Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: DvTs1OAE7/eyGRQZTQbOJUnHBVlmoakgujMifSphBzQ=
Subject key identifier: 8A:EF:E0:11:6C:BF:2B:C2:26:D7:78:D9:99:E6:4F:AB:26:34:F6:E2
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 01984A4130D8C4B69A974182F61AC200D499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 1477
Signing time: Sun 27 Jul 2025 05:00:42 +0000
Manifest this update: Sun 27 Jul 2025 05:00:42 +0000
Manifest next update: Mon 28 Jul 2025 05:00:42 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: ae2htTkTMPI5aJadvnplTUd+rFtYlZ4uNVgHsAnUFdw=)
2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:30:d8:c4:b6:9a:97:41:82:f6:1a:c2:00:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Jul 27 05:00:42 2025 GMT
Not After : Jul 28 05:00:42 2025 GMT
Subject: CN=8aefe0116cbf2bc226d778d999e64fab2634f6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:29:02:ca:8a:5f:95:55:4c:a1:fe:b3:54:
9d:df:9d:0b:60:88:df:f6:07:5b:35:c6:8b:3e:7b:
de:be:b6:90:83:e3:7f:a8:3b:45:89:87:02:02:1f:
14:d9:cf:65:94:63:68:6f:4b:1c:d5:a8:ee:6b:c1:
ba:7a:97:06:9b:13:40:2a:f6:be:c3:0a:57:c4:a9:
52:ff:59:e1:23:65:1d:3b:53:24:3f:99:8c:46:7e:
93:b7:f1:6b:09:5b:22:ba:ff:e7:8c:89:52:0e:bd:
05:b9:55:ef:aa:39:bb:4a:86:21:12:dc:35:3c:50:
d1:2a:44:a3:29:15:71:01:02:c6:a0:8e:a0:49:f4:
30:b8:16:84:9a:98:5d:b0:e7:9c:d2:e8:3a:45:c3:
62:4e:db:f1:51:6b:98:63:c0:62:c1:d8:72:8e:c1:
08:62:c7:68:c2:90:54:6b:5a:99:63:6f:8d:6e:e2:
89:1a:db:a3:79:01:be:13:bd:ca:4c:4c:86:19:e9:
71:2a:86:74:e6:9e:ff:6b:79:d9:0f:1b:f7:64:27:
3a:5d:f0:57:f2:87:18:92:2f:bb:75:ac:0f:ea:c3:
ec:fa:7a:7b:51:3e:eb:4d:25:5e:f1:2a:d4:a6:7e:
78:d7:74:0e:d5:68:09:83:fb:a8:c9:ca:23:f3:2e:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:E0:11:6C:BF:2B:C2:26:D7:78:D9:99:E6:4F:AB:26:34:F6:E2
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:39:a4:68:cd:97:4d:5d:ce:16:50:4d:56:20:f8:c6:2e:53:
fe:a6:79:71:ac:8e:a0:7d:f2:12:22:46:64:c4:dd:54:a4:45:
5d:89:da:a0:69:f0:6c:60:be:ce:1e:9a:78:3c:d2:71:c4:34:
13:dd:44:92:91:8b:14:0d:b3:7d:0a:61:d8:9c:c9:06:ba:75:
5a:49:cd:34:22:70:0e:80:01:1f:f6:93:00:0a:96:a5:c6:17:
a5:50:84:00:80:b0:1e:64:f0:23:3c:18:bf:47:db:04:5d:ab:
8f:7d:6d:3e:4e:ed:9b:76:e0:f3:05:cc:ae:49:c2:23:3f:da:
b5:dc:b5:f3:b6:72:13:9a:26:32:0e:5d:88:6f:28:a6:19:0d:
0c:1c:c1:07:78:f6:6c:23:2a:4d:02:c7:64:36:55:af:a8:f2:
99:99:07:ba:cf:7d:40:41:32:1d:2d:04:70:4f:37:0d:eb:9c:
e7:45:c3:3e:fb:51:66:fa:64:1f:17:a6:b8:71:2d:a0:34:08:
ab:93:19:fb:9c:75:19:25:db:9e:95:23:73:e4:f2:d1:04:82:
20:be:84:f5:45:bd:47:33:72:73:45:e7:6c:9b:23:61:11:86:
48:51:2b:e6:f3:19:f0:89:1e:d3:60:bc:7f:e3:79:ec:2c:aa:
67:1e:33:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQTDYxLaal0GC9hrCANSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw
ODgzOTEwHhcNMjUwNzI3MDUwMDQyWhcNMjUwNzI4MDUwMDQyWjAzMTEwLwYDVQQD
Eyg4YWVmZTAxMTZjYmYyYmMyMjZkNzc4ZDk5OWU2NGZhYjI2MzRmNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9IpAsqKX5VVTKH+s1Sd350LYIjf
9gdbNcaLPnvevraQg+N/qDtFiYcCAh8U2c9llGNob0sc1ajua8G6epcGmxNAKva+
wwpXxKlS/1nhI2UdO1MkP5mMRn6Tt/FrCVsiuv/njIlSDr0FuVXvqjm7SoYhEtw1
PFDRKkSjKRVxAQLGoI6gSfQwuBaEmphdsOec0ug6RcNiTtvxUWuYY8BiwdhyjsEI
YsdowpBUa1qZY2+NbuKJGtujeQG+E73KTEyGGelxKoZ05p7/a3nZDxv3ZCc6XfBX
8ocYki+7dawP6sPs+np7UT7rTSVe8SrUpn5413QO1WgJg/uoycoj8y5T+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrv4BFsvyvCJtd42ZnmT6smNPbiMB8GA1UdIwQY
MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt
YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy
LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjmkaM2X
TV3OFlBNViD4xi5T/qZ5cayOoH3yEiJGZMTdVKRFXYnaoGnwbGC+zh6aeDzSccQ0
E91EkpGLFA2zfQph2JzJBrp1WknNNCJwDoABH/aTAAqWpcYXpVCEAICwHmTwIzwY
v0fbBF2rj31tPk7tm3bg8wXMrknCIz/atdy187ZyE5omMg5diG8ophkNDBzBB3j2
bCMqTQLHZDZVr6jymZkHus99QEEyHS0EcE83Deuc50XDPvtRZvpkHxemuHEtoDQI
q5MZ+5x1GSXbnpUjc+Ty0QSCIL6E9UW9RzNyc0XnbJsjYRGGSFEr5vMZ8Ike02C8
f+N57CyqZx4zTg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:49 2025 by rpki-client