Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json)
Hash identifier: zJw0U8Whd1OPCG1osh352lAHFRtCGHAorB9vTn2aGk0=
Subject key identifier: 69:F1:62:A5:4D:21:88:F6:50:AC:16:34:72:BC:72:BE:CB:D8:20:56
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0198499BD93AB025BF492B6B5BA063A49040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 02:00:06 +0000
Manifest this update: Sun 27 Jul 2025 02:00:06 +0000
Manifest next update: Mon 28 Jul 2025 02:00:06 +0000
Files and hashes: 1: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (hash: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=)
2: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (hash: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=)
3: i9LUKRMFfrn-zZJPck6ZTY7F8F4.roa (hash: vYGYhqvVpW6XCnxzEEe+vdIqrrsrJBwJSKWJ04MFhOg=)
4: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: iUkjw8yaLMW+njXOXA8qYKtTgW63hlTjHSr0tM0YDEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d9:3a:b0:25:bf:49:2b:6b:5b:a0:63:a4:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jul 27 02:00:06 2025 GMT
Not After : Jul 28 02:00:06 2025 GMT
Subject: CN=69f162a54d2188f650ac163472bc72becbd82056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:1d:75:71:f7:d2:7e:5c:a9:45:54:0e:d6:
b4:a1:09:77:be:31:91:f8:06:eb:1d:58:0b:b3:a3:
f4:c8:ee:12:f2:3e:f8:25:aa:19:a8:3a:b3:fe:87:
cf:75:d4:7b:70:eb:9a:60:cb:0e:80:ff:28:c9:8a:
13:65:f1:66:5a:cb:d5:08:3d:fe:4f:45:ac:89:62:
5a:46:52:80:f7:aa:1f:c9:de:8d:2c:1c:10:99:5f:
91:15:80:fe:40:50:c9:2a:2a:7d:ea:35:fb:d8:4f:
8b:2c:6f:d7:37:a8:33:97:bf:2e:6b:81:97:e5:2f:
19:0b:c4:f8:47:cd:cf:42:8c:dc:84:74:e0:4d:25:
14:44:21:76:60:dd:8f:22:4a:45:82:ed:8e:90:7b:
57:66:8e:e3:67:7b:88:ad:88:c8:16:2f:b4:4e:7f:
70:70:bc:71:29:43:0d:47:21:7d:b3:56:c5:9f:e5:
71:45:b3:e9:0d:42:cf:d8:0c:6d:e2:75:15:44:da:
06:da:f7:ac:7b:e2:5a:b0:e5:f3:98:79:34:75:f5:
23:eb:8b:6d:71:f2:83:fc:b4:63:88:61:8d:7d:f8:
27:f2:e5:68:a0:bf:cd:a6:57:f0:a5:58:6d:f8:cd:
92:44:5a:92:85:8e:46:06:38:6f:5c:4e:54:3f:a7:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:62:A5:4D:21:88:F6:50:AC:16:34:72:BC:72:BE:CB:D8:20:56
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:fa:a5:9e:dc:26:2f:6a:18:fa:a8:2e:59:6d:d5:b1:6c:
65:89:db:27:cc:4f:22:9f:7e:c5:6e:92:02:9f:df:cf:22:73:
39:82:9d:0f:19:5d:ca:b6:a2:61:45:25:6e:82:42:17:22:e7:
94:12:70:9d:e9:79:ee:df:92:72:f8:99:35:3f:00:7c:92:b7:
34:87:78:14:e1:3f:0a:36:34:0b:33:7f:51:7f:01:27:46:fa:
d5:76:5c:65:c3:f7:20:c2:39:c8:db:ae:98:43:d5:52:ff:3a:
2f:48:a2:a1:e1:41:d2:08:32:b7:b7:09:93:e5:5e:10:4e:3d:
5d:dd:09:b4:50:c6:d5:c9:34:c7:f5:29:f9:b0:fc:dc:87:78:
4f:d8:76:16:cc:17:da:b8:38:b4:5e:ca:d2:61:24:ae:9c:3a:
bb:a9:d7:9f:61:bd:04:69:db:15:23:11:fd:45:80:d6:59:dd:
4d:76:f9:4c:ad:b4:1a:1d:0f:a5:e9:a6:46:ec:6c:d6:d0:32:
41:f0:0d:bc:50:00:90:2d:b1:e8:99:0b:94:4f:63:35:42:55:
fd:4f:5f:e5:d8:cc:57:7d:0c:a3:79:e1:8d:46:10:bc:79:f3:
ac:bf:65:7f:73:8a:7c:1d:89:02:6e:1c:cc:ec:01:9f:7a:bc:
b5:f1:f2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm9k6sCW/SStrW6BjpJBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MmY1NjVlZDE2ZDhjMzM3YThjOGFiM2NkYzU3MmVmMTE1
MGY1YTkwHhcNMjUwNzI3MDIwMDA2WhcNMjUwNzI4MDIwMDA2WjAzMTEwLwYDVQQD
Eyg2OWYxNjJhNTRkMjE4OGY2NTBhYzE2MzQ3MmJjNzJiZWNiZDgyMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R4ddXH30n5cqUVUDta0oQl3vjGR
+AbrHVgLs6P0yO4S8j74JaoZqDqz/ofPddR7cOuaYMsOgP8oyYoTZfFmWsvVCD3+
T0WsiWJaRlKA96ofyd6NLBwQmV+RFYD+QFDJKip96jX72E+LLG/XN6gzl78ua4GX
5S8ZC8T4R83PQozchHTgTSUURCF2YN2PIkpFgu2OkHtXZo7jZ3uIrYjIFi+0Tn9w
cLxxKUMNRyF9s1bFn+VxRbPpDULP2Axt4nUVRNoG2vese+JasOXzmHk0dfUj64tt
cfKD/LRjiGGNffgn8uVooL/NplfwpVht+M2SRFqShY5GBjhvXE5UP6fuOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnxYqVNIYj2UKwWNHK8cr7L2CBWMB8GA1UdIwQY
MBaAFJQvVl7RbYwzeoyKs83Fcu8RUPWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQt
NjZkMjUzNDMyZjVmLzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQtNjZkMjUzNDMyZjVm
LzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZX6pZ7c
Ji9qGPqoLllt1bFsZYnbJ8xPIp9+xW6SAp/fzyJzOYKdDxldyraiYUUlboJCFyLn
lBJwnel57t+ScviZNT8AfJK3NId4FOE/CjY0CzN/UX8BJ0b61XZcZcP3IMI5yNuu
mEPVUv86L0iioeFB0ggyt7cJk+VeEE49Xd0JtFDG1ck0x/Up+bD83Id4T9h2FswX
2rg4tF7K0mEkrpw6u6nXn2G9BGnbFSMR/UWA1lndTXb5TK20Gh0PpemmRuxs1tAy
QfANvFAAkC2x6JkLlE9jNUJV/U9f5djMV30Mo3nhjUYQvHnzrL9lf3OKfB2JAm4c
zOwBn3q8tfHygw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:50 2025 by rpki-client