Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier: fCu7XBulAPHkv/21xgpslQa+DEn6TyRd4FOjteLMCck=
Subject key identifier: FC:4E:10:AC:3E:D2:72:12:48:0F:12:7E:FC:43:74:E2:4B:91:77:14
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 01991809ED1FA7CF942F685B8440945D08E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 04:02:07 +0000
Manifest this update: Fri 05 Sep 2025 04:02:07 +0000
Manifest next update: Sat 06 Sep 2025 04:02:07 +0000
Files and hashes: 1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: 2BVexHP83nS1vJjSaQYh8F+q1SMRfSPlPr56d9gBJ6M=)
2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:ed:1f:a7:cf:94:2f:68:5b:84:40:94:5d:08:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: Sep 5 04:02:07 2025 GMT
Not After : Sep 6 04:02:07 2025 GMT
Subject: CN=fc4e10ac3ed27212480f127efc4374e24b917714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:ea:b3:b8:e0:c6:9f:a2:35:3e:0d:98:5e:
a3:ca:52:46:27:56:92:90:a5:6a:71:08:6f:55:bc:
3c:b4:7d:cf:17:bf:c4:ad:f7:3e:bc:96:4f:e2:35:
9c:dd:8d:fb:17:9d:df:c0:c5:c0:b2:b2:22:96:2e:
44:b5:8c:4c:a0:58:fe:d0:46:f6:57:af:29:a8:9c:
d8:76:24:74:83:13:53:56:6f:4f:39:68:b4:2d:98:
32:13:41:11:ed:5b:83:6d:ea:31:2e:89:d1:7b:31:
39:13:f5:11:89:a9:a2:6b:63:2c:e2:c8:18:d4:7e:
6d:3c:8f:00:11:71:9c:4a:82:f5:9a:04:80:e7:0a:
8a:42:b3:83:84:0b:d2:7c:2f:ee:ad:b9:5a:db:ce:
32:5b:88:32:54:06:c4:ee:47:3d:16:85:62:5d:a6:
1d:83:ef:a6:7f:82:08:f7:c3:61:17:df:20:49:ed:
c3:6c:6a:2a:44:d7:7e:59:0a:6d:7e:a5:49:16:4a:
77:32:16:05:ea:c7:4d:39:91:40:a7:8a:f1:09:1e:
c1:8f:12:c6:09:b4:05:40:83:b1:91:80:c4:bc:70:
4c:d1:80:fe:11:6d:44:fc:40:28:7a:ef:f6:dc:e8:
13:f6:f0:ce:a6:04:b9:a8:53:45:4e:19:51:d0:7a:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:10:AC:3E:D2:72:12:48:0F:12:7E:FC:43:74:E2:4B:91:77:14
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:26:90:89:f1:1d:b9:d4:36:7d:87:07:b6:4f:5f:5e:7a:
39:f4:51:00:76:6e:0c:4e:e4:30:e1:11:b0:2b:d7:81:27:0e:
74:76:6b:ce:47:ef:ad:f6:62:31:cb:eb:af:3e:b8:bc:d8:43:
cc:97:34:b9:91:e9:13:62:a9:57:38:ad:6b:d3:1e:cf:98:8c:
92:79:88:5a:f0:2d:82:db:23:04:d1:99:9c:1a:ea:c8:0e:eb:
1a:fc:d0:d0:80:fa:51:0e:cc:10:77:8e:f1:87:b8:8e:b6:fb:
5d:21:6d:dc:ec:b1:f9:d9:95:6a:b0:b0:ba:71:75:63:f9:5b:
eb:0a:0c:64:64:a8:e3:61:29:3c:c5:73:fe:c4:3f:65:bb:40:
80:92:5c:fb:c0:9e:2a:72:d5:e3:3e:6f:0f:05:f2:f8:22:c4:
a0:73:30:2b:49:7e:6a:74:5b:0f:d4:54:ab:ed:e4:31:37:5f:
aa:dd:91:0e:ae:54:e6:88:a4:de:2f:92:b1:1e:12:58:cb:9c:
ee:8c:56:42:72:26:bf:7d:ac:8b:89:3c:10:95:f1:ae:c7:ef:
3b:91:b4:aa:85:ff:73:6a:42:75:46:3b:60:37:b6:92:fd:a8:
a0:de:fc:49:6a:27:23:40:f3:26:3d:44:85:f0:b6:5f:f4:a8:
b9:8c:6f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCe0fp8+UL2hbhECUXQjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNmYmIzNTUwYmYyYzc2NzRjYzUyZTljYmJmM2E5MzNm
NWU3NzgwHhcNMjUwOTA1MDQwMjA3WhcNMjUwOTA2MDQwMjA3WjAzMTEwLwYDVQQD
EyhmYzRlMTBhYzNlZDI3MjEyNDgwZjEyN2VmYzQzNzRlMjRiOTE3NzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLqs7jgxp+iNT4NmF6jylJGJ1aS
kKVqcQhvVbw8tH3PF7/Erfc+vJZP4jWc3Y37F53fwMXAsrIili5EtYxMoFj+0Eb2
V68pqJzYdiR0gxNTVm9POWi0LZgyE0ER7VuDbeoxLonRezE5E/URiamia2Ms4sgY
1H5tPI8AEXGcSoL1mgSA5wqKQrODhAvSfC/urbla284yW4gyVAbE7kc9FoViXaYd
g++mf4II98NhF98gSe3DbGoqRNd+WQptfqVJFkp3MhYF6sdNOZFAp4rxCR7BjxLG
CbQFQIOxkYDEvHBM0YD+EW1E/EAoeu/23OgT9vDOpgS5qFNFThlR0HqEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxOEKw+0nISSA8SfvxDdOJLkXcUMB8GA1UdIwQY
MBaAFJfs+7NVC/LHZ0zFLpy786kz9ed4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzkt
OGM1MTE2OThmY2FlLzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzktOGM1MTE2OThmY2Fl
LzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlQmkInx
HbnUNn2HB7ZPX156OfRRAHZuDE7kMOERsCvXgScOdHZrzkfvrfZiMcvrrz64vNhD
zJc0uZHpE2KpVzita9Mez5iMknmIWvAtgtsjBNGZnBrqyA7rGvzQ0ID6UQ7MEHeO
8Ye4jrb7XSFt3Oyx+dmVarCwunF1Y/lb6woMZGSo42EpPMVz/sQ/ZbtAgJJc+8Ce
KnLV4z5vDwXy+CLEoHMwK0l+anRbD9RUq+3kMTdfqt2RDq5U5oik3i+SsR4SWMuc
7oxWQnImv32si4k8EJXxrsfvO5G0qoX/c2pCdUY7YDe2kv2ooN78SWonI0DzJj1E
hfC2X/SouYxv3g==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:21:31 2025 by rpki-client