Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: KSCNgocrF+CGhd9iOFTuN/9Ng9qgS0Yra5C5/qDW3xw=
Subject key identifier: C7:3E:05:0A:EB:C6:45:8B:96:BD:CC:89:98:69:C2:3D:19:54:55:1B
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 0197665F94C2A7C59BAA83E6A73D5BD25C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 059D
Signing time: Thu 12 Jun 2025 23:00:29 +0000
Manifest this update: Thu 12 Jun 2025 23:00:29 +0000
Manifest next update: Fri 13 Jun 2025 23:00:29 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: p2oFpTE049MTESSR+vwmMA2ysmInHDVTBGc8Wmdz8/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:94:c2:a7:c5:9b:aa:83:e6:a7:3d:5b:d2:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jun 12 23:00:29 2025 GMT
Not After : Jun 13 23:00:29 2025 GMT
Subject: CN=c73e050aebc6458b96bdcc899869c23d1954551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:b9:0a:d3:96:a1:5e:34:d6:64:6d:dc:72:
8c:5e:1a:01:c3:61:f4:17:4e:e1:1a:36:fa:3d:09:
70:7a:36:02:1d:67:a3:f2:f5:84:61:29:6a:ce:cf:
25:3d:a7:e2:c2:f7:e0:3f:a2:cb:89:93:0d:3c:ec:
b8:75:18:1e:c9:ce:96:26:63:b3:07:a1:32:45:3e:
05:1b:56:c0:87:43:21:ad:10:d9:40:80:98:b2:2c:
0f:a4:09:fc:11:96:86:12:5e:5d:21:f5:03:b7:01:
12:90:fe:1b:06:f7:ea:72:f9:24:2e:57:e0:06:39:
0a:ab:84:fa:eb:30:f3:b3:3e:48:29:4e:21:36:90:
ae:68:89:b1:5d:8a:8f:74:d8:2e:13:c3:df:91:82:
aa:e8:12:84:85:a8:51:22:e6:c2:7d:20:dc:72:a4:
43:40:97:ab:4a:b2:8b:fc:f0:2d:26:04:8c:b1:07:
92:af:20:ea:1d:8c:2e:7b:ac:4f:de:b4:a7:21:89:
13:f2:86:19:f8:92:ca:68:23:0e:a7:91:61:36:9f:
19:0e:a1:9a:17:69:e7:5e:34:f7:78:0d:1c:a2:fa:
be:83:b2:0f:68:84:ed:fe:21:16:86:b8:88:6e:79:
3b:20:e2:70:03:24:36:93:ab:af:70:a0:50:62:a2:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:05:0A:EB:C6:45:8B:96:BD:CC:89:98:69:C2:3D:19:54:55:1B
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:70:c9:62:b0:d7:d8:ad:49:43:9d:9f:47:03:b3:18:b9:
42:bc:c0:14:1a:d3:0b:fa:e4:51:2f:24:37:b2:d8:22:87:0c:
cc:a1:12:37:82:5f:53:38:55:74:1c:9d:31:a5:f8:d7:69:e6:
fe:96:f1:84:78:0e:d4:bc:40:e7:22:d5:a4:fc:2f:dc:65:29:
ed:27:72:80:e6:4f:6b:3a:fc:dc:9a:60:1d:b2:10:de:e4:e7:
c7:59:16:b6:cf:5a:eb:18:9f:10:fd:f7:c3:40:6d:b4:b2:32:
ac:f9:8f:93:d7:d1:3c:80:27:ff:69:95:eb:ad:19:fd:e8:96:
23:02:37:0e:fa:8d:ae:36:c8:92:ad:f1:76:bc:7d:87:45:c7:
47:ca:76:3e:1a:2b:6d:ac:c0:40:59:82:34:78:a4:80:d8:dd:
61:23:24:5f:41:51:04:2b:23:3e:c1:12:2f:a5:73:57:9a:df:
1c:e7:9e:d8:85:e1:1a:21:ad:10:f3:10:62:dc:fb:01:2d:25:
e7:8d:38:6f:f9:6b:4d:cd:26:ce:4c:f6:24:18:18:a2:02:ee:
57:b2:bd:b4:ae:34:76:fa:32:ce:f1:56:78:00:16:b7:0d:84:
4d:51:58:59:10:32:ef:b1:28:87:ca:f4:39:80:92:97:59:18:
62:d6:ec:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmX5TCp8WbqoPmpz1b0lyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi
YWIxYjYwHhcNMjUwNjEyMjMwMDI5WhcNMjUwNjEzMjMwMDI5WjAzMTEwLwYDVQQD
EyhjNzNlMDUwYWViYzY0NThiOTZiZGNjODk5ODY5YzIzZDE5NTQ1NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4G5CtOWoV401mRt3HKMXhoBw2H0
F07hGjb6PQlwejYCHWej8vWEYSlqzs8lPafiwvfgP6LLiZMNPOy4dRgeyc6WJmOz
B6EyRT4FG1bAh0MhrRDZQICYsiwPpAn8EZaGEl5dIfUDtwESkP4bBvfqcvkkLlfg
BjkKq4T66zDzsz5IKU4hNpCuaImxXYqPdNguE8PfkYKq6BKEhahRIubCfSDccqRD
QJerSrKL/PAtJgSMsQeSryDqHYwue6xP3rSnIYkT8oYZ+JLKaCMOp5FhNp8ZDqGa
F2nnXjT3eA0covq+g7IPaITt/iEWhriIbnk7IOJwAyQ2k6uvcKBQYqKZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc+BQrrxkWLlr3MiZhpwj0ZVFUbMB8GA1UdIwQY
MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt
YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji
LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7VwyWKw
19itSUOdn0cDsxi5QrzAFBrTC/rkUS8kN7LYIocMzKESN4JfUzhVdBydMaX412nm
/pbxhHgO1LxA5yLVpPwv3GUp7SdygOZPazr83JpgHbIQ3uTnx1kWts9a6xifEP33
w0BttLIyrPmPk9fRPIAn/2mV660Z/eiWIwI3DvqNrjbIkq3xdrx9h0XHR8p2Phor
bazAQFmCNHikgNjdYSMkX0FRBCsjPsESL6VzV5rfHOee2IXhGiGtEPMQYtz7AS0l
5404b/lrTc0mzkz2JBgYogLuV7K9tK40dvoyzvFWeAAWtw2ETVFYWRAy77Eoh8r0
OYCSl1kYYtbskQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:38:57 2025 by rpki-client