Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: 7FA/OboafKtnVT8luKU8bskV4Zza6qhk+neDpin5n5I=
Subject key identifier: 5A:83:8A:8B:C1:6E:2D:BC:CC:B4:67:2F:F5:D9:B0:58:0F:E5:76:80
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019747B1117B90D9EA20EA3B2CD20728B39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 00:01:16 +0000
Manifest this update: Sat 07 Jun 2025 00:01:16 +0000
Manifest next update: Sun 08 Jun 2025 00:01:16 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: X0F3bhvWnXyP3TA0v9oz8jf76uEzXiEpWvqnGKP2SPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:11:7b:90:d9:ea:20:ea:3b:2c:d2:07:28:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Jun 7 00:01:16 2025 GMT
Not After : Jun 8 00:01:16 2025 GMT
Subject: CN=5a838a8bc16e2dbcccb4672ff5d9b0580fe57680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:ab:3f:fb:de:bf:d0:a3:30:ec:2f:49:c1:
00:34:9f:ea:5c:f5:2e:b2:62:7e:6b:c6:50:72:06:
46:6f:5d:cb:08:3f:62:58:0a:64:1b:a3:93:17:0f:
98:a8:6a:f1:d2:da:b1:8c:d6:35:b3:47:cd:ab:7f:
ba:ad:e0:aa:bc:f6:8b:a4:b7:1d:79:ed:00:c0:bf:
f5:d7:c5:9c:56:b0:17:72:77:6f:5e:62:4c:91:45:
f5:d9:da:ec:4f:a7:f2:06:6d:78:d6:c7:e0:69:d7:
d8:16:06:52:81:c1:d2:4c:42:5e:3c:eb:4a:b3:0d:
ea:3a:ff:f4:46:42:34:cb:5c:70:9b:c4:4c:98:9a:
6c:f6:0f:1a:e0:1d:cf:db:92:58:30:03:94:1a:b1:
8e:28:36:2d:86:fd:85:52:a9:ca:9d:c5:e4:bd:d0:
79:53:d9:1c:47:68:07:34:62:2f:42:f5:2c:9d:be:
ac:a7:d4:dd:d8:87:6b:a6:37:77:39:8c:aa:cb:28:
cc:7b:19:97:72:a8:0f:52:c0:42:37:ea:1d:c8:53:
ed:5a:82:a3:65:9e:35:3f:4e:9b:87:5a:7c:10:38:
43:ec:4f:78:62:26:7c:0d:e7:7f:2a:b8:62:2e:e2:
c4:05:5c:9c:62:6a:e9:e1:ab:69:23:33:b1:64:8f:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:8A:8B:C1:6E:2D:BC:CC:B4:67:2F:F5:D9:B0:58:0F:E5:76:80
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:62:fd:f2:3c:d2:0d:63:32:bc:41:fd:34:29:61:30:55:
64:02:88:bb:a4:3e:76:f6:69:8a:84:a0:10:da:25:63:d7:ff:
b6:e1:db:c7:46:70:c1:ae:98:5f:ec:5d:fe:ed:38:fa:2a:e0:
19:b2:1d:66:8c:d9:15:78:bc:27:e0:3f:b8:23:49:70:36:d4:
ca:7f:aa:12:1a:f9:84:91:f5:d4:12:8b:cd:66:51:ec:0e:11:
73:00:d4:92:bc:ed:45:e4:d6:17:5e:3e:1b:c9:db:b3:c2:4f:
05:b0:2a:b6:06:71:a3:81:30:47:22:3e:3c:d3:85:2d:90:e3:
9c:e9:99:cd:8d:2e:5e:39:d9:47:58:6e:f4:f8:6d:92:a2:9e:
94:2d:d4:fd:6c:5d:44:87:ad:d0:58:7c:28:7a:ba:29:99:4f:
5b:96:77:73:3c:26:d4:f9:ef:ce:3c:8d:03:45:4f:8c:56:61:
ae:53:2a:f8:76:d9:12:ea:43:e4:e9:0c:52:20:ee:13:07:18:
3c:bd:84:8c:f6:69:6f:eb:1c:99:1d:3e:ae:4a:94:ff:33:39:
7a:6d:02:d7:10:79:8c:7f:9e:58:7e:42:b2:37:78:b6:6a:d1:
77:b9:fd:4f:d7:7b:25:47:ec:a3:be:9a:71:5e:72:e4:b7:7a:
f3:32:1d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsRF7kNnqIOo7LNIHKLOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1
MDEyN2EwHhcNMjUwNjA3MDAwMTE2WhcNMjUwNjA4MDAwMTE2WjAzMTEwLwYDVQQD
Eyg1YTgzOGE4YmMxNmUyZGJjY2NiNDY3MmZmNWQ5YjA1ODBmZTU3NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnverP/vev9CjMOwvScEANJ/qXPUu
smJ+a8ZQcgZGb13LCD9iWApkG6OTFw+YqGrx0tqxjNY1s0fNq3+6reCqvPaLpLcd
ee0AwL/118WcVrAXcndvXmJMkUX12drsT6fyBm141sfgadfYFgZSgcHSTEJePOtK
sw3qOv/0RkI0y1xwm8RMmJps9g8a4B3P25JYMAOUGrGOKDYthv2FUqnKncXkvdB5
U9kcR2gHNGIvQvUsnb6sp9Td2Idrpjd3OYyqyyjMexmXcqgPUsBCN+odyFPtWoKj
ZZ41P06bh1p8EDhD7E94YiZ8Ded/KrhiLuLEBVycYmrp4atpIzOxZI+y5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqDiovBbi28zLRnL/XZsFgP5XaAMB8GA1UdIwQY
MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt
YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi
LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJ5i/fI8
0g1jMrxB/TQpYTBVZAKIu6Q+dvZpioSgENolY9f/tuHbx0Zwwa6YX+xd/u04+irg
GbIdZozZFXi8J+A/uCNJcDbUyn+qEhr5hJH11BKLzWZR7A4RcwDUkrztReTWF14+
G8nbs8JPBbAqtgZxo4EwRyI+PNOFLZDjnOmZzY0uXjnZR1hu9PhtkqKelC3U/Wxd
RIet0Fh8KHq6KZlPW5Z3czwm1PnvzjyNA0VPjFZhrlMq+HbZEupD5OkMUiDuEwcY
PL2EjPZpb+scmR0+rkqU/zM5em0C1xB5jH+eWH5Csjd4tmrRd7n9T9d7JUfso76a
cV5y5Ld68zIdtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:24:13 2025 by rpki-client