEtY2JiZDA4YWQzZWMy
LzEvbFV6M0ljQ01qcHZGSkMxV0dXWjNJWE5RUlZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWcmbP75
8lWrP/3BRU2booakB5OYRhrfwCjCQ51PBaYprEjHRoWVLLIvByWDIrv4HzdsSwrF
OCQu1s8RzrzKZFJc/IVufGT+ZIhUjblqPZN+ZuowPpRuG1juNCoz5ZGjRpLwFtd6
m5wuGCJu6goBSXngWEL0AMgib7FwZNQc6ny1P+oALKB8xo6Fic1W/ea0pAMgfdL4
A/a40gdPA9DhFKt4gKO6zzYonCvbQ64yWOChjrdELomP6IDpU+Gf/LF5JMb70rGn
g/vAV3QsUpODTsAGyQw2CNZZpFr2PhSxGG4OFl8g62gnvHK7X8x7sCFC0PJZxDnM
uLrAfrwQyAIERg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:17 2025 by rpki-client