Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: 4uXRfIPnMB1BhzmuZAmbEFtgt+vlqsq3C5EOtahkiZ8=
Subject key identifier: FD:FC:DE:3A:EB:15:11:7C:E7:3E:86:F2:66:58:B1:DE:F8:FB:01:89
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 0198413DD9C56254200E12BE2FCBBE3E5ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 1601
Signing time: Fri 25 Jul 2025 11:00:29 +0000
Manifest this update: Fri 25 Jul 2025 11:00:29 +0000
Manifest next update: Sat 26 Jul 2025 11:00:29 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: DOEKXbtWNNjV348tyxcFP0fP685Id/sb5XGzeLnnAJ8=)
2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:d9:c5:62:54:20:0e:12:be:2f:cb:be:3e:5a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Jul 25 11:00:29 2025 GMT
Not After : Jul 26 11:00:29 2025 GMT
Subject: CN=fdfcde3aeb15117ce73e86f26658b1def8fb0189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:c3:64:a2:74:88:1f:51:20:d9:3c:d0:ce:
bb:a4:02:6a:d3:64:c8:62:fd:6d:25:66:08:62:e2:
78:b6:6a:76:e4:0e:d6:b1:40:3c:e5:c7:75:10:22:
c9:78:38:09:bd:68:0c:7c:52:24:4e:6c:6f:0a:3f:
0d:f4:e6:3f:cc:2b:79:e4:bc:a2:de:2a:c6:44:08:
82:0a:b5:92:e3:bc:06:fc:6d:0a:7b:b7:28:31:cd:
44:18:34:ad:f8:19:43:4a:71:04:a4:35:e3:9f:3e:
d5:50:d6:0f:c7:ac:3a:7d:dd:62:4f:b6:92:d2:2e:
8f:6c:c2:c9:a2:ff:10:1b:d6:ba:15:46:34:ac:9b:
9b:ae:47:bd:a4:25:ed:81:58:50:34:fc:55:50:2d:
63:3b:4c:64:d5:df:4a:a4:65:e0:57:f7:57:e0:ae:
28:80:04:fa:68:df:e3:28:4b:c3:08:40:cf:a5:35:
b1:e3:53:84:61:93:77:30:62:83:cc:b3:2a:a0:53:
d0:99:d8:80:3f:a4:4a:50:46:3f:aa:88:dd:fb:05:
1f:82:5b:1b:8e:03:06:93:40:86:86:03:e0:f2:d6:
9f:eb:59:a3:8f:f6:e5:43:e6:e2:fa:f7:f7:25:3b:
1e:c6:c7:1e:61:1f:b9:2d:20:4c:af:db:d9:fd:db:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:DE:3A:EB:15:11:7C:E7:3E:86:F2:66:58:B1:DE:F8:FB:01:89
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:88:fc:89:48:27:1c:ba:11:fc:b3:5f:41:f6:f2:3d:2e:40:
fb:10:21:a4:19:30:a3:87:5d:f3:25:43:76:40:08:6b:b6:d2:
49:90:b9:fa:d2:19:6b:17:ae:be:51:38:18:79:aa:70:82:bd:
e4:c2:03:82:e4:78:bf:32:85:c2:23:fa:39:14:44:c3:b0:9c:
12:78:e1:9a:2d:fe:c4:e0:fd:c0:6e:25:9f:38:89:fb:0c:29:
8b:04:ca:13:c1:82:f8:20:90:f8:34:9c:ad:85:4d:7b:db:f0:
08:30:e3:46:2b:67:61:1e:e4:8a:b0:cd:14:a2:5f:54:00:9e:
e9:0c:bf:8c:cc:55:b7:22:1c:26:5e:ef:a8:4c:81:8a:f4:64:
3d:f1:08:fe:f5:e2:de:3b:8c:a7:74:f1:b3:b4:91:6f:f4:22:
88:5c:9c:a4:e7:73:4b:f8:18:03:03:7e:7b:39:91:29:20:24:
0c:76:3b:ea:36:f4:b2:7f:ea:29:18:fd:8d:25:ae:9d:5b:4a:
50:c8:ea:1d:e4:06:a8:59:aa:1a:0f:73:a4:85:c9:dc:f3:a7:
d8:4e:a6:db:63:22:08:14:2a:8b:c2:d4:3c:e2:ed:59:97:c8:
55:d4:9b:f9:35:29:90:0f:8f:4c:b2:5f:cc:74:df:e2:f2:06:
45:90:47:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhBPdnFYlQgDhK+L8u+PlrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk
NDcwMzcwHhcNMjUwNzI1MTEwMDI5WhcNMjUwNzI2MTEwMDI5WjAzMTEwLwYDVQQD
EyhmZGZjZGUzYWViMTUxMTdjZTczZTg2ZjI2NjU4YjFkZWY4ZmIwMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu/DZKJ0iB9RINk80M67pAJq02TI
Yv1tJWYIYuJ4tmp25A7WsUA85cd1ECLJeDgJvWgMfFIkTmxvCj8N9OY/zCt55Lyi
3irGRAiCCrWS47wG/G0Ke7coMc1EGDSt+BlDSnEEpDXjnz7VUNYPx6w6fd1iT7aS
0i6PbMLJov8QG9a6FUY0rJubrke9pCXtgVhQNPxVUC1jO0xk1d9KpGXgV/dX4K4o
gAT6aN/jKEvDCEDPpTWx41OEYZN3MGKDzLMqoFPQmdiAP6RKUEY/qojd+wUfglsb
jgMGk0CGhgPg8taf61mjj/blQ+bi+vf3JTsexsceYR+5LSBMr9vZ/dtgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP383jrrFRF85z6G8mZYsd74+wGJMB8GA1UdIwQY
MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt
Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5
LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYj8iUgn
HLoR/LNfQfbyPS5A+xAhpBkwo4dd8yVDdkAIa7bSSZC5+tIZaxeuvlE4GHmqcIK9
5MIDguR4vzKFwiP6ORREw7CcEnjhmi3+xOD9wG4lnziJ+wwpiwTKE8GC+CCQ+DSc
rYVNe9vwCDDjRitnYR7kirDNFKJfVACe6Qy/jMxVtyIcJl7vqEyBivRkPfEI/vXi
3juMp3Txs7SRb/QiiFycpOdzS/gYAwN+ezmRKSAkDHY76jb0sn/qKRj9jSWunVtK
UMjqHeQGqFmqGg9zpIXJ3POn2E6m22MiCBQqi8LUPOLtWZfIVdSb+TUpkA+PTLJf
zHTf4vIGRZBHTw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:12 2025 by rpki-client