Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: jZndvaki//O42ut/lU9Qwf+oc7qLc2Ligy2ZW8vA0+Y=
Subject key identifier: D1:74:81:C1:66:DC:11:AC:B7:12:35:28:E9:AD:32:D5:5E:03:A1:57
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0198485273FDD34C705BCD0540A6904C9E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 20:00:19 +0000
Manifest this update: Sat 26 Jul 2025 20:00:19 +0000
Manifest next update: Sun 27 Jul 2025 20:00:19 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: CIv2/ohf7rNFz0OgQ0+XXdpgMl7vwwcLkuKmFjCG3HU=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:73:fd:d3:4c:70:5b:cd:05:40:a6:90:4c:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jul 26 20:00:19 2025 GMT
Not After : Jul 27 20:00:19 2025 GMT
Subject: CN=d17481c166dc11acb7123528e9ad32d55e03a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:e0:08:05:86:72:aa:df:70:5b:5c:28:02:
ec:53:91:37:3a:3b:ac:36:dd:4e:56:13:ca:7b:49:
ae:44:c6:9c:03:96:e3:9a:c6:d6:86:f0:bb:1b:4e:
84:aa:19:5c:17:b0:60:1f:8c:96:3e:68:80:8c:e8:
5e:31:bb:e5:f0:11:76:21:94:f4:94:b1:88:0d:41:
a4:f9:ff:28:cc:9e:a2:09:5f:9c:b8:04:a4:4f:f1:
5a:b8:d7:a7:e0:68:55:be:ed:59:5f:99:59:22:8e:
5e:4f:c9:dd:08:aa:b6:50:d2:d4:8d:ce:f9:ae:fd:
f8:93:02:ad:16:0f:53:41:d8:69:d9:ed:c8:ff:ff:
9d:be:d9:5f:53:28:92:3a:f8:1b:f4:93:8e:0a:dc:
90:56:12:72:1d:54:97:9c:27:5e:89:7c:e7:ba:39:
59:a0:dc:96:0b:73:c9:10:c7:1a:3a:35:ed:fc:1f:
a3:3b:e0:15:ef:0c:bb:bc:e2:73:ea:4e:39:73:a6:
a5:7f:ef:f2:95:3a:84:41:bb:b7:8c:b7:35:c2:62:
48:27:58:c0:89:b6:8b:82:3d:ab:25:a2:2f:96:f3:
c2:d7:2f:9e:0c:f1:e6:2e:73:11:1d:f4:d2:d6:4b:
6b:98:59:69:b5:51:7e:24:7d:88:8b:31:50:13:a9:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:81:C1:66:DC:11:AC:B7:12:35:28:E9:AD:32:D5:5E:03:A1:57
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:91:ae:16:12:8c:bb:a1:4d:33:ca:24:b4:9c:32:6b:cb:3b:
bf:07:30:38:9d:d7:d6:87:c1:3a:84:5f:1c:98:53:1c:23:0e:
05:32:aa:6e:b6:43:e9:e1:87:0a:22:b5:bd:35:74:a7:14:ff:
30:f9:b7:82:1e:d6:4e:59:08:69:cc:01:b1:2f:64:0d:0f:09:
8b:00:a4:24:25:c4:81:e4:7b:46:eb:93:0d:c5:3c:04:cc:c3:
a2:ec:25:18:67:ba:db:78:9d:be:7d:62:83:e5:50:eb:fb:33:
37:6d:10:7d:7a:95:5d:c7:8b:22:6f:5d:d5:66:75:63:f7:1d:
07:f4:52:fb:0c:af:e9:2d:8b:26:81:2a:0a:2e:f0:6e:aa:ff:
83:b3:7a:5b:9e:67:40:b5:bc:02:b5:c8:bc:c1:49:19:2f:ad:
f6:60:00:3e:c2:c6:26:e5:e2:8d:40:e2:cc:d5:99:af:ae:21:
66:1e:fa:f0:d3:9f:46:aa:91:bd:06:29:ba:81:01:aa:56:13:
0d:7f:6f:9e:6f:69:b9:07:57:e5:b8:a0:15:b8:2f:28:94:3c:
93:92:37:16:e3:a1:a4:e9:f8:ea:8d:0b:62:62:ea:7f:14:47:
06:cd:9e:ed:0c:6f:e7:60:9a:12:ab:bd:ff:af:5d:9e:f2:1f:
c2:58:5b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUnP900xwW80FQKaQTJ6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3
ZjAyYTIwHhcNMjUwNzI2MjAwMDE5WhcNMjUwNzI3MjAwMDE5WjAzMTEwLwYDVQQD
EyhkMTc0ODFjMTY2ZGMxMWFjYjcxMjM1MjhlOWFkMzJkNTVlMDNhMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNPgCAWGcqrfcFtcKALsU5E3Ojus
Nt1OVhPKe0muRMacA5bjmsbWhvC7G06EqhlcF7BgH4yWPmiAjOheMbvl8BF2IZT0
lLGIDUGk+f8ozJ6iCV+cuASkT/FauNen4GhVvu1ZX5lZIo5eT8ndCKq2UNLUjc75
rv34kwKtFg9TQdhp2e3I//+dvtlfUyiSOvgb9JOOCtyQVhJyHVSXnCdeiXznujlZ
oNyWC3PJEMcaOjXt/B+jO+AV7wy7vOJz6k45c6alf+/ylTqEQbu3jLc1wmJIJ1jA
ibaLgj2rJaIvlvPC1y+eDPHmLnMRHfTS1ktrmFlptVF+JH2IizFQE6nL2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF0gcFm3BGstxI1KOmtMtVeA6FXMB8GA1UdIwQY
MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct
MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1
LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJGuFhKM
u6FNM8oktJwya8s7vwcwOJ3X1ofBOoRfHJhTHCMOBTKqbrZD6eGHCiK1vTV0pxT/
MPm3gh7WTlkIacwBsS9kDQ8JiwCkJCXEgeR7RuuTDcU8BMzDouwlGGe623idvn1i
g+VQ6/szN20QfXqVXceLIm9d1WZ1Y/cdB/RS+wyv6S2LJoEqCi7wbqr/g7N6W55n
QLW8ArXIvMFJGS+t9mAAPsLGJuXijUDizNWZr64hZh768NOfRqqRvQYpuoEBqlYT
DX9vnm9puQdX5bigFbgvKJQ8k5I3FuOhpOn46o0LYmLqfxRHBs2e7Qxv52CaEqu9
/69dnvIfwlhbqA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:51 2025 by rpki-client