Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: RQdZDIbXEafb8CbjxbLs80jyF9d7O7dvTYnLu6tPGZs=
Subject key identifier: 1E:D3:05:92:7A:29:61:47:22:F7:53:FE:0F:A4:E3:58:50:AA:19:79
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019923A00D7A9B8ABFD5887F7647D645682E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 1374
Signing time: Sun 07 Sep 2025 10:01:55 +0000
Manifest this update: Sun 07 Sep 2025 10:01:55 +0000
Manifest next update: Mon 08 Sep 2025 10:01:55 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: 20E3ee0l1ZjUyoo2dDx1kyl1IQw+uNfQ/omp1/n4xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:0d:7a:9b:8a:bf:d5:88:7f:76:47:d6:45:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Sep 7 10:01:55 2025 GMT
Not After : Sep 8 10:01:55 2025 GMT
Subject: CN=1ed305927a29614722f753fe0fa4e35850aa1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:b8:26:55:7e:83:63:67:36:7e:21:9f:40:
a0:df:8d:13:57:d5:f5:ae:92:e9:28:2e:74:a6:07:
6f:c6:b0:88:2e:49:03:01:44:d8:ed:a8:cd:1a:6e:
56:61:a3:95:c2:ef:5f:33:54:f5:07:ed:c2:11:ea:
11:63:ad:ec:b0:79:af:d5:17:d5:a8:b2:ba:1b:6f:
80:fa:30:6c:cf:e1:1d:7b:f6:d9:c6:1f:58:b5:80:
e1:71:e1:3c:e3:56:f1:50:41:d9:e0:22:36:3a:dc:
fd:cd:3f:ec:88:12:00:00:21:ff:b6:1a:9f:b1:04:
29:0a:15:ee:a3:57:1b:4a:1f:1b:1e:65:b2:ee:6d:
00:fe:fe:bf:dd:ad:1d:8b:e1:38:26:ad:28:ab:70:
0d:7a:aa:d0:ff:1d:d4:f6:f0:8e:87:fb:f7:a8:09:
f6:6e:5d:20:01:ef:94:eb:1f:cc:5c:77:6f:36:f7:
06:58:bf:62:7b:58:8f:77:cb:86:e0:70:09:11:f6:
bd:4d:ad:69:52:de:3f:88:a3:05:7e:20:7a:1c:2c:
0e:19:c3:16:d5:eb:68:a7:48:a8:b5:3e:3e:88:7f:
53:75:0c:e2:20:3b:6f:f3:1a:4b:24:21:6b:00:31:
5b:95:8e:ed:20:7e:4a:c1:10:d4:05:36:60:89:a6:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:05:92:7A:29:61:47:22:F7:53:FE:0F:A4:E3:58:50:AA:19:79
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:da:fa:8d:fa:9b:2e:26:55:83:7e:c8:c9:93:00:07:89:61:
74:d7:fb:50:b5:8f:36:f4:e8:3a:7c:ab:e8:e3:fb:fe:51:a8:
70:b5:c4:8a:82:cd:f4:b2:11:e2:6c:65:de:6a:60:fb:4c:c3:
65:da:99:75:05:82:e0:1d:2e:b2:82:d1:a1:88:d1:b3:be:91:
43:40:99:e2:00:de:cc:27:14:16:47:2b:ad:58:ff:ee:c6:19:
83:47:98:18:e8:b8:6a:ff:a4:e0:f2:a2:bd:cd:b9:11:0e:e2:
b0:b6:bc:5d:00:a9:80:ed:3d:92:59:fb:b8:fc:99:73:57:40:
36:62:1e:30:c6:26:9f:0d:6b:2d:67:43:2d:55:f7:87:1f:d4:
ee:0c:2f:00:1e:bb:24:d3:39:c6:d5:a1:ce:40:68:ac:d5:a5:
59:b6:20:6f:41:64:97:e2:ab:df:0f:f9:b3:ef:6f:da:8b:43:
41:5a:5e:4e:92:29:2e:d8:07:85:17:58:d8:60:33:1e:ad:45:
d7:41:69:cb:52:9d:b2:56:87:6b:92:c7:0d:01:72:87:fc:f2:
4c:63:38:37:a5:68:60:44:4e:ad:51:4f:a1:65:f7:d5:3d:73:
92:7f:8e:10:bd:d2:c2:b3:bc:d5:c2:b1:e6:e0:a9:1d:49:7a:
a0:d6:15:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoA16m4q/1Yh/dkfWRWguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDlhZDc2NTlkYTEzNGVkNDgwNzRmNGRiOTM0MWNlODc1
MTdkZjQwHhcNMjUwOTA3MTAwMTU1WhcNMjUwOTA4MTAwMTU1WjAzMTEwLwYDVQQD
EygxZWQzMDU5MjdhMjk2MTQ3MjJmNzUzZmUwZmE0ZTM1ODUwYWExOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+W4JlV+g2NnNn4hn0Cg340TV9X1
rpLpKC50pgdvxrCILkkDAUTY7ajNGm5WYaOVwu9fM1T1B+3CEeoRY63ssHmv1RfV
qLK6G2+A+jBsz+Ede/bZxh9YtYDhceE841bxUEHZ4CI2Otz9zT/siBIAACH/thqf
sQQpChXuo1cbSh8bHmWy7m0A/v6/3a0di+E4Jq0oq3ANeqrQ/x3U9vCOh/v3qAn2
bl0gAe+U6x/MXHdvNvcGWL9ie1iPd8uG4HAJEfa9Ta1pUt4/iKMFfiB6HCwOGcMW
1etop0iotT4+iH9TdQziIDtv8xpLJCFrADFblY7tIH5KwRDUBTZgiaYCpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7TBZJ6KWFHIvdT/g+k41hQqhl5MB8GA1UdIwQY
MBaAFJdJrXZZ2hNO1IB09NuTQc6HUX30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUt
MzJkNzljYzQ5ZjIyLzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUtMzJkNzljYzQ5ZjIy
LzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstr6jfqb
LiZVg37IyZMAB4lhdNf7ULWPNvToOnyr6OP7/lGocLXEioLN9LIR4mxl3mpg+0zD
ZdqZdQWC4B0usoLRoYjRs76RQ0CZ4gDezCcUFkcrrVj/7sYZg0eYGOi4av+k4PKi
vc25EQ7isLa8XQCpgO09kln7uPyZc1dANmIeMMYmnw1rLWdDLVX3hx/U7gwvAB67
JNM5xtWhzkBorNWlWbYgb0Fkl+Kr3w/5s+9v2otDQVpeTpIpLtgHhRdY2GAzHq1F
10Fpy1KdslaHa5LHDQFyh/zyTGM4N6VoYEROrVFPoWX31T1zkn+OEL3SwrO81cKx
5uCpHUl6oNYV+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:05 2025 by rpki-client