Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: rkymHLDry58odDmv7RJumfK2ROj6bam/ZccvaLJW9fc=
Subject key identifier: 6E:26:97:AA:0E:58:1D:70:9E:9B:B5:59:7F:8D:E0:6B:1F:39:27:B1
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019849660F0FA2FFC33C28F9D25635F66C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 04D6
Signing time: Sun 27 Jul 2025 01:01:21 +0000
Manifest this update: Sun 27 Jul 2025 01:01:21 +0000
Manifest next update: Mon 28 Jul 2025 01:01:21 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: hxooXgin/wxlPnLE7FxQHh+eK6r8IcfMY3NdtD8qLFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0f:0f:a2:ff:c3:3c:28:f9:d2:56:35:f6:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Jul 27 01:01:21 2025 GMT
Not After : Jul 28 01:01:21 2025 GMT
Subject: CN=6e2697aa0e581d709e9bb5597f8de06b1f3927b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:1b:5b:e2:ee:9f:86:e3:f4:65:6b:77:85:
3f:57:0f:ff:5c:8b:ab:62:6d:0c:40:13:0e:cb:1e:
9b:e4:ef:19:b6:37:cf:02:d1:54:47:55:93:0b:65:
0b:10:a5:58:56:a5:72:55:cf:e7:ec:72:7e:b8:9f:
06:d8:3e:7d:da:0a:6d:ea:b2:80:02:04:75:cf:2b:
22:80:47:d7:4a:cd:16:53:02:b4:d7:a3:60:45:8e:
bd:37:1c:b8:bf:8a:17:25:95:31:e3:b1:27:fd:39:
6e:47:0f:fc:14:be:73:57:c3:37:f1:da:03:1c:1e:
ec:5c:ee:b1:44:1c:30:80:b8:f0:40:52:b4:53:4a:
41:94:b6:e6:42:9e:7b:ca:50:60:ab:b4:7c:75:bb:
9a:ce:86:46:72:41:6a:83:50:bf:b4:86:79:d1:29:
d4:e0:3d:1b:6e:03:56:36:d0:06:40:d0:5f:48:47:
f9:df:85:74:52:c5:c0:f2:b5:99:d4:51:2a:45:76:
e3:c5:11:52:13:de:d8:b1:58:52:e7:53:cc:4f:f8:
2e:d4:b4:e1:fa:4f:4c:12:17:3c:fd:a9:b4:a9:ef:
f5:aa:c2:29:bd:e9:6c:14:70:ac:28:cc:be:50:d4:
32:8d:15:ca:68:1a:50:91:e4:3d:99:6a:38:6c:30:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:26:97:AA:0E:58:1D:70:9E:9B:B5:59:7F:8D:E0:6B:1F:39:27:B1
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:14:38:06:8a:97:73:00:99:91:6d:4e:3c:69:b3:86:8f:a5:
bc:f6:44:51:4c:31:65:a8:02:0e:dd:62:3d:95:c9:ee:fa:9b:
2d:85:5f:d2:0d:f8:b9:80:89:e5:cf:8e:14:3d:30:ca:7c:ff:
62:36:4c:b3:99:20:2d:7e:b7:51:81:05:1e:5d:19:39:b5:38:
f3:20:39:87:28:17:ed:bc:34:9e:b9:d6:5d:9f:60:9b:43:6a:
b3:1c:a4:3b:f5:6d:e7:24:a8:2a:78:90:01:ce:6b:58:e7:5e:
33:42:43:b6:b1:43:a8:0d:98:33:d1:21:5e:ad:ca:ae:df:03:
bb:2f:a9:51:4a:ef:e5:7b:d6:33:a0:7c:ad:e2:cb:02:39:00:
70:cd:d7:fa:c2:d5:a8:c7:b1:0a:84:86:91:ff:45:c1:c6:da:
e7:23:1c:88:af:62:12:3c:3e:b9:6f:fa:c9:5d:ec:65:1a:d7:
f1:dc:60:84:5b:dd:65:50:45:72:a8:0d:53:e3:38:d7:22:dd:
19:77:80:d3:3c:4c:80:45:c7:ab:65:44:19:fd:a6:37:29:f7:
bd:c3:e8:ab:f0:56:10:62:48:65:c2:e0:b2:3c:2b:12:6d:34:
de:c3:5b:3f:53:49:c3:7e:54:bf:3f:a7:dd:d2:9b:3f:db:6a:
e2:fa:0d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZg8Pov/DPCj50lY19mxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjUwNzI3MDEwMTIxWhcNMjUwNzI4MDEwMTIxWjAzMTEwLwYDVQQD
Eyg2ZTI2OTdhYTBlNTgxZDcwOWU5YmI1NTk3ZjhkZTA2YjFmMzkyN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MMbW+Lun4bj9GVrd4U/Vw//XIur
Ym0MQBMOyx6b5O8ZtjfPAtFUR1WTC2ULEKVYVqVyVc/n7HJ+uJ8G2D592gpt6rKA
AgR1zysigEfXSs0WUwK016NgRY69Nxy4v4oXJZUx47En/TluRw/8FL5zV8M38doD
HB7sXO6xRBwwgLjwQFK0U0pBlLbmQp57ylBgq7R8dbuazoZGckFqg1C/tIZ50SnU
4D0bbgNWNtAGQNBfSEf534V0UsXA8rWZ1FEqRXbjxRFSE97YsVhS51PMT/gu1LTh
+k9MEhc8/am0qe/1qsIpvelsFHCsKMy+UNQyjRXKaBpQkeQ9mWo4bDD1YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4ml6oOWB1wnpu1WX+N4GsfOSexMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRQ4BoqX
cwCZkW1OPGmzho+lvPZEUUwxZagCDt1iPZXJ7vqbLYVf0g34uYCJ5c+OFD0wynz/
YjZMs5kgLX63UYEFHl0ZObU48yA5hygX7bw0nrnWXZ9gm0NqsxykO/Vt5ySoKniQ
Ac5rWOdeM0JDtrFDqA2YM9EhXq3Krt8Duy+pUUrv5XvWM6B8reLLAjkAcM3X+sLV
qMexCoSGkf9Fwcba5yMciK9iEjw+uW/6yV3sZRrX8dxghFvdZVBFcqgNU+M41yLd
GXeA0zxMgEXHq2VEGf2mNyn3vcPoq/BWEGJIZcLgsjwrEm003sNbP1NJw35Uvz+n
3dKbP9tq4voNMQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:12 2025 by rpki-client