Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: 2CxW8ltfVI3Os1i9tWMfQ60J9SDj8dVQ4/umPxPkrIE=
Subject key identifier: 94:1B:27:CB:D3:7C:98:6C:4B:C2:6E:CB:A0:1B:5C:24:47:94:D5:8C
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019A70DC1E3F4BB2E91F3140D4922995FBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 03:01:05 +0000
Manifest this update: Tue 11 Nov 2025 03:01:05 +0000
Manifest next update: Wed 12 Nov 2025 03:01:05 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: +gTCE5A+I+vHvp7FSq1rD9Wl6Ib3FEsqQT2HOxiGCns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:1e:3f:4b:b2:e9:1f:31:40:d4:92:29:95:fb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Nov 11 03:01:05 2025 GMT
Not After : Nov 12 03:01:05 2025 GMT
Subject: CN=941b27cbd37c986c4bc26ecba01b5c244794d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:3b:6c:0d:34:0c:41:6b:c9:c3:5f:b2:74:
f4:dc:13:62:e6:41:79:d4:d9:fb:50:75:a1:6e:a4:
d7:74:19:1d:16:5e:25:a4:16:3c:19:86:3b:1c:9d:
8e:27:b5:f3:c2:53:c6:06:ac:43:f6:7b:a9:11:85:
b4:48:d4:59:d9:9b:7c:bf:91:91:6a:9c:5b:21:b3:
29:ce:54:34:3d:9c:89:24:66:c7:84:70:dc:d7:87:
90:c0:fa:fe:b1:b7:4b:64:39:eb:5b:10:60:d6:e8:
a4:de:41:4b:17:1e:c0:ee:e1:6d:7e:a0:0f:ec:c7:
93:51:52:dc:7d:70:19:fe:8b:21:f7:94:2c:4d:e2:
2d:8d:d3:51:c1:76:f7:bd:63:4a:3e:ae:95:1c:f8:
3a:75:60:86:0c:ba:94:f4:be:86:f6:09:8f:24:67:
2a:77:fa:49:82:e3:1a:c0:58:4d:04:da:ad:b2:d3:
50:5e:cc:6c:6b:0d:9e:27:c1:f5:0c:7f:d5:01:1e:
66:9f:9e:ad:69:32:bb:19:78:d5:27:97:fc:ea:0b:
5e:4c:4d:b8:45:1c:14:6d:25:0b:64:03:eb:47:15:
5c:40:b3:a5:0c:34:8d:3e:ec:fb:0e:9e:35:fa:59:
fe:cc:d6:39:1e:f8:bb:fb:ba:ed:12:9b:25:bf:aa:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:27:CB:D3:7C:98:6C:4B:C2:6E:CB:A0:1B:5C:24:47:94:D5:8C
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:2f:a6:09:3a:9a:1e:2e:76:90:82:d6:0e:35:1a:56:fa:
72:64:06:70:ed:98:1e:f6:a8:56:ca:d9:1e:af:9f:50:5f:4f:
83:47:e1:93:cd:42:03:c4:e9:ec:09:b8:8c:73:c2:fe:33:6d:
8c:f1:ba:20:91:7b:e9:f4:07:29:95:12:9b:c2:90:b0:5d:4e:
93:b8:07:ac:56:dc:f3:d2:e8:8d:53:9c:db:3c:bd:62:74:6f:
42:e0:48:64:84:ff:c4:a0:f2:8f:32:ad:cc:97:e7:42:42:e4:
04:7d:12:39:32:2f:90:eb:e9:9b:e9:7d:1c:31:c2:18:f9:d5:
51:2a:56:36:86:99:b3:50:33:2f:b5:4d:e7:9b:a8:40:0e:63:
92:7b:e6:60:84:16:e5:dc:b0:f7:c3:6c:ee:a5:c3:f1:e4:f2:
70:89:0a:61:74:a6:22:c9:f4:d1:f4:89:26:49:20:62:8b:33:
67:90:6c:12:a5:99:80:d3:a9:63:e3:71:0a:59:15:7e:b8:9e:
9f:3d:f2:4c:b3:75:d6:55:39:72:14:0a:82:29:c9:e6:c8:ea:
6b:fc:51:54:50:89:17:d8:28:a5:56:e8:46:ce:96:f9:80:ba:
fa:98:4a:70:ae:8a:84:6b:f2:a3:df:c5:ae:2a:18:c9:c9:21:
70:a2:24:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3B4/S7LpHzFA1JIplfuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1
MDEyN2EwHhcNMjUxMTExMDMwMTA1WhcNMjUxMTEyMDMwMTA1WjAzMTEwLwYDVQQD
Eyg5NDFiMjdjYmQzN2M5ODZjNGJjMjZlY2JhMDFiNWMyNDQ3OTRkNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW87bA00DEFrycNfsnT03BNi5kF5
1Nn7UHWhbqTXdBkdFl4lpBY8GYY7HJ2OJ7XzwlPGBqxD9nupEYW0SNRZ2Zt8v5GR
apxbIbMpzlQ0PZyJJGbHhHDc14eQwPr+sbdLZDnrWxBg1uik3kFLFx7A7uFtfqAP
7MeTUVLcfXAZ/osh95QsTeItjdNRwXb3vWNKPq6VHPg6dWCGDLqU9L6G9gmPJGcq
d/pJguMawFhNBNqtstNQXsxsaw2eJ8H1DH/VAR5mn56taTK7GXjVJ5f86gteTE24
RRwUbSULZAPrRxVcQLOlDDSNPuz7Dp41+ln+zNY5Hvi7+7rtEpslv6o+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQbJ8vTfJhsS8Juy6AbXCRHlNWMMB8GA1UdIwQY
MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt
YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi
LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbovpgk6
mh4udpCC1g41Glb6cmQGcO2YHvaoVsrZHq+fUF9Pg0fhk81CA8Tp7Am4jHPC/jNt
jPG6IJF76fQHKZUSm8KQsF1Ok7gHrFbc89LojVOc2zy9YnRvQuBIZIT/xKDyjzKt
zJfnQkLkBH0SOTIvkOvpm+l9HDHCGPnVUSpWNoaZs1AzL7VN55uoQA5jknvmYIQW
5dyw98Ns7qXD8eTycIkKYXSmIsn00fSJJkkgYoszZ5BsEqWZgNOpY+NxClkVfrie
nz3yTLN11lU5chQKginJ5sjqa/xRVFCJF9gopVboRs6W+YC6+phKcK6KhGvyo9/F
rioYyckhcKIkNw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:36 2025 by rpki-client