Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier: XsLdHuN+TG+ssmMQcoaZoAkFdL/W2frstu3zMWVfplM=
Subject key identifier: B2:95:E7:FE:8A:84:96:99:5C:28:8D:5C:6B:F6:57:F8:F8:D3:28:78
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial: 01992255621398E5EA5C11929021EB78016B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number: 1524
Signing time: Sun 07 Sep 2025 04:00:44 +0000
Manifest this update: Sun 07 Sep 2025 04:00:44 +0000
Manifest next update: Mon 08 Sep 2025 04:00:44 +0000
Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: TmhjHzXSpFqy++G+kc3nw0gcwm+xOHnJFofmCNevRIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:62:13:98:e5:ea:5c:11:92:90:21:eb:78:01:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Validity
Not Before: Sep 7 04:00:44 2025 GMT
Not After : Sep 8 04:00:44 2025 GMT
Subject: CN=b295e7fe8a8496995c288d5c6bf657f8f8d32878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:11:a1:49:96:8e:0d:2a:c8:c1:22:9f:ff:
78:fc:de:cd:70:d5:ca:6b:e2:87:96:eb:e7:1c:84:
67:ee:af:54:63:bd:63:ad:7d:63:c5:9b:d6:5a:f7:
28:93:76:fd:ba:9f:fa:fe:53:33:1f:b5:34:ed:5e:
3e:2c:95:cd:7e:8a:65:cc:7c:63:af:27:1d:83:d2:
7f:d9:48:ed:86:cf:66:74:3a:a8:e0:7d:d1:99:2b:
88:80:8c:08:9c:6f:ad:4c:54:b7:41:41:18:1c:9c:
64:7a:24:c9:7d:42:87:2a:3f:3c:80:7b:85:46:38:
3c:4e:ee:ee:35:22:45:78:0f:31:fa:df:69:29:c7:
3c:76:2e:31:5b:a0:78:13:84:47:f6:c4:5d:b1:84:
8d:cb:a3:b8:cd:46:06:fb:e2:0b:2f:9b:a3:d7:2f:
08:e6:cd:9f:5a:90:54:c5:e4:14:40:30:fc:c3:5d:
d5:34:f0:60:6e:3c:ba:a1:e9:0b:57:fb:eb:25:d8:
75:42:39:c5:0f:2d:ac:32:be:98:2f:b4:30:55:78:
07:6c:6d:fe:34:32:0e:bc:5c:eb:ca:46:7b:1f:75:
bb:9c:eb:c4:8d:c7:4b:fd:8a:85:40:54:5b:3d:0e:
c2:f3:2d:78:1b:55:fa:c4:40:b2:e7:28:6f:48:a2:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:E7:FE:8A:84:96:99:5C:28:8D:5C:6B:F6:57:F8:F8:D3:28:78
X509v3 Authority Key Identifier:
keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:eb:3b:a8:4a:00:ca:13:35:fd:11:77:5a:1b:67:a5:9a:95:
54:15:29:26:36:21:f0:fe:eb:0f:bb:56:2f:8f:c5:35:d0:2d:
df:ec:1d:a6:c5:be:c5:88:48:f8:1b:f9:1e:cc:06:59:96:f0:
7f:f6:f9:95:bb:0b:ef:38:50:44:db:2e:75:c6:32:e3:8d:72:
9c:84:09:0a:09:9d:af:3b:eb:16:af:90:a5:88:d0:c3:b1:04:
0f:5a:ef:f7:f2:26:ec:87:64:97:5a:d9:89:3e:1c:2b:44:9d:
02:90:8d:26:19:b7:e4:05:c2:7b:a6:57:ca:d3:d7:bf:71:ee:
93:a3:f6:51:6f:cd:d9:4f:8e:2f:2e:4d:4f:b6:1e:22:ab:e4:
e7:f4:6f:3c:15:47:b5:2f:80:31:82:90:a2:1e:25:34:72:60:
d7:9d:09:cc:d3:f0:a9:a2:51:2e:50:83:12:b4:71:82:08:15:
65:f4:2a:39:2c:c4:5f:66:83:74:1f:43:ab:f6:82:e4:74:68:
9a:c9:73:23:88:de:f2:b5:62:54:56:8f:d4:57:a2:ef:4e:fa:
66:1b:b6:29:c3:85:31:75:0e:94:05:f3:27:10:86:20:e4:ae:
5d:95:35:cb:9b:a2:20:ef:c1:99:47:03:aa:17:04:6e:66:fc:
34:66:2c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVWITmOXqXBGSkCHreAFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNWNmN2QxZGM1ZmJkYmQ2MzRiZDYxYjgwYjdlZmZlZWM0
NjI4NzMwHhcNMjUwOTA3MDQwMDQ0WhcNMjUwOTA4MDQwMDQ0WjAzMTEwLwYDVQQD
EyhiMjk1ZTdmZThhODQ5Njk5NWMyODhkNWM2YmY2NTdmOGY4ZDMyODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz78RoUmWjg0qyMEin/94/N7NcNXK
a+KHluvnHIRn7q9UY71jrX1jxZvWWvcok3b9up/6/lMzH7U07V4+LJXNfoplzHxj
rycdg9J/2Ujths9mdDqo4H3RmSuIgIwInG+tTFS3QUEYHJxkeiTJfUKHKj88gHuF
Rjg8Tu7uNSJFeA8x+t9pKcc8di4xW6B4E4RH9sRdsYSNy6O4zUYG++ILL5uj1y8I
5s2fWpBUxeQUQDD8w13VNPBgbjy6oekLV/vrJdh1QjnFDy2sMr6YL7QwVXgHbG3+
NDIOvFzrykZ7H3W7nOvEjcdL/YqFQFRbPQ7C8y14G1X6xECy5yhvSKIHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKV5/6KhJaZXCiNXGv2V/j40yh4MB8GA1UdIwQY
MBaAFOpc99HcX729Y0vWG4C37/7sRihzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQt
ODEzMjMyOWFjMzViLzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQtODEzMjMyOWFjMzVi
LzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0us7qEoA
yhM1/RF3WhtnpZqVVBUpJjYh8P7rD7tWL4/FNdAt3+wdpsW+xYhI+Bv5HswGWZbw
f/b5lbsL7zhQRNsudcYy441ynIQJCgmdrzvrFq+QpYjQw7EED1rv9/Im7Idkl1rZ
iT4cK0SdApCNJhm35AXCe6ZXytPXv3Huk6P2UW/N2U+OLy5NT7YeIqvk5/RvPBVH
tS+AMYKQoh4lNHJg150JzNPwqaJRLlCDErRxgggVZfQqOSzEX2aDdB9Dq/aC5HRo
mslzI4je8rViVFaP1Fei7076Zhu2KcOFMXUOlAXzJxCGIOSuXZU1y5uiIO/BmUcD
qhcEbmb8NGYsEQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:32 2025 by rpki-client