Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: 0wtG+MCy/Eu4TonTIu8jjUPa9m++HBYbbaLGiCMbMOk=
Subject key identifier: 3C:3C:65:F2:CC:4C:6E:BD:4D:08:1A:25:F7:47:9D:64:1D:E3:59:34
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 0198E5D4EC1D655D8B12283242A28777E973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 1655
Signing time: Tue 26 Aug 2025 10:03:13 +0000
Manifest this update: Tue 26 Aug 2025 10:03:13 +0000
Manifest next update: Wed 27 Aug 2025 10:03:13 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: cpdLftGnokEt1Hrv5zSPGYoir130mEl86rrnVmZv1p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d4:ec:1d:65:5d:8b:12:28:32:42:a2:87:77:e9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Aug 26 10:03:13 2025 GMT
Not After : Aug 27 10:03:13 2025 GMT
Subject: CN=3c3c65f2cc4c6ebd4d081a25f7479d641de35934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:5a:4b:56:21:e2:bf:77:97:7e:59:f9:b4:
cd:cc:0f:df:5a:e2:b8:85:98:04:a0:8a:92:a1:ba:
18:3f:de:27:ed:c2:c0:e8:ce:d0:86:56:45:2c:92:
03:b9:74:83:d8:4f:81:67:93:28:bb:4f:50:ba:0f:
41:de:cc:a4:05:7f:c9:37:a8:83:23:63:d3:0f:c7:
aa:3d:eb:2b:51:21:d4:71:83:15:c0:21:83:2a:90:
bd:b9:f6:a8:19:24:6d:02:f1:82:4f:90:0f:24:86:
c2:dd:fe:40:7e:9b:04:9e:de:e4:42:44:bf:97:db:
e7:b3:ad:e0:b4:33:7e:e2:e5:63:69:3c:e5:a3:9b:
ee:d7:2d:6b:ff:f3:fa:7b:fc:32:2b:0e:cc:8d:0d:
71:55:84:b6:90:ac:42:b3:ce:98:3c:29:af:ae:97:
11:c6:17:d3:de:cf:1f:d4:c3:46:50:13:f7:1d:a7:
6d:a8:24:22:5b:2e:7a:e1:ff:e8:65:dd:af:b1:11:
97:12:56:be:1e:0a:2e:7e:16:bf:41:d9:ab:35:8c:
42:45:1c:51:00:ef:4f:ae:60:30:73:46:3b:1e:2f:
b3:b7:1e:4e:fc:31:d2:01:94:09:4c:98:b3:de:6f:
27:02:6f:f6:51:4b:1f:cf:a8:c4:d6:ca:56:53:9c:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:65:F2:CC:4C:6E:BD:4D:08:1A:25:F7:47:9D:64:1D:E3:59:34
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:50:bb:69:41:ec:48:e1:13:10:23:f0:5b:77:28:ac:36:3b:
5e:b1:00:ac:c1:84:c4:b0:32:71:fc:56:69:6c:fc:9c:d3:3c:
b6:ed:52:c6:71:9b:ed:72:33:65:7a:67:8e:84:67:ad:b8:46:
6f:37:7a:bf:3e:36:4e:e5:78:28:aa:24:69:50:90:60:df:89:
84:0a:5f:75:b7:02:dc:9c:fc:80:20:6c:de:a8:27:4d:07:a4:
e4:eb:02:1e:5a:e1:55:c0:8a:e7:cc:aa:81:3d:be:0d:94:5d:
af:0c:eb:9b:73:8e:a1:1f:ec:da:68:b5:5a:b3:11:30:b6:bd:
ab:eb:a4:07:b7:a9:69:7d:9f:6a:e1:ce:09:70:e0:bb:7d:9d:
74:44:13:43:96:99:b6:1d:4b:b6:17:52:c1:bf:08:bc:2a:70:
b4:5a:d5:7d:e5:55:29:30:66:64:8e:a8:f4:8f:19:c7:f1:10:
ce:97:6a:16:05:f8:e2:ec:0a:1c:f7:e9:fe:13:30:cd:1b:66:
53:11:a7:c3:6b:af:ea:19:5a:4f:73:0d:f2:86:1a:23:88:81:
3e:71:d5:88:1e:8a:a0:bd:06:c8:64:a9:57:f7:2e:d8:b4:17:
4f:8f:f7:79:d1:ac:e2:3d:71:88:59:94:a2:e1:d5:11:e7:3f:
56:1a:de:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjl1OwdZV2LEigyQqKHd+lzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz
NDJkNjQwHhcNMjUwODI2MTAwMzEzWhcNMjUwODI3MTAwMzEzWjAzMTEwLwYDVQQD
EygzYzNjNjVmMmNjNGM2ZWJkNGQwODFhMjVmNzQ3OWQ2NDFkZTM1OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudNaS1Yh4r93l35Z+bTNzA/fWuK4
hZgEoIqSoboYP94n7cLA6M7QhlZFLJIDuXSD2E+BZ5Mou09Qug9B3sykBX/JN6iD
I2PTD8eqPesrUSHUcYMVwCGDKpC9ufaoGSRtAvGCT5APJIbC3f5AfpsEnt7kQkS/
l9vns63gtDN+4uVjaTzlo5vu1y1r//P6e/wyKw7MjQ1xVYS2kKxCs86YPCmvrpcR
xhfT3s8f1MNGUBP3HadtqCQiWy564f/oZd2vsRGXEla+Hgoufha/QdmrNYxCRRxR
AO9PrmAwc0Y7Hi+ztx5O/DHSAZQJTJiz3m8nAm/2UUsfz6jE1spWU5zwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw8ZfLMTG69TQgaJfdHnWQd41k0MB8GA1UdIwQY
MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt
MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3
LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflC7aUHs
SOETECPwW3corDY7XrEArMGExLAycfxWaWz8nNM8tu1SxnGb7XIzZXpnjoRnrbhG
bzd6vz42TuV4KKokaVCQYN+JhApfdbcC3Jz8gCBs3qgnTQek5OsCHlrhVcCK58yq
gT2+DZRdrwzrm3OOoR/s2mi1WrMRMLa9q+ukB7epaX2fauHOCXDgu32ddEQTQ5aZ
th1LthdSwb8IvCpwtFrVfeVVKTBmZI6o9I8Zx/EQzpdqFgX44uwKHPfp/hMwzRtm
UxGnw2uv6hlaT3MN8oYaI4iBPnHViB6KoL0GyGSpV/cu2LQXT4/3edGs4j1xiFmU
ouHVEec/VhreSQ==
-----END CERTIFICATE-----
Generated at Tue Aug 26 17:03:37 2025 by rpki-client