
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier: a4QF8fUGKsQw1HkN+ghegzRJ7fOeqJW/5Ezxfag2OIs=
Subject key identifier: A1:17:7D:13:5D:CB:6F:8D:31:24:FC:B7:2C:6C:94:F2:53:B3:54:EF
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 01974A0CD733B94F176B5734E692E56E16BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: 9llKTYz55e1x1N79z5XQiF3dT4g.roa (hash: PS5GRedQdCJlh0VR0C24dd32hYgK4alJsCFo2wKdfTY=)
2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: tFFSEbdRDvIkssUrYCi8oWiEuD5nsM+/APB2HkeQoJ8=)
3: pfTZ88SRK7BJ1bWmmJVB35dV26A.roa (hash: TVV4m/AajwnJi7L7QdoUgaL2HibNFWxDJ80dMIKyPdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d7:33:b9:4f:17:6b:57:34:e6:92:e5:6e:16:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=a1177d135dcb6f8d3124fcb72c6c94f253b354ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:d2:da:16:60:59:32:93:5d:e0:40:55:a1:
d1:61:de:20:e9:2a:66:a4:64:fb:95:a2:3f:ee:e9:
08:7c:9a:5e:30:e3:a0:da:5e:e8:5c:25:13:e5:25:
e9:e4:ff:df:25:0d:24:55:3b:1e:85:97:b8:ed:a8:
d9:cd:be:d6:72:97:43:18:76:aa:64:26:38:11:47:
f9:02:d2:d9:94:8e:c1:54:5a:60:75:5b:50:5a:a5:
6b:0e:f7:0d:3d:87:8e:26:16:7d:b7:76:30:06:88:
14:8d:82:7c:15:af:bc:91:1b:06:55:ea:80:ed:91:
f0:e6:17:a5:d0:92:8c:e6:56:7c:80:1c:df:4b:06:
71:82:16:4e:d3:eb:88:25:4c:40:65:be:eb:52:f8:
1d:0b:62:93:bf:5f:0f:e6:b5:b6:64:c7:b3:7c:48:
38:fe:d4:6e:bc:82:f9:75:84:38:71:65:d6:23:6c:
6c:35:b4:ff:4d:f5:19:6f:3a:19:32:bf:61:43:b7:
84:f9:eb:07:c4:0e:2d:e2:d9:2b:db:98:e2:10:76:
7e:f0:ec:34:3e:63:48:8b:29:aa:4b:d5:1f:fa:a7:
81:5a:47:61:1e:2d:b3:86:b1:02:49:20:35:9c:df:
83:6f:1e:63:18:76:c8:e1:de:d8:0e:53:45:bb:74:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:7D:13:5D:CB:6F:8D:31:24:FC:B7:2C:6C:94:F2:53:B3:54:EF
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:ce:d3:e7:c4:89:43:06:e7:5a:6f:0e:b2:e7:50:50:fb:
d6:5d:22:1f:dc:fd:56:03:00:b9:7d:a4:c2:7d:4f:9a:96:9f:
44:81:3a:c2:5a:9c:c1:61:2e:20:e2:7b:88:4e:9c:e3:9e:90:
73:86:82:fa:f8:f5:4d:0a:2d:12:55:ca:40:26:26:42:33:19:
d7:4e:a6:79:60:2a:b3:40:3e:8c:30:67:5f:a0:5e:6f:a4:20:
e6:d2:dd:97:ca:33:d7:3f:6b:8c:11:51:84:cc:52:09:fa:dd:
4c:3b:77:3c:d0:a3:78:32:c0:81:2f:e1:bc:4c:92:e7:cb:de:
b3:4a:35:ba:37:4f:1c:59:99:aa:6e:96:30:a5:aa:d6:b7:cf:
bc:37:11:22:63:83:40:17:39:a7:64:ff:d9:32:2a:ca:98:08:
c0:bb:9c:81:81:04:26:db:48:bf:e4:18:be:ec:9a:cd:02:db:
79:71:eb:cd:05:73:d6:66:bd:2f:8b:46:1a:ff:ad:f0:65:03:
f1:11:3e:38:d1:68:c6:3f:24:11:bf:47:6e:f5:cb:6e:15:2b:
20:bc:52:7f:4b:bc:61:44:92:62:c5:2c:87:f2:e0:a3:4e:b6:
78:e8:37:53:1c:07:ea:3e:56:d7:70:07:97:e4:80:a2:8e:49:
4e:a0:29:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDNczuU8Xa1c05pLlbha+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjJmNjgyMDUzZDQzYzlhZDFjNjUzOWNhZWU5ZjQ2MjFi
MGRhMTYwHhcNMjUwNjA3MTEwMDQ0WhcNMjUwNjA4MTEwMDQ0WjAzMTEwLwYDVQQD
EyhhMTE3N2QxMzVkY2I2ZjhkMzEyNGZjYjcyYzZjOTRmMjUzYjM1NGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuXS2hZgWTKTXeBAVaHRYd4g6Spm
pGT7laI/7ukIfJpeMOOg2l7oXCUT5SXp5P/fJQ0kVTsehZe47ajZzb7WcpdDGHaq
ZCY4EUf5AtLZlI7BVFpgdVtQWqVrDvcNPYeOJhZ9t3YwBogUjYJ8Fa+8kRsGVeqA
7ZHw5hel0JKM5lZ8gBzfSwZxghZO0+uIJUxAZb7rUvgdC2KTv18P5rW2ZMezfEg4
/tRuvIL5dYQ4cWXWI2xsNbT/TfUZbzoZMr9hQ7eE+esHxA4t4tkr25jiEHZ+8Ow0
PmNIiymqS9Uf+qeBWkdhHi2zhrECSSA1nN+Dbx5jGHbI4d7YDlNFu3SyHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEXfRNdy2+NMST8tyxslPJTs1TvMB8GA1UdIwQY
MBaAFJ/y9oIFPUPJrRxlOcrun0YhsNoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2Qt
MTY1MTFhNmVkOWM2LzEvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2QtMTY1MTFhNmVkOWM2
LzEvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOzO0+fE
iUMG51pvDrLnUFD71l0iH9z9VgMAuX2kwn1PmpafRIE6wlqcwWEuIOJ7iE6c456Q
c4aC+vj1TQotElXKQCYmQjMZ106meWAqs0A+jDBnX6Beb6Qg5tLdl8oz1z9rjBFR
hMxSCfrdTDt3PNCjeDLAgS/hvEyS58ves0o1ujdPHFmZqm6WMKWq1rfPvDcRImOD
QBc5p2T/2TIqypgIwLucgYEEJttIv+QYvuyazQLbeXHrzQVz1ma9L4tGGv+t8GUD
8RE+ONFoxj8kEb9HbvXLbhUrILxSf0u8YUSSYsUsh/Lgo062eOg3UxwH6j5W13AH
l+SAoo5JTqApkg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:08 2025 by rpki-client