Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: xfR9r91BK5ZRnFsBMhanNslB+SrTLCBZv7U+iONJd+A=
Subject key identifier: 63:E9:86:12:57:0B:90:0B:53:5B:BA:EF:0A:F3:00:30:08:25:B9:C3
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01983E3CD699D11223505F0AFDB1AA1857F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0442
Signing time: Thu 24 Jul 2025 21:00:31 +0000
Manifest this update: Thu 24 Jul 2025 21:00:31 +0000
Manifest next update: Fri 25 Jul 2025 21:00:31 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: LuNvJ8Yw3f8J2O9MVM0vTjVHD1wSFn4Mv3flNVWiZzg=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:d6:99:d1:12:23:50:5f:0a:fd:b1:aa:18:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jul 24 21:00:31 2025 GMT
Not After : Jul 25 21:00:31 2025 GMT
Subject: CN=63e98612570b900b535bbaef0af300300825b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:0f:ec:70:48:58:a7:20:22:3b:ba:33:4a:
ff:b5:d9:1c:3f:55:a3:c1:7d:0d:90:2c:c1:51:40:
f6:43:38:81:2c:0c:65:2e:e0:02:a9:29:9b:1d:2b:
3f:2e:1b:a5:4c:46:35:fa:86:a5:10:0f:e4:06:84:
38:3d:c4:bf:c4:ca:fd:39:17:72:bb:a6:83:fc:0f:
e8:67:fb:2f:87:fc:a3:76:a5:76:de:51:b4:d1:97:
87:da:8d:65:6f:54:42:ac:a5:1e:f9:ec:49:d7:85:
5c:3e:89:e4:11:37:a6:d8:7a:e2:28:83:d8:29:06:
c1:6d:da:8d:15:73:9f:0b:85:94:c2:f4:d0:36:74:
f8:1f:bb:72:05:0c:2e:9d:32:3a:ce:5a:8f:9a:6d:
42:f7:32:e3:39:fb:3b:31:28:fe:9d:d2:7c:26:45:
00:46:7b:85:34:ca:f5:5d:47:b2:d8:b4:c2:69:50:
74:45:32:79:fa:c3:d5:eb:d5:62:64:04:86:70:27:
bf:c1:17:90:db:4f:24:5c:1a:95:ad:ce:27:b8:90:
66:e5:b7:02:3c:c7:a9:4c:fd:a2:84:75:91:5e:b1:
fd:d4:82:51:78:8e:c1:57:00:eb:42:e8:a4:b8:e5:
1a:79:c8:87:8b:8a:10:56:6f:78:15:81:2c:a9:97:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:86:12:57:0B:90:0B:53:5B:BA:EF:0A:F3:00:30:08:25:B9:C3
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:8d:3c:3d:4b:04:0b:23:b9:25:2a:4e:c3:e4:ad:70:41:
c6:56:97:77:b0:2e:c7:55:cb:2c:ae:e4:e0:66:24:5c:2e:fa:
35:78:67:78:2a:99:b6:97:93:50:03:d8:fd:b8:3d:98:3c:22:
9a:da:10:d8:08:3b:fe:80:22:ac:e7:e5:c8:c9:ef:2f:2f:f0:
12:d7:71:dd:4a:4e:3b:78:44:7b:1e:3a:d0:f9:8e:e2:b1:96:
11:be:53:db:29:f6:1e:d1:da:28:03:a4:f9:9b:27:1a:02:f0:
82:23:85:e8:a3:de:41:41:0e:be:ea:6f:56:d7:38:b0:6f:f9:
99:47:6c:ae:67:1a:7f:07:7b:e1:88:13:51:34:f9:64:7b:b2:
d2:3a:3f:08:95:78:00:0c:32:28:27:a6:2e:72:58:6e:0c:52:
7f:02:87:6a:2a:26:e6:21:f1:18:dc:31:c1:3e:57:c5:cb:05:
cf:1b:ab:c8:ff:ae:96:20:fe:9d:d0:ad:d7:97:3a:6a:61:4c:
b3:99:e0:50:68:81:a1:70:52:a5:ab:9b:7a:0b:4f:d5:2e:c4:
df:c4:dd:34:5c:ae:af:f4:e5:da:36:f5:05:1e:6c:c4:2f:82:
df:9d:90:96:96:1b:2a:5b:2e:4e:52:99:eb:fe:0c:9e:31:8c:
b8:52:cc:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PNaZ0RIjUF8K/bGqGFf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjUwNzI0MjEwMDMxWhcNMjUwNzI1MjEwMDMxWjAzMTEwLwYDVQQD
Eyg2M2U5ODYxMjU3MGI5MDBiNTM1YmJhZWYwYWYzMDAzMDA4MjViOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMP7HBIWKcgIju6M0r/tdkcP1Wj
wX0NkCzBUUD2QziBLAxlLuACqSmbHSs/LhulTEY1+oalEA/kBoQ4PcS/xMr9ORdy
u6aD/A/oZ/svh/yjdqV23lG00ZeH2o1lb1RCrKUe+exJ14VcPonkETem2HriKIPY
KQbBbdqNFXOfC4WUwvTQNnT4H7tyBQwunTI6zlqPmm1C9zLjOfs7MSj+ndJ8JkUA
RnuFNMr1XUey2LTCaVB0RTJ5+sPV69ViZASGcCe/wReQ208kXBqVrc4nuJBm5bcC
PMepTP2ihHWRXrH91IJReI7BVwDrQuikuOUaeciHi4oQVm94FYEsqZfuPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPphhJXC5ALU1u67wrzADAIJbnDMB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFCNPD1L
BAsjuSUqTsPkrXBBxlaXd7Aux1XLLK7k4GYkXC76NXhneCqZtpeTUAPY/bg9mDwi
mtoQ2Ag7/oAirOflyMnvLy/wEtdx3UpOO3hEex460PmO4rGWEb5T2yn2HtHaKAOk
+ZsnGgLwgiOF6KPeQUEOvupvVtc4sG/5mUdsrmcafwd74YgTUTT5ZHuy0jo/CJV4
AAwyKCemLnJYbgxSfwKHaiom5iHxGNwxwT5XxcsFzxuryP+uliD+ndCt15c6amFM
s5ngUGiBoXBSpaubegtP1S7E38TdNFyur/Tl2jb1BR5sxC+C352QlpYbKlsuTlKZ
6/4MnjGMuFLMyA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:54:18 2025 by rpki-client