Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: wEzlrHnHXsmbVKGrxFNklfmXNS2wK/kKdGK9HIgzoYs=
Subject key identifier: DD:83:26:9B:56:61:A1:61:18:30:A6:57:91:B5:B1:F8:D4:41:57:24
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 0198548D6C7ED87DA6CBE0FBCAD4CD9B7CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 160C
Signing time: Tue 29 Jul 2025 05:00:11 +0000
Manifest this update: Tue 29 Jul 2025 05:00:11 +0000
Manifest next update: Wed 30 Jul 2025 05:00:11 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: VS8K+Wvx/Ut5B3d7U0hXZFhwxxFYeLKVon9XB1i9wyw=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:6c:7e:d8:7d:a6:cb:e0:fb:ca:d4:cd:9b:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jul 29 05:00:11 2025 GMT
Not After : Jul 30 05:00:11 2025 GMT
Subject: CN=dd83269b5661a1611830a65791b5b1f8d4415724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:d1:b1:49:c2:d7:61:e1:05:81:fd:fa:61:
1a:f9:3c:21:bc:03:b2:50:2c:0f:56:7a:af:fd:af:
ef:b0:78:c5:b2:bc:70:00:57:d9:6b:d7:7b:a5:ed:
47:d5:8d:f0:c8:e5:ed:c5:e3:d0:57:1f:8c:e5:de:
20:39:83:84:60:a0:ad:22:1e:7f:0b:17:d4:71:a3:
b6:ce:23:8a:1e:df:38:2f:29:76:3f:85:6e:50:15:
f7:2f:7a:6c:a3:a3:38:0f:e3:c0:f6:06:35:0b:12:
0a:62:ca:e1:d1:3e:56:8d:79:36:41:78:11:74:6a:
b0:40:2a:55:ab:f6:3f:bd:02:1e:3c:9d:8d:2f:c9:
13:4c:8d:57:58:ed:0c:42:3c:85:71:d9:e5:28:67:
b7:a7:dd:22:9b:9a:2c:8a:4a:f8:3c:e1:dc:c6:53:
f6:92:7e:7f:f5:a6:05:0c:b1:36:84:52:7f:5c:fb:
81:2f:94:1f:08:07:b4:f8:26:75:e3:42:73:10:86:
11:d1:8f:92:ca:b8:84:b3:5e:44:20:32:c3:04:65:
2f:4e:81:4e:b1:5c:bf:59:41:ca:2a:0d:e4:32:b7:
b1:be:ca:38:ae:b1:1b:c6:1f:94:e3:1f:a1:c9:62:
33:2d:fe:60:fd:03:99:42:1c:aa:e2:c0:e0:2d:19:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:26:9B:56:61:A1:61:18:30:A6:57:91:B5:B1:F8:D4:41:57:24
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c2:6f:6f:77:3c:f1:52:1a:93:d4:5f:08:e8:08:c1:3a:d0:
ae:8f:d5:4b:e8:14:e8:b2:1c:0b:e3:6e:25:b1:3b:84:df:2a:
99:7c:f6:1f:75:2f:d0:54:8f:4d:87:22:dc:56:6a:6d:27:e2:
c1:57:43:2b:a2:89:27:75:46:01:eb:3f:68:d5:9a:76:36:98:
32:9c:1a:33:85:31:ff:ec:c1:72:31:bf:7d:13:9e:59:5c:aa:
d6:a8:af:e7:63:b6:72:77:4c:68:eb:64:58:19:d9:45:1c:a6:
b9:8b:8e:02:aa:d4:b7:4f:4a:71:4b:76:fe:ef:d9:d9:f9:0f:
ba:20:dd:e8:da:29:a5:c0:4a:66:3d:ac:4f:e9:42:18:de:82:
45:ea:e5:ca:ae:fa:1b:06:73:1e:45:3f:79:c1:ea:64:06:6d:
52:6d:ff:b5:58:b9:50:68:a3:8c:2b:72:fa:8a:9a:e3:9f:3e:
3c:32:b9:d4:12:ae:55:f8:9c:87:47:97:83:7b:23:c2:2d:26:
22:f2:5b:1b:19:08:2e:00:0b:fc:46:e6:ed:91:be:8a:77:46:
b7:54:c9:df:73:d4:39:d5:d4:56:e3:25:35:05:c7:f0:f1:fe:
17:56:44:4a:41:f8:99:87:8e:0b:06:91:b2:fb:ff:ef:ff:3c:
20:8e:ad:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjWx+2H2my+D7ytTNm3z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjUwNzI5MDUwMDExWhcNMjUwNzMwMDUwMDExWjAzMTEwLwYDVQQD
EyhkZDgzMjY5YjU2NjFhMTYxMTgzMGE2NTc5MWI1YjFmOGQ0NDE1NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNvRsUnC12HhBYH9+mEa+TwhvAOy
UCwPVnqv/a/vsHjFsrxwAFfZa9d7pe1H1Y3wyOXtxePQVx+M5d4gOYOEYKCtIh5/
CxfUcaO2ziOKHt84Lyl2P4VuUBX3L3pso6M4D+PA9gY1CxIKYsrh0T5WjXk2QXgR
dGqwQCpVq/Y/vQIePJ2NL8kTTI1XWO0MQjyFcdnlKGe3p90im5osikr4POHcxlP2
kn5/9aYFDLE2hFJ/XPuBL5QfCAe0+CZ140JzEIYR0Y+SyriEs15EIDLDBGUvToFO
sVy/WUHKKg3kMrexvso4rrEbxh+U4x+hyWIzLf5g/QOZQhyq4sDgLRl/VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2DJptWYaFhGDCmV5G1sfjUQVckMB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsJvb3c8
8VIak9RfCOgIwTrQro/VS+gU6LIcC+NuJbE7hN8qmXz2H3Uv0FSPTYci3FZqbSfi
wVdDK6KJJ3VGAes/aNWadjaYMpwaM4Ux/+zBcjG/fROeWVyq1qiv52O2cndMaOtk
WBnZRRymuYuOAqrUt09KcUt2/u/Z2fkPuiDd6NoppcBKZj2sT+lCGN6CRerlyq76
GwZzHkU/ecHqZAZtUm3/tVi5UGijjCty+oqa458+PDK51BKuVfich0eXg3sjwi0m
IvJbGxkILgAL/Ebm7ZG+indGt1TJ33PUOdXUVuMlNQXH8PH+F1ZESkH4mYeOCwaR
svv/7/88II6tuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:47:12 2025 by rpki-client