Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File: lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier: K+YQqal9EwQtjAKOeSb1ntBR9CQo2U7QBHqgIRTpbrQ=
Subject key identifier: CB:B5:B7:77:BB:AE:D6:3E:82:2A:5B:2C:63:1A:B2:C6:F3:13:F6:22
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer: /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial: 019752A2C58677375C503A3D0AE9136290E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number: 0CF7
Signing time: Mon 09 Jun 2025 03:01:28 +0000
Manifest this update: Mon 09 Jun 2025 03:01:28 +0000
Manifest next update: Tue 10 Jun 2025 03:01:28 +0000
Files and hashes: 1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: asv3sKiQ2UjYByYRq0vz4ZLPQhGpWiDrBb5Ufs0593M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:c5:86:77:37:5c:50:3a:3d:0a:e9:13:62:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Validity
Not Before: Jun 9 03:01:28 2025 GMT
Not After : Jun 10 03:01:28 2025 GMT
Subject: CN=cbb5b777bbaed63e822a5b2c631ab2c6f313f622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:b6:6f:15:96:7b:89:8b:fe:7e:73:8f:bb:
d0:a7:b4:da:e0:9c:cd:a0:83:01:b9:ac:48:9c:8f:
bb:0a:b7:7f:34:dc:82:d4:ad:87:d9:d3:f9:ab:81:
0a:49:a2:e3:b0:ed:e5:0e:f6:0e:42:f3:df:75:98:
f9:67:84:65:0b:9f:76:d9:1c:6b:e6:92:db:48:e6:
a4:29:33:f6:ab:b8:c1:f8:f3:2b:72:38:a0:7d:25:
a0:13:31:71:c0:d8:e1:79:1f:d8:87:4c:30:ea:01:
e3:44:41:f3:81:90:5a:69:ac:e1:b8:a5:bd:42:d8:
23:5a:16:a4:3b:54:89:38:7e:98:a1:b0:e0:a7:ff:
a6:e1:76:15:75:a5:85:07:01:d0:af:ab:21:24:06:
df:ef:22:6a:d8:cd:21:9f:25:d2:87:58:c8:b6:48:
a0:ec:f8:3f:c7:09:0f:04:c9:7d:82:06:4f:c5:82:
8d:1f:aa:83:6d:3e:69:e5:e7:b1:48:3b:c3:29:27:
4d:ad:2d:0e:6d:86:84:57:81:45:02:ec:f5:9a:b5:
93:a8:4b:0f:7b:9a:91:97:da:10:30:50:59:1c:da:
7a:18:fa:4b:f3:7a:19:51:63:66:70:a0:1e:60:a7:
fe:89:6d:c4:a3:53:41:8e:fe:a6:2d:c9:4c:9c:82:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:B7:77:BB:AE:D6:3E:82:2A:5B:2C:63:1A:B2:C6:F3:13:F6:22
X509v3 Authority Key Identifier:
keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:1a:0e:24:38:3a:6e:d8:3a:fe:11:32:97:71:c6:5b:dc:
a7:ea:d7:52:28:3b:d1:2e:46:9c:77:bf:71:b2:20:91:fd:79:
32:11:cc:55:3f:f2:f8:97:07:24:e7:38:40:90:b4:21:0c:c5:
dc:78:16:b6:48:3a:9b:5f:cb:f6:9f:ca:5c:a4:92:96:33:2c:
eb:49:88:c5:c7:bd:f2:f5:09:93:fd:ad:c6:f8:71:01:13:49:
b8:f7:ce:6f:09:60:ed:3c:9c:8a:9e:e8:a1:95:42:90:6d:25:
af:4d:39:c4:0e:e6:c1:b9:3b:dd:94:72:54:25:48:6a:28:09:
57:6e:72:a5:b9:cc:08:f6:7c:7a:7b:e7:34:c3:7f:af:59:6b:
ed:e6:ac:71:1d:94:af:c7:d4:44:33:04:c3:cc:e7:9a:34:8d:
ce:ba:c0:d3:85:1c:3e:86:df:de:a4:7e:de:9b:8e:a2:ae:fd:
1d:31:f9:68:07:20:38:35:d8:51:98:9d:fd:26:87:52:ca:81:
d6:99:e2:87:c8:8f:a8:22:98:cb:ca:f0:d5:d2:b9:9a:12:d5:
30:d3:a1:3e:ed:f2:a9:b1:6f:da:6a:5f:e9:93:94:35:de:48:
e1:d3:e6:8c:94:74:7a:55:5e:10:c0:9e:b1:47:c0:9d:f9:c7:
ac:b2:68:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSosWGdzdcUDo9CukTYpDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0Y2U3Nzg4ZDJlM2ZlZjdmYzAwZDVjZTEzM2Q3ZDZkYzAw
Zjg2MjkwHhcNMjUwNjA5MDMwMTI4WhcNMjUwNjEwMDMwMTI4WjAzMTEwLwYDVQQD
EyhjYmI1Yjc3N2JiYWVkNjNlODIyYTViMmM2MzFhYjJjNmYzMTNmNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPa2bxWWe4mL/n5zj7vQp7Ta4JzN
oIMBuaxInI+7Crd/NNyC1K2H2dP5q4EKSaLjsO3lDvYOQvPfdZj5Z4RlC5922Rxr
5pLbSOakKTP2q7jB+PMrcjigfSWgEzFxwNjheR/Yh0ww6gHjREHzgZBaaazhuKW9
QtgjWhakO1SJOH6YobDgp/+m4XYVdaWFBwHQr6shJAbf7yJq2M0hnyXSh1jItkig
7Pg/xwkPBMl9ggZPxYKNH6qDbT5p5eexSDvDKSdNrS0ObYaEV4FFAuz1mrWTqEsP
e5qRl9oQMFBZHNp6GPpL83oZUWNmcKAeYKf+iW3Eo1NBjv6mLclMnILo8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu1t3e7rtY+gipbLGMassbzE/YiMB8GA1UdIwQY
MBaAFJTOd4jS4/73/ADVzhM9fW3AD4YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE01M2lOTGpfdmY4QU5YT0V6MTliY0FQaGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZWY2MjktMTJlMi00ZDk5LTliNGEt
MzM2NjIzYWZlODk4LzEvbE01M2lOTGpfdmY4QU5YT0V6MTliY0FQaGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZWY2MjktMTJlMi00ZDk5LTliNGEtMzM2NjIzYWZlODk4
LzEvbE01M2lOTGpfdmY4QU5YT0V6MTliY0FQaGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcj4aDiQ4
Om7YOv4RMpdxxlvcp+rXUig70S5GnHe/cbIgkf15MhHMVT/y+JcHJOc4QJC0IQzF
3HgWtkg6m1/L9p/KXKSSljMs60mIxce98vUJk/2txvhxARNJuPfObwlg7Tycip7o
oZVCkG0lr005xA7mwbk73ZRyVCVIaigJV25ypbnMCPZ8envnNMN/r1lr7eascR2U
r8fURDMEw8znmjSNzrrA04UcPobf3qR+3puOoq79HTH5aAcgODXYUZid/SaHUsqB
1pnih8iPqCKYy8rw1dK5mhLVMNOhPu3yqbFv2mpf6ZOUNd5I4dPmjJR0elVeEMCe
sUfAnfnHrLJo3g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:54:33 2025 by rpki-client