Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: d4mNhk8Q/mIzwerATgPxcedsauAHpukErXNilQG+TrU=
Subject key identifier: 8C:3A:6A:EC:08:CE:1F:5E:6A:6F:B1:F2:45:4D:B5:7C:7B:7D:91:7F
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0198481BF0C0246C8D57BFB57D0831F69912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 090F
Signing time: Sat 26 Jul 2025 19:00:47 +0000
Manifest this update: Sat 26 Jul 2025 19:00:47 +0000
Manifest next update: Sun 27 Jul 2025 19:00:47 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: W9+KLZbgzZ6/EwjtPTwzuuvebNTX2IXuFYZnAJbkjVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f0:c0:24:6c:8d:57:bf:b5:7d:08:31:f6:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jul 26 19:00:47 2025 GMT
Not After : Jul 27 19:00:47 2025 GMT
Subject: CN=8c3a6aec08ce1f5e6a6fb1f2454db57c7b7d917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:bd:89:2f:76:12:b3:b9:b0:26:9c:f2:d1:
7f:d0:ab:5b:16:92:e4:0e:88:47:ef:2a:74:46:1e:
59:d4:5f:84:15:c8:30:93:23:85:ce:a8:87:78:77:
d9:55:5a:96:b4:8a:92:d5:c6:7b:34:cc:98:01:11:
8c:8e:c7:f7:40:5a:3e:0c:8c:15:37:b0:4a:33:cf:
8b:04:28:e1:3b:e7:c3:22:4a:29:17:17:ae:41:2d:
d1:4c:b6:f8:c3:68:8e:d0:87:24:db:cf:29:b0:25:
e6:02:78:42:a2:82:7a:12:2d:86:47:4e:98:3f:c0:
ef:b2:75:a8:07:c9:8d:26:c7:bf:8d:61:46:39:fa:
e6:24:ed:3b:2f:e0:1a:3e:d1:20:30:ae:21:ee:65:
ad:4e:5f:d3:aa:e4:77:7f:93:2e:8b:81:1a:2d:89:
36:b4:ea:0e:dc:f9:b4:11:3d:83:0f:08:d4:b5:ac:
5f:d4:6f:df:64:4f:be:e7:7d:99:a8:6a:cf:c5:54:
9b:6b:5a:46:ce:bf:52:0c:dd:37:41:ea:ff:0e:3e:
11:ae:af:7a:16:b4:7e:c5:41:b9:e8:a2:3f:0d:13:
54:4d:c6:4b:ae:3d:8d:1f:20:87:4b:56:99:d6:e8:
fa:04:b2:d0:21:c9:c3:b4:a8:b4:27:9f:91:ab:55:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:6A:EC:08:CE:1F:5E:6A:6F:B1:F2:45:4D:B5:7C:7B:7D:91:7F
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:30:15:8d:2b:d2:18:1d:b9:48:eb:19:82:54:a8:63:b2:49:
0c:cb:55:0a:f0:d2:a9:5c:ae:52:02:a7:76:e6:7c:0e:97:3e:
7c:91:85:b7:a3:41:a3:5e:3c:56:b2:4a:85:11:88:2a:59:48:
46:5d:4d:26:ce:09:0a:e4:b2:4f:08:3c:df:ad:6c:7f:28:db:
d9:06:0a:13:72:50:59:24:dd:b5:31:a1:9a:64:a2:02:b5:b4:
bf:c4:27:4b:cd:ef:f0:eb:09:80:e9:b3:91:66:f0:a9:66:f4:
61:0f:7b:f3:fc:e9:72:20:b2:bf:b4:d0:8d:04:d4:84:c3:a9:
b5:bf:bd:d8:84:9e:3c:d1:94:7c:f8:1b:0f:70:07:cd:07:3b:
09:3a:96:81:6c:a4:07:4d:a9:99:57:ad:b7:4c:54:1d:f7:17:
ba:5f:21:4e:22:40:bc:10:02:da:db:ca:84:7a:48:75:3f:cf:
09:14:98:21:0b:6b:d7:f7:66:8c:d1:c2:35:ef:c4:5a:06:85:
51:5c:28:3e:f6:a9:ca:bd:6e:7b:3e:89:77:b5:4b:96:fa:cb:
b3:3d:b8:f3:f5:ec:6a:af:6d:77:4b:d4:0c:1f:b2:f5:28:2e:
a3:81:7d:5f:9e:97:87:37:f1:6e:80:7e:82:b7:e6:95:9f:e6:
dd:c4:a0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG/DAJGyNV7+1fQgx9pkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjUwNzI2MTkwMDQ3WhcNMjUwNzI3MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg4YzNhNmFlYzA4Y2UxZjVlNmE2ZmIxZjI0NTRkYjU3YzdiN2Q5MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAu9iS92ErO5sCac8tF/0KtbFpLk
DohH7yp0Rh5Z1F+EFcgwkyOFzqiHeHfZVVqWtIqS1cZ7NMyYARGMjsf3QFo+DIwV
N7BKM8+LBCjhO+fDIkopFxeuQS3RTLb4w2iO0Ick288psCXmAnhCooJ6Ei2GR06Y
P8DvsnWoB8mNJse/jWFGOfrmJO07L+AaPtEgMK4h7mWtTl/TquR3f5Mui4EaLYk2
tOoO3Pm0ET2DDwjUtaxf1G/fZE++532ZqGrPxVSba1pGzr9SDN03Qer/Dj4Rrq96
FrR+xUG56KI/DRNUTcZLrj2NHyCHS1aZ1uj6BLLQIcnDtKi0J5+Rq1VGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw6auwIzh9eam+x8kVNtXx7fZF/MB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATAVjSvS
GB25SOsZglSoY7JJDMtVCvDSqVyuUgKnduZ8Dpc+fJGFt6NBo148VrJKhRGIKllI
Rl1NJs4JCuSyTwg8361sfyjb2QYKE3JQWSTdtTGhmmSiArW0v8QnS83v8OsJgOmz
kWbwqWb0YQ978/zpciCyv7TQjQTUhMOptb+92ISePNGUfPgbD3AHzQc7CTqWgWyk
B02pmVett0xUHfcXul8hTiJAvBAC2tvKhHpIdT/PCRSYIQtr1/dmjNHCNe/EWgaF
UVwoPvapyr1uez6Jd7VLlvrLsz248/Xsaq9td0vUDB+y9Sguo4F9X56XhzfxboB+
grfmlZ/m3cSgYQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:21:24 2025 by rpki-client