Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: PBCPKBSTNx2qyvB1X0UzaaCWcLWBgKDaN2Y2FDWX6Tw=
Subject key identifier: 76:7F:EF:5A:9D:41:70:6A:C2:0D:35:F4:56:03:D2:E0:30:58:C5:7D
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 01983DCF8D7A6AF18848A62D84678223BBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 11F9
Signing time: Thu 24 Jul 2025 19:01:08 +0000
Manifest this update: Thu 24 Jul 2025 19:01:08 +0000
Manifest next update: Fri 25 Jul 2025 19:01:08 +0000
Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=)
2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=)
3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: SshFKvJkVAg8tnfqLctbTtzR9fVjxabM+fmtFYV9OK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:8d:7a:6a:f1:88:48:a6:2d:84:67:82:23:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Jul 24 19:01:08 2025 GMT
Not After : Jul 25 19:01:08 2025 GMT
Subject: CN=767fef5a9d41706ac20d35f45603d2e03058c57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:3b:c1:7f:42:5c:33:a5:1d:48:d5:f4:dd:
23:56:8e:64:dd:99:fd:a3:bd:3b:e2:68:cb:9b:d1:
b7:62:d8:73:39:be:d2:b7:a8:b4:8d:a3:e1:c2:15:
13:ed:75:96:9c:86:e7:6d:05:d2:38:4b:08:8b:13:
68:e4:f4:a7:74:5a:a3:d0:db:07:59:6e:1f:5d:8c:
d7:af:6b:4a:c7:b0:58:b0:cb:9b:33:2b:0c:09:2a:
ae:b3:8c:78:30:d8:a1:f0:79:e4:27:75:cf:5e:24:
de:0d:50:3d:c7:2c:b1:de:4a:7c:1e:e6:0a:4f:08:
71:45:bd:7b:cb:9b:15:fa:c8:cf:2e:da:1a:e1:20:
c6:f8:74:b4:77:75:79:81:83:60:06:53:e6:bc:ef:
2d:9e:a1:7b:c3:65:06:bf:bb:8f:1d:b3:16:a2:84:
45:7d:e0:77:37:15:c2:f4:c5:cb:4c:55:3d:f3:b3:
e9:08:03:df:24:c2:27:29:88:3e:c6:a8:7e:9a:82:
a3:33:e2:5c:cd:c9:5f:49:d4:57:8e:1d:65:52:66:
07:d4:98:6e:46:83:55:fd:0d:81:48:d8:0e:34:39:
1b:50:64:ac:d7:81:75:ea:f4:e8:52:51:3f:0c:b4:
bc:0e:08:25:e8:16:83:58:8f:0b:68:8d:bc:a1:f6:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:EF:5A:9D:41:70:6A:C2:0D:35:F4:56:03:D2:E0:30:58:C5:7D
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:78:54:ed:95:92:5f:82:7b:3a:1e:d6:7e:cf:2d:b8:55:fd:
e3:96:94:66:7c:88:b7:fc:c1:30:e9:c7:90:54:66:49:c7:b2:
4b:29:49:44:e7:d3:f5:01:ca:9d:4e:0c:4c:3c:db:b7:03:2e:
09:50:30:a0:2a:f3:6e:95:66:ab:8a:1c:0b:a5:c3:fc:df:e7:
9a:5e:69:9c:88:ca:04:52:db:f3:15:e4:68:57:38:25:fe:d8:
fc:74:bb:3c:42:60:4e:c0:da:05:a0:7b:01:c6:ba:82:20:d0:
d4:4d:61:72:a0:f1:20:ea:bf:bc:ed:98:41:ce:55:de:1b:f6:
3b:1e:88:27:b8:f6:61:29:57:d2:b8:b6:07:e9:2d:86:1b:14:
3f:6e:d1:ba:18:fe:fc:c7:6b:cf:8e:be:6f:fc:9b:d5:03:be:
0d:92:07:ae:0b:f9:f9:94:6e:35:01:b7:46:39:00:8b:1f:87:
41:ec:81:05:7a:f4:2b:05:e0:60:1a:71:61:da:3b:40:43:fc:
8f:4a:ba:55:c9:a6:ee:e0:d6:69:d8:91:b5:a3:3c:5a:0b:86:
d7:70:94:da:b5:05:3e:9e:67:45:13:b1:57:43:b8:24:89:ba:
05:3a:30:74:dc:69:f9:94:7f:20:26:3e:72:ef:67:c1:36:61:
12:12:37:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9z416avGISKYthGeCI7u7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTE5NmQ5OGRlY2QzOGViMDNmNWYwNmI0OGU1NTZjNzRm
MjMxZjQwHhcNMjUwNzI0MTkwMTA4WhcNMjUwNzI1MTkwMTA4WjAzMTEwLwYDVQQD
Eyg3NjdmZWY1YTlkNDE3MDZhYzIwZDM1ZjQ1NjAzZDJlMDMwNThjNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMQ7wX9CXDOlHUjV9N0jVo5k3Zn9
o7074mjLm9G3YthzOb7St6i0jaPhwhUT7XWWnIbnbQXSOEsIixNo5PSndFqj0NsH
WW4fXYzXr2tKx7BYsMubMysMCSqus4x4MNih8HnkJ3XPXiTeDVA9xyyx3kp8HuYK
TwhxRb17y5sV+sjPLtoa4SDG+HS0d3V5gYNgBlPmvO8tnqF7w2UGv7uPHbMWooRF
feB3NxXC9MXLTFU987PpCAPfJMInKYg+xqh+moKjM+JczclfSdRXjh1lUmYH1Jhu
RoNV/Q2BSNgONDkbUGSs14F16vToUlE/DLS8Dggl6BaDWI8LaI28ofYOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ/71qdQXBqwg019FYD0uAwWMV9MB8GA1UdIwQY
MBaAFP0RltmN7NOOsD9fBrSOVWx08jH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt
NGY4OTAyYmZlMTcyLzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy
LzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnhU7ZWS
X4J7Oh7Wfs8tuFX945aUZnyIt/zBMOnHkFRmSceySylJROfT9QHKnU4MTDzbtwMu
CVAwoCrzbpVmq4ocC6XD/N/nml5pnIjKBFLb8xXkaFc4Jf7Y/HS7PEJgTsDaBaB7
Aca6giDQ1E1hcqDxIOq/vO2YQc5V3hv2Ox6IJ7j2YSlX0ri2B+kthhsUP27Ruhj+
/Mdrz46+b/yb1QO+DZIHrgv5+ZRuNQG3RjkAix+HQeyBBXr0KwXgYBpxYdo7QEP8
j0q6Vcmm7uDWadiRtaM8WguG13CU2rUFPp5nRROxV0O4JIm6BTowdNxp+ZR/ICY+
cu9nwTZhEhI3jg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:07:04 2025 by rpki-client