
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: 17gx8gbWwWInnS1kymVswE1CEirmbbPTvKkFcqYy3yQ=
Subject key identifier: E6:1D:5D:D1:7A:7B:98:C2:75:DA:3D:53:45:BC:E6:8D:E5:44:A2:46
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 0199233187F9EC3B4A27EC238A1E7D8ADB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:01:12 +0000
Manifest this update: Sun 07 Sep 2025 08:01:12 +0000
Manifest next update: Mon 08 Sep 2025 08:01:12 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: 1jSrGSHhtR1s7Vr2ziWM/L7zJ/xU14NW2Bq5v3JPYY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:87:f9:ec:3b:4a:27:ec:23:8a:1e:7d:8a:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Sep 7 08:01:12 2025 GMT
Not After : Sep 8 08:01:12 2025 GMT
Subject: CN=e61d5dd17a7b98c275da3d5345bce68de544a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:85:67:d4:7d:6b:63:b4:61:ac:ff:c1:5f:
45:9f:c8:a8:7f:10:66:52:66:b0:fd:05:49:2f:ac:
cd:35:c1:bb:2a:44:66:c1:e3:6e:2e:4b:98:d3:9e:
6b:dc:36:57:67:f7:7b:d1:b3:da:a6:68:72:0f:16:
eb:7d:87:ff:f2:f9:60:a1:c3:e9:25:05:27:6c:44:
ed:9d:39:18:ac:a9:6a:cf:11:a3:56:31:38:25:af:
f7:b4:34:a8:b0:14:fb:19:88:3e:9f:b6:d5:36:59:
1b:71:13:f1:a2:ba:89:46:97:c0:d1:f6:66:b4:12:
49:7d:c4:df:f8:77:d8:2f:57:a0:ae:61:24:f7:c8:
70:4b:53:7f:b0:b3:b1:b0:f9:2b:1c:3d:4d:bd:3e:
0a:7e:37:3f:38:53:45:12:93:de:d8:f7:47:68:15:
bc:16:b1:c3:fd:80:bf:d9:5e:b9:9b:35:8f:f7:7c:
95:ed:43:8a:aa:0a:35:f8:d3:e0:6c:bb:fb:41:ee:
2a:ea:41:dc:1d:48:2f:4d:00:0c:20:56:01:bb:77:
7e:46:f9:22:4f:7a:2f:ac:16:1f:94:ce:0b:2e:78:
6e:35:ea:5a:2f:39:83:28:bf:39:03:16:02:80:a5:
69:d9:d3:b6:b9:ed:e7:cb:b6:c8:b9:5e:af:84:25:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:5D:D1:7A:7B:98:C2:75:DA:3D:53:45:BC:E6:8D:E5:44:A2:46
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dd:1a:a5:f3:25:cb:e0:9d:f6:16:74:56:ff:04:f7:9f:2e:
f3:6f:37:63:54:80:9d:1a:be:80:f0:23:9c:8f:16:f9:d2:ca:
04:cc:63:f1:e5:46:0b:dd:bb:cd:e5:86:14:f5:d9:db:f7:bf:
c1:d4:df:58:3c:64:c2:30:4b:e3:13:6c:13:3c:70:88:54:a5:
05:fb:89:8a:b3:44:3e:aa:65:fb:eb:14:2a:bc:b5:e3:3d:9e:
4f:c1:a5:51:03:86:25:86:d3:e3:f7:c5:77:64:fb:1c:83:bf:
ac:78:ec:cb:7b:17:f5:19:a7:e2:f3:7d:a2:40:cf:99:07:cd:
21:6b:d1:df:a3:0c:9a:87:fe:57:ce:fb:a7:62:6b:47:e8:48:
05:60:d0:f7:d9:4a:90:a9:df:0c:76:86:6f:4f:25:93:4b:78:
5e:2a:c2:95:1f:a1:44:c9:7a:ad:b8:92:98:a4:17:02:5f:2c:
7d:0a:76:27:d3:bf:b0:61:60:5f:c6:f6:4a:88:62:22:6d:8c:
e3:7c:5b:d6:b7:53:a0:49:18:b9:e9:27:1d:51:1f:12:f2:ec:
ba:b0:af:ec:96:1d:88:52:18:8c:72:db:43:9c:59:75:18:b0:
c1:c3:b2:32:91:5e:d0:95:81:52:3b:6f:13:5c:c3:41:66:75:
aa:58:8b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYf57DtKJ+wjih59itt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjUwOTA3MDgwMTEyWhcNMjUwOTA4MDgwMTEyWjAzMTEwLwYDVQQD
EyhlNjFkNWRkMTdhN2I5OGMyNzVkYTNkNTM0NWJjZTY4ZGU1NDRhMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqOFZ9R9a2O0Yaz/wV9Fn8iofxBm
Umaw/QVJL6zNNcG7KkRmweNuLkuY055r3DZXZ/d70bPapmhyDxbrfYf/8vlgocPp
JQUnbETtnTkYrKlqzxGjVjE4Ja/3tDSosBT7GYg+n7bVNlkbcRPxorqJRpfA0fZm
tBJJfcTf+HfYL1egrmEk98hwS1N/sLOxsPkrHD1NvT4Kfjc/OFNFEpPe2PdHaBW8
FrHD/YC/2V65mzWP93yV7UOKqgo1+NPgbLv7Qe4q6kHcHUgvTQAMIFYBu3d+Rvki
T3ovrBYflM4LLnhuNepaLzmDKL85AxYCgKVp2dO2ue3ny7bIuV6vhCWDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYdXdF6e5jCddo9U0W85o3lRKJGMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd0apfMl
y+Cd9hZ0Vv8E958u8283Y1SAnRq+gPAjnI8W+dLKBMxj8eVGC927zeWGFPXZ2/e/
wdTfWDxkwjBL4xNsEzxwiFSlBfuJirNEPqpl++sUKry14z2eT8GlUQOGJYbT4/fF
d2T7HIO/rHjsy3sX9Rmn4vN9okDPmQfNIWvR36MMmof+V877p2JrR+hIBWDQ99lK
kKnfDHaGb08lk0t4XirClR+hRMl6rbiSmKQXAl8sfQp2J9O/sGFgX8b2SohiIm2M
43xb1rdToEkYueknHVEfEvLsurCv7JYdiFIYjHLbQ5xZdRiwwcOyMpFe0JWBUjtv
E1zDQWZ1qliLUw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:29 2025 by rpki-client