Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: DiXIltcAreOwIpmkDti3TC6q9tR7qWrvV76Wat9unqk=
Subject key identifier: 82:57:F5:91:AE:7D:55:C9:76:D3:6C:C3:95:23:3B:50:88:83:59:C7
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 01984A783E07B45F6329932855A41EA6ED25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0825
Signing time: Sun 27 Jul 2025 06:00:50 +0000
Manifest this update: Sun 27 Jul 2025 06:00:50 +0000
Manifest next update: Mon 28 Jul 2025 06:00:50 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: G1Ivh+XGfExNupLfto1SxSZxev8pAUws5QGQTh4t07o=)
2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:3e:07:b4:5f:63:29:93:28:55:a4:1e:a6:ed:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Jul 27 06:00:50 2025 GMT
Not After : Jul 28 06:00:50 2025 GMT
Subject: CN=8257f591ae7d55c976d36cc395233b50888359c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:4c:d4:e0:d9:38:04:93:f7:49:e3:cc:05:
fa:b4:57:a1:96:d2:24:70:0f:30:61:d8:ab:83:e2:
58:da:6e:fa:85:44:5c:cc:3a:4a:bc:58:11:48:68:
ae:2e:4e:60:fb:74:72:2f:3e:1c:0a:2b:01:2d:50:
fc:f4:bb:b6:cd:9a:44:a8:36:ad:61:6c:1e:74:ab:
67:d4:28:4c:7b:9d:9e:b2:db:4f:d5:62:78:94:aa:
61:c8:11:e8:43:e3:fc:8f:98:7b:c2:96:b4:5e:c1:
68:7f:de:03:2f:06:3b:c5:e2:cc:9e:0c:d3:d9:67:
be:4b:7e:a8:e7:9a:81:85:03:53:41:1d:34:e8:41:
8a:99:68:79:6f:f5:09:0b:ba:59:3b:a5:9c:ac:98:
c2:39:e2:26:12:e8:b6:42:48:c6:10:68:cc:f4:73:
2f:03:0a:68:0a:68:58:f7:69:f9:1b:46:4e:04:bf:
81:54:5d:9c:95:92:b2:2c:c8:49:69:ca:99:08:b4:
da:38:da:b3:f4:aa:ae:29:41:f7:84:ce:73:e2:ac:
6a:6b:00:89:5b:f5:ac:7f:d3:6c:df:20:03:20:fb:
14:8c:2f:64:a2:f4:28:8b:2c:6f:96:c0:c6:cc:2e:
19:8f:8a:6c:59:12:51:82:36:ab:56:62:ce:7a:10:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:F5:91:AE:7D:55:C9:76:D3:6C:C3:95:23:3B:50:88:83:59:C7
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:da:a4:27:cd:bf:6f:a4:c1:2b:c5:99:29:07:91:2a:dc:b5:
49:64:5f:2f:3f:c3:a2:0a:c9:b4:bc:08:6a:80:25:7d:9f:37:
36:75:b1:58:ea:af:10:33:e5:72:ad:cc:46:a0:af:bc:20:9d:
5e:2b:f1:ac:e0:39:12:9f:dd:c0:70:dc:dc:1f:0a:02:7e:ea:
59:71:54:c1:80:f1:c9:36:c6:21:61:92:2b:47:16:b3:50:43:
6b:8b:07:96:dc:90:8a:e6:2a:4a:ed:05:89:2f:15:3c:78:9a:
1f:cd:81:b3:ce:b4:8d:bf:8a:f8:25:f4:8a:0a:ce:89:9a:57:
19:ea:7f:ab:61:ea:f2:da:f1:61:cd:8c:ee:25:45:81:38:fc:
a6:a7:e4:30:f4:56:89:96:e5:29:d0:bd:a6:0b:95:41:31:14:
00:0b:cb:13:0f:7d:ef:80:94:59:5a:f0:0f:b9:d5:4d:2d:c6:
e7:ee:8b:73:4a:fd:ce:e2:f3:e2:e6:f6:4b:29:6e:15:9f:71:
5d:72:8d:5f:f7:af:99:c7:2a:f0:ef:f0:45:54:85:df:62:2a:
80:35:0f:25:95:73:03:7b:d2:34:0c:38:4e:1d:f2:9e:f6:f2:
5a:6c:89:87:bc:8d:0f:cb:51:19:23:2f:53:85:b7:24:e2:80:
fe:ca:38:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeD4HtF9jKZMoVaQepu0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjUwNzI3MDYwMDUwWhcNMjUwNzI4MDYwMDUwWjAzMTEwLwYDVQQD
Eyg4MjU3ZjU5MWFlN2Q1NWM5NzZkMzZjYzM5NTIzM2I1MDg4ODM1OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXNM1ODZOAST90njzAX6tFehltIk
cA8wYdirg+JY2m76hURczDpKvFgRSGiuLk5g+3RyLz4cCisBLVD89Lu2zZpEqDat
YWwedKtn1ChMe52esttP1WJ4lKphyBHoQ+P8j5h7wpa0XsFof94DLwY7xeLMngzT
2We+S36o55qBhQNTQR006EGKmWh5b/UJC7pZO6WcrJjCOeImEui2QkjGEGjM9HMv
AwpoCmhY92n5G0ZOBL+BVF2clZKyLMhJacqZCLTaONqz9KquKUH3hM5z4qxqawCJ
W/Wsf9Ns3yADIPsUjC9kovQoiyxvlsDGzC4Zj4psWRJRgjarVmLOehCe4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJX9ZGufVXJdtNsw5UjO1CIg1nHMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9qkJ82/
b6TBK8WZKQeRKty1SWRfLz/DogrJtLwIaoAlfZ83NnWxWOqvEDPlcq3MRqCvvCCd
XivxrOA5Ep/dwHDc3B8KAn7qWXFUwYDxyTbGIWGSK0cWs1BDa4sHltyQiuYqSu0F
iS8VPHiaH82Bs860jb+K+CX0igrOiZpXGep/q2Hq8trxYc2M7iVFgTj8pqfkMPRW
iZblKdC9pguVQTEUAAvLEw9974CUWVrwD7nVTS3G5+6Lc0r9zuLz4ub2SyluFZ9x
XXKNX/evmccq8O/wRVSF32IqgDUPJZVzA3vSNAw4Th3ynvbyWmyJh7yND8tRGSMv
U4W3JOKA/so4wQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:12 2025 by rpki-client