Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: 9bsdi7d7EG0gfNlENj4T9SAyXWW9FjswbJPZeAMNHYY=
Subject key identifier: 4C:AF:6E:C9:0B:D0:4D:D6:20:1B:C1:1F:1A:51:10:6D:70:9B:66:C1
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 0199221EF3C277931663F3EB28BC279F9E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0967
Signing time: Sun 07 Sep 2025 03:01:17 +0000
Manifest this update: Sun 07 Sep 2025 03:01:17 +0000
Manifest next update: Mon 08 Sep 2025 03:01:17 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: jT+bSc0tJ7JYSMDHt+R0jdv8XhUUm3Yt3ZRh6FH2C34=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f3:c2:77:93:16:63:f3:eb:28:bc:27:9f:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Sep 7 03:01:17 2025 GMT
Not After : Sep 8 03:01:17 2025 GMT
Subject: CN=4caf6ec90bd04dd6201bc11f1a51106d709b66c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:61:2b:d5:ec:85:34:8b:1b:e8:81:5e:c3:
9a:02:27:14:f8:1d:21:e8:fc:ef:29:0f:5a:85:0d:
ad:2e:ec:6d:ef:be:76:fa:0a:69:a2:ac:c1:bc:8e:
07:45:a0:5d:cb:2d:5e:3d:9c:ff:ce:03:1e:57:32:
a0:d9:db:56:ae:27:3e:8c:58:18:2a:3b:74:a4:ec:
a3:bf:63:ae:9b:be:66:fd:4e:d7:96:84:49:1b:de:
ca:ef:1d:10:7e:91:f0:7f:df:05:6d:ab:df:78:71:
56:ba:83:bd:a2:ff:56:0d:22:63:67:77:0f:b1:1a:
68:e2:85:d5:c2:50:25:83:a9:27:1a:a9:d3:ac:b4:
91:59:75:3d:ac:74:d5:e4:95:61:40:33:56:fe:3a:
58:d0:15:17:2a:42:06:0c:20:7c:c4:bd:c7:3e:61:
71:8e:22:c4:a7:35:b6:93:ef:2b:65:12:d4:17:34:
30:c4:cc:6e:45:be:f1:9e:a1:84:df:cd:2d:78:76:
1b:7c:41:ea:88:2d:aa:15:19:83:93:f7:9d:50:29:
e7:c2:7a:f9:a0:2b:da:ad:de:df:1e:4f:bf:f7:f9:
83:cc:5f:2b:24:c2:e0:fe:bd:43:d3:bf:ef:04:4b:
1e:a2:c7:af:c9:7b:1b:24:fb:d9:78:c9:58:af:31:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:6E:C9:0B:D0:4D:D6:20:1B:C1:1F:1A:51:10:6D:70:9B:66:C1
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:6a:02:e1:9f:96:11:7c:b6:b5:34:0b:1a:58:b7:fb:32:
80:14:64:91:b5:6d:c2:4c:e3:14:d1:ff:9d:dc:5c:f0:c5:37:
fb:65:a3:4f:0f:3a:3e:5d:7f:11:a2:8c:6d:af:1c:fb:9b:b0:
d9:cc:f4:fd:76:1b:60:18:11:a8:60:b1:9c:59:2a:89:23:53:
8d:0d:37:4c:a5:0a:10:6e:a0:6f:6c:06:5c:bf:1f:52:48:33:
f6:96:02:e5:4c:d0:50:c9:bc:db:e1:c0:ec:4e:e1:f7:92:69:
93:88:8f:e1:c0:73:73:5a:00:46:41:40:65:f8:57:f2:d5:9b:
60:e4:ac:fd:5d:de:ac:10:d4:60:78:3d:d6:ec:52:fa:4c:3b:
d9:cf:e2:83:71:d6:b0:f1:89:f1:49:3e:a8:fd:a0:ae:ca:ed:
e5:90:e5:3e:b9:c1:e0:91:a9:25:1b:e0:80:4a:de:b4:f3:63:
c0:c2:7d:2b:3b:17:9b:61:ef:65:4c:d8:18:6e:5e:44:6b:d0:
83:c1:b9:e0:69:8b:d5:a8:79:0e:9e:d7:c5:7f:d4:b6:c4:27:
0a:2b:81:6d:20:0e:ef:62:51:ba:75:95:45:91:19:8c:a2:62:
30:c9:51:8f:41:0d:88:ba:ec:13:f0:a5:d6:7c:c3:11:bd:61:
93:56:18:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHvPCd5MWY/PrKLwnn54AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj
MzVkNjIwHhcNMjUwOTA3MDMwMTE3WhcNMjUwOTA4MDMwMTE3WjAzMTEwLwYDVQQD
Eyg0Y2FmNmVjOTBiZDA0ZGQ2MjAxYmMxMWYxYTUxMTA2ZDcwOWI2NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnothK9XshTSLG+iBXsOaAicU+B0h
6PzvKQ9ahQ2tLuxt7752+gppoqzBvI4HRaBdyy1ePZz/zgMeVzKg2dtWric+jFgY
Kjt0pOyjv2Oum75m/U7XloRJG97K7x0QfpHwf98FbavfeHFWuoO9ov9WDSJjZ3cP
sRpo4oXVwlAlg6knGqnTrLSRWXU9rHTV5JVhQDNW/jpY0BUXKkIGDCB8xL3HPmFx
jiLEpzW2k+8rZRLUFzQwxMxuRb7xnqGE380teHYbfEHqiC2qFRmDk/edUCnnwnr5
oCvard7fHk+/9/mDzF8rJMLg/r1D07/vBEseosevyXsbJPvZeMlYrzGtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyvbskL0E3WIBvBHxpREG1wm2bBMB8GA1UdIwQY
MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt
ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy
LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3NqAuGf
lhF8trU0CxpYt/sygBRkkbVtwkzjFNH/ndxc8MU3+2WjTw86Pl1/EaKMba8c+5uw
2cz0/XYbYBgRqGCxnFkqiSNTjQ03TKUKEG6gb2wGXL8fUkgz9pYC5UzQUMm82+HA
7E7h95Jpk4iP4cBzc1oARkFAZfhX8tWbYOSs/V3erBDUYHg91uxS+kw72c/ig3HW
sPGJ8Uk+qP2grsrt5ZDlPrnB4JGpJRvggEretPNjwMJ9KzsXm2HvZUzYGG5eRGvQ
g8G54GmL1ah5Dp7XxX/UtsQnCiuBbSAO72JRunWVRZEZjKJiMMlRj0ENiLrsE/Cl
1nzDEb1hk1YY/A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:58 2025 by rpki-client