Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: /AAmaf0aATYQStcTy+O/MCZbDLuddlM3CZiJFdKQXNY=
Subject key identifier: 9C:61:95:42:2C:8F:CE:9B:A4:09:48:85:E2:41:3D:E2:28:D8:40:90
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 01984A0A69566400CBAFDD3162A1EA2BDD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:52 +0000
Manifest this update: Sun 27 Jul 2025 04:00:52 +0000
Manifest next update: Mon 28 Jul 2025 04:00:52 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: qnJ3aPiagl06Kq7lO9h3FenqFBq6A+DIKQ3yKTQbPJU=)
2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:69:56:64:00:cb:af:dd:31:62:a1:ea:2b:dd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jul 27 04:00:52 2025 GMT
Not After : Jul 28 04:00:52 2025 GMT
Subject: CN=9c6195422c8fce9ba4094885e2413de228d84090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:df:14:8d:96:70:ed:a2:4b:fc:8f:07:6f:
4a:65:ea:e2:86:7c:4c:27:db:36:d4:a9:0d:68:34:
fd:6c:dd:e9:a7:38:53:94:22:cc:3d:50:7a:f1:3a:
5a:26:ff:f8:1f:4d:91:32:19:e3:f2:19:9f:6a:46:
19:f9:0a:c7:a3:1f:d6:40:f4:42:fb:fd:03:48:86:
9b:62:61:95:77:bd:b9:1a:0b:8a:ee:7f:cc:bd:7e:
62:89:27:79:58:52:18:80:e8:5d:db:82:ea:f0:fe:
cb:75:95:d3:ae:d6:00:78:dc:a4:2b:d3:b6:ba:72:
be:c8:c7:7d:0f:0a:ac:ee:11:cd:f5:a6:22:24:27:
da:3d:7d:93:f3:03:0f:eb:5e:ca:e0:3e:73:2f:d0:
9e:bd:a9:45:1d:f0:6c:d5:11:1b:a4:4a:9a:b8:78:
34:47:50:e6:25:dd:4c:d1:03:c1:6d:c0:23:79:71:
90:a8:36:a4:94:7a:2b:f9:44:ff:94:0a:a6:2a:d5:
79:e9:d4:54:63:9e:63:7e:27:d0:9b:d8:b6:f9:7e:
ea:e3:cc:d2:b0:88:85:f1:ef:1c:d1:d4:b9:0d:b2:
2d:46:c6:5b:4f:20:e3:c9:20:51:3a:30:e5:7b:89:
d3:c9:3a:da:c3:9e:dd:57:fa:15:f4:29:44:58:c7:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:95:42:2C:8F:CE:9B:A4:09:48:85:E2:41:3D:E2:28:D8:40:90
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:69:1f:13:4c:b1:6b:e3:93:d6:90:f4:70:82:f1:bb:2e:
72:fb:df:8a:b7:a2:78:5b:64:be:42:72:bb:0d:f7:44:3e:dd:
12:f8:c1:32:51:c5:a0:dd:fd:d4:6f:ef:9e:f2:56:6d:64:e2:
00:1a:30:3a:5d:37:83:61:f5:a9:17:aa:ed:04:a8:5a:3c:62:
6c:e8:70:7a:9a:35:c8:36:cf:4c:2e:64:11:05:1c:2e:eb:67:
d4:ea:99:1a:8f:a1:9f:a6:65:88:ee:ec:f8:94:ca:a7:19:c8:
a4:84:5a:82:c2:a7:f3:a6:92:af:05:d1:10:5f:b1:32:a6:84:
18:cb:0f:04:a7:8a:90:d8:2a:4e:b6:36:08:01:10:2a:89:b9:
c8:02:f5:6d:d6:f0:dc:d3:69:55:00:f2:e7:61:01:71:ed:a8:
bf:2d:fd:c2:e7:fb:86:ed:18:cf:17:44:4b:8e:b3:26:35:02:
76:94:e7:5a:cf:30:33:e1:82:43:20:0a:a1:48:e5:70:f0:2b:
2a:2e:54:8b:32:27:be:af:93:8c:8c:76:a1:b0:77:d6:4d:d7:
5b:6e:b2:86:b0:7a:6e:37:2b:6b:3a:f6:2e:ce:d3:15:85:a0:
90:72:f5:99:39:ac:55:ea:fd:f5:e3:00:fa:91:6f:3e:aa:55:
77:b8:9a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCmlWZADLr90xYqHqK910MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2
MGYzMzAwHhcNMjUwNzI3MDQwMDUyWhcNMjUwNzI4MDQwMDUyWjAzMTEwLwYDVQQD
Eyg5YzYxOTU0MjJjOGZjZTliYTQwOTQ4ODVlMjQxM2RlMjI4ZDg0MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7TfFI2WcO2iS/yPB29KZerihnxM
J9s21KkNaDT9bN3ppzhTlCLMPVB68TpaJv/4H02RMhnj8hmfakYZ+QrHox/WQPRC
+/0DSIabYmGVd725GguK7n/MvX5iiSd5WFIYgOhd24Lq8P7LdZXTrtYAeNykK9O2
unK+yMd9Dwqs7hHN9aYiJCfaPX2T8wMP617K4D5zL9CevalFHfBs1REbpEqauHg0
R1DmJd1M0QPBbcAjeXGQqDaklHor+UT/lAqmKtV56dRUY55jfifQm9i2+X7q48zS
sIiF8e8c0dS5DbItRsZbTyDjySBROjDle4nTyTraw57dV/oV9ClEWMc/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxhlUIsj86bpAlIheJBPeIo2ECQMB8GA1UdIwQY
MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt
ZGYxZDUyMDVjNWQwLzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw
LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOutpHxNM
sWvjk9aQ9HCC8bsucvvfireieFtkvkJyuw33RD7dEvjBMlHFoN391G/vnvJWbWTi
ABowOl03g2H1qReq7QSoWjxibOhwepo1yDbPTC5kEQUcLutn1OqZGo+hn6ZliO7s
+JTKpxnIpIRagsKn86aSrwXREF+xMqaEGMsPBKeKkNgqTrY2CAEQKom5yAL1bdbw
3NNpVQDy52EBce2ovy39wuf7hu0YzxdES46zJjUCdpTnWs8wM+GCQyAKoUjlcPAr
Ki5UizInvq+TjIx2obB31k3XW26yhrB6bjcrazr2Ls7TFYWgkHL1mTmsVer99eMA
+pFvPqpVd7iajw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:12 2025 by rpki-client