Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: Fo2h/XY4Sm1e3n3O2bqettLegJwuNBYpvVb2dmCaHH4=
Subject key identifier: A6:EA:79:33:8C:E8:57:42:E9:66:01:48:69:A1:FC:FF:B2:0A:70:60
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 0197673B484B29F5011C1584F1AA1A3E20E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 09CE
Signing time: Fri 13 Jun 2025 03:00:27 +0000
Manifest this update: Fri 13 Jun 2025 03:00:27 +0000
Manifest next update: Sat 14 Jun 2025 03:00:27 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: Uzz3fI/M44G7DlSlt/QmJ+eVJpva6ni7ljUlNtzJf1s=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:48:4b:29:f5:01:1c:15:84:f1:aa:1a:3e:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Jun 13 03:00:27 2025 GMT
Not After : Jun 14 03:00:27 2025 GMT
Subject: CN=a6ea79338ce85742e966014869a1fcffb20a7060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:6d:c6:fe:4f:0e:9e:c4:cd:ca:c8:d0:47:
98:25:5d:0c:28:2c:dc:95:64:c2:4c:ee:be:0c:39:
20:58:b8:ec:be:50:42:49:de:b2:5d:1e:01:4a:56:
19:99:f9:25:2a:16:22:cc:d2:41:42:86:48:5b:50:
f9:dd:c3:db:61:34:8b:4e:8c:11:b4:6d:e3:cd:11:
94:62:66:75:b6:95:a9:f5:b8:57:d8:71:a3:ee:a1:
bf:55:57:d6:67:9c:63:d2:f9:1c:6e:f4:cf:4a:69:
56:f6:52:60:51:57:be:b8:74:97:32:ff:1c:0b:75:
bd:a3:dc:6c:17:e2:5a:f1:49:09:82:2f:e5:f4:02:
8e:0d:53:3a:64:c4:ce:53:f2:f1:eb:c6:f0:b7:82:
89:06:c4:80:c6:45:80:a2:32:67:a8:68:43:e2:d3:
27:0a:6c:e0:21:c5:92:45:94:c3:94:de:48:0c:a9:
3d:65:02:10:07:bc:a0:40:d3:c2:14:e4:6c:05:00:
34:e2:c6:ee:99:3c:52:71:e6:ab:bc:b4:ba:eb:bf:
af:5b:ad:92:dc:cd:50:12:2a:0c:1d:38:80:7c:4e:
b9:34:e9:d8:55:cf:cc:52:ea:5f:b3:61:9e:c6:67:
06:a5:d4:59:03:ee:2a:27:c0:52:e6:ca:0b:d4:c7:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:79:33:8C:E8:57:42:E9:66:01:48:69:A1:FC:FF:B2:0A:70:60
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:85:d8:bf:8c:35:7c:3a:9d:87:cd:f5:29:11:6e:e2:9f:01:
88:b2:c2:d2:52:f2:61:11:99:e3:54:40:ee:05:0a:b3:01:9a:
e2:64:40:aa:d9:7b:c5:47:44:90:7f:89:a6:ce:aa:85:66:63:
61:35:f7:52:45:dc:ec:2c:11:94:d6:9d:d0:93:e8:82:0b:06:
82:2f:2d:9f:4e:0f:41:92:1f:04:62:30:1d:28:0b:e2:56:44:
1b:45:e9:f0:a7:28:a2:53:ff:5d:0c:e3:71:d0:4c:4b:c9:bc:
b4:73:e2:3c:f5:87:c9:b8:77:21:c0:ae:6a:21:1b:25:fb:9d:
2e:26:67:ea:12:86:d8:af:ee:49:e8:6b:73:01:43:64:22:29:
53:c2:7f:74:61:aa:58:20:8f:8d:2b:3c:a1:39:dd:bf:57:e2:
91:36:19:de:f1:f1:c7:78:16:71:9d:0e:e9:77:56:ed:b8:03:
f9:e6:9c:76:76:0c:67:fb:1e:54:77:65:9c:dc:1b:a1:f0:67:
c9:38:9f:ce:f6:4a:4e:b3:ea:ce:d8:9c:73:33:78:12:6d:d8:
e4:28:09:a8:11:07:fd:15:2e:4d:94:2f:68:9e:55:c0:f1:37:
5d:a8:0f:e2:18:92:73:57:3d:fc:55:bc:e5:53:c1:93:d6:f2:
c0:72:2d:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO0hLKfUBHBWE8aoaPiDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5
ZjcyODAwHhcNMjUwNjEzMDMwMDI3WhcNMjUwNjE0MDMwMDI3WjAzMTEwLwYDVQQD
EyhhNmVhNzkzMzhjZTg1NzQyZTk2NjAxNDg2OWExZmNmZmIyMGE3MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Ntxv5PDp7EzcrI0EeYJV0MKCzc
lWTCTO6+DDkgWLjsvlBCSd6yXR4BSlYZmfklKhYizNJBQoZIW1D53cPbYTSLTowR
tG3jzRGUYmZ1tpWp9bhX2HGj7qG/VVfWZ5xj0vkcbvTPSmlW9lJgUVe+uHSXMv8c
C3W9o9xsF+Ja8UkJgi/l9AKODVM6ZMTOU/Lx68bwt4KJBsSAxkWAojJnqGhD4tMn
CmzgIcWSRZTDlN5IDKk9ZQIQB7ygQNPCFORsBQA04sbumTxScearvLS667+vW62S
3M1QEioMHTiAfE65NOnYVc/MUupfs2GexmcGpdRZA+4qJ8BS5soL1Mdz2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbqeTOM6FdC6WYBSGmh/P+yCnBgMB8GA1UdIwQY
MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt
NDM3YTM0NmIyMmY3LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3
LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4XYv4w1
fDqdh831KRFu4p8BiLLC0lLyYRGZ41RA7gUKswGa4mRAqtl7xUdEkH+Jps6qhWZj
YTX3UkXc7CwRlNad0JPoggsGgi8tn04PQZIfBGIwHSgL4lZEG0Xp8KcoolP/XQzj
cdBMS8m8tHPiPPWHybh3IcCuaiEbJfudLiZn6hKG2K/uSehrcwFDZCIpU8J/dGGq
WCCPjSs8oTndv1fikTYZ3vHxx3gWcZ0O6XdW7bgD+eacdnYMZ/seVHdlnNwbofBn
yTifzvZKTrPqzticczN4Em3Y5CgJqBEH/RUuTZQvaJ5VwPE3XagP4hiSc1c9/FW8
5VPBk9bywHItGw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:00:04 2025 by rpki-client