Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: xSuJAXy2yAa8mn2F+EORCN5ysnXLny6AvMqFWQBhVh4=
Subject key identifier: BA:C1:4C:8D:FC:20:A9:9F:72:49:C5:F1:0C:76:D2:5C:95:82:77:54
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019759B694EE4C4F468FB170F423AEEC41A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 09C7
Signing time: Tue 10 Jun 2025 12:00:27 +0000
Manifest this update: Tue 10 Jun 2025 12:00:27 +0000
Manifest next update: Wed 11 Jun 2025 12:00:27 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: CvXEL6rUwdFdYZhEcD5pJg+Q5fsNQ58/vRKFKBOo62c=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:94:ee:4c:4f:46:8f:b1:70:f4:23:ae:ec:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Jun 10 12:00:27 2025 GMT
Not After : Jun 11 12:00:27 2025 GMT
Subject: CN=bac14c8dfc20a99f7249c5f10c76d25c95827754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:30:00:02:ae:75:4f:f1:6a:22:53:06:0d:
3c:02:ed:0f:6f:b3:73:d9:ff:2d:33:54:88:a7:31:
21:b0:2f:14:83:8a:11:b8:2f:16:21:d7:cc:8f:7b:
51:9f:fd:9f:52:6c:dd:57:c5:2f:02:af:5e:8d:41:
e6:9f:5f:7f:b4:7a:d2:81:cb:8c:3a:56:98:5d:12:
52:17:d0:9a:18:1c:c2:72:94:b3:00:25:ae:42:84:
e6:d2:7f:07:b1:b3:21:d2:de:51:3b:0a:e9:0e:15:
bc:ab:47:9b:e8:77:91:af:e6:ad:e9:83:dc:1d:7b:
5d:4e:30:31:df:1c:b8:18:78:4c:ec:a7:7b:19:c5:
f4:06:ab:fc:16:ee:c0:49:e7:c1:3d:27:69:65:fe:
dd:53:cd:89:f9:19:70:b8:90:df:ab:56:c8:49:7b:
3a:f1:fa:32:f9:81:f2:d1:4d:0e:1c:4e:85:70:39:
ea:0e:48:f9:f3:09:98:64:34:f9:1d:02:b1:25:d7:
36:73:d8:fe:e8:ed:5e:bf:25:36:77:3b:2d:1e:81:
92:c1:47:3c:87:37:35:99:cb:17:18:cd:26:0c:5a:
f0:b0:23:94:12:09:fe:48:98:d9:fb:4c:6a:62:92:
a5:ae:00:5d:14:42:30:5d:b9:7d:49:db:f2:9a:1b:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:4C:8D:FC:20:A9:9F:72:49:C5:F1:0C:76:D2:5C:95:82:77:54
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:30:ee:50:e0:d0:7f:96:03:ee:bb:f0:92:9b:e0:61:5b:c2:
55:29:ef:2e:a0:c3:39:3d:01:e5:6d:36:20:c7:80:bc:08:db:
00:cc:a0:e9:e1:89:fc:3d:2a:bc:f3:d0:69:bf:fd:f3:16:95:
79:c9:ac:8c:76:82:72:02:ac:4a:30:b8:33:b6:0c:6c:bc:10:
2d:6c:37:85:0b:90:66:14:88:54:f6:fb:4f:e6:9a:94:92:71:
5d:0d:2f:2d:6a:d2:a1:15:d5:cd:3b:5f:df:a5:cb:c3:f9:dd:
fb:13:b1:0e:20:48:4c:da:b0:02:70:ae:23:b7:db:97:ac:bd:
d7:dd:bf:94:81:c6:9d:37:1b:75:65:66:a1:4b:04:4b:98:4b:
98:03:9d:54:0a:7f:36:0f:cb:51:db:5b:13:2c:89:4c:0c:41:
95:a6:0d:bf:22:ba:4b:d5:86:c8:a0:a8:09:5a:d4:2a:6e:7a:
c4:c1:f7:ac:46:1c:42:e7:25:ae:55:c0:db:05:75:fb:9e:52:
ba:63:23:3e:54:9b:42:49:c1:1d:54:99:9b:c5:fd:ce:d1:3d:
74:de:fb:ee:38:a5:f8:00:80:7b:f5:7a:86:82:a6:db:e7:14:
3d:86:4c:6b:23:c3:a4:4a:06:e9:1f:8e:54:b8:47:d6:a8:22:
a3:50:52:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZtpTuTE9Gj7Fw9COu7EGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5
ZjcyODAwHhcNMjUwNjEwMTIwMDI3WhcNMjUwNjExMTIwMDI3WjAzMTEwLwYDVQQD
EyhiYWMxNGM4ZGZjMjBhOTlmNzI0OWM1ZjEwYzc2ZDI1Yzk1ODI3NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNUwAAKudU/xaiJTBg08Au0Pb7Nz
2f8tM1SIpzEhsC8Ug4oRuC8WIdfMj3tRn/2fUmzdV8UvAq9ejUHmn19/tHrSgcuM
OlaYXRJSF9CaGBzCcpSzACWuQoTm0n8HsbMh0t5ROwrpDhW8q0eb6HeRr+at6YPc
HXtdTjAx3xy4GHhM7Kd7GcX0Bqv8Fu7ASefBPSdpZf7dU82J+RlwuJDfq1bISXs6
8foy+YHy0U0OHE6FcDnqDkj58wmYZDT5HQKxJdc2c9j+6O1evyU2dzstHoGSwUc8
hzc1mcsXGM0mDFrwsCOUEgn+SJjZ+0xqYpKlrgBdFEIwXbl9Sdvymht3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrBTI38IKmfcknF8Qx20lyVgndUMB8GA1UdIwQY
MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt
NDM3YTM0NmIyMmY3LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3
LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjDuUODQ
f5YD7rvwkpvgYVvCVSnvLqDDOT0B5W02IMeAvAjbAMyg6eGJ/D0qvPPQab/98xaV
ecmsjHaCcgKsSjC4M7YMbLwQLWw3hQuQZhSIVPb7T+aalJJxXQ0vLWrSoRXVzTtf
36XLw/nd+xOxDiBITNqwAnCuI7fbl6y9192/lIHGnTcbdWVmoUsES5hLmAOdVAp/
Ng/LUdtbEyyJTAxBlaYNvyK6S9WGyKCoCVrUKm56xMH3rEYcQuclrlXA2wV1+55S
umMjPlSbQknBHVSZm8X9ztE9dN777jil+ACAe/V6hoKm2+cUPYZMayPDpEoG6R+O
VLhH1qgio1BSDg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:41:26 2025 by rpki-client