Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: KyNJodPgO/H4xse+g2R9Rb9LAhWAHArMNViQ3sgDyTM=
Subject key identifier: 77:15:C3:55:26:D7:AA:A6:34:07:27:D8:29:7A:78:92:25:11:1D:F7
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 019921E7DC621BB30B3D82AE71731B79E8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 0624
Signing time: Sun 07 Sep 2025 02:01:07 +0000
Manifest this update: Sun 07 Sep 2025 02:01:07 +0000
Manifest next update: Mon 08 Sep 2025 02:01:07 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: Tn+nWT91HUBOFBf06YS4AvRhkZ1qy2kzcRwG0hrTR0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:dc:62:1b:b3:0b:3d:82:ae:71:73:1b:79:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Sep 7 02:01:07 2025 GMT
Not After : Sep 8 02:01:07 2025 GMT
Subject: CN=7715c35526d7aaa6340727d8297a789225111df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:7e:f9:d8:af:77:e1:54:ac:35:fc:ca:d4:
34:16:b1:f8:90:08:7a:7d:fc:54:c2:2c:d3:e6:7f:
69:e7:e4:7a:43:31:cd:c0:43:47:c1:f2:8e:8c:a6:
b1:95:2a:fc:de:02:ce:99:25:3f:72:94:d6:39:e4:
51:e5:7b:34:a3:cc:3a:7c:b6:07:7c:df:fc:36:73:
39:7f:39:c6:22:84:24:99:0f:84:ab:a1:81:9d:4f:
0a:37:e2:ce:f4:98:86:ad:9f:0c:0f:1f:78:83:b5:
13:72:67:78:ba:0b:cf:5e:d4:4d:ab:27:86:ae:8a:
8a:18:e3:6e:ad:bb:58:38:71:c6:38:5c:c2:6d:e0:
e8:09:11:98:6e:03:60:b5:1a:75:07:40:ae:c5:0a:
5d:91:07:64:50:bf:b3:ce:55:7f:18:da:3c:e9:c5:
34:6e:fd:7f:c5:ed:38:e2:c3:c2:66:97:e6:ca:63:
fe:50:d6:46:07:2b:96:51:09:ef:70:a9:61:16:a4:
43:d4:23:61:06:0f:f4:3b:c3:f5:61:e4:41:14:ea:
92:76:ca:41:3f:cd:c0:8a:16:c5:d8:e2:aa:57:1d:
71:4c:c8:d2:41:48:d2:78:49:91:01:07:80:84:c3:
07:d7:a4:7d:a9:82:4d:27:eb:f2:d6:ed:03:20:27:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:C3:55:26:D7:AA:A6:34:07:27:D8:29:7A:78:92:25:11:1D:F7
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:8a:84:ad:66:42:d2:b2:46:95:63:96:34:4b:78:75:06:
42:de:a1:c3:87:b2:2a:5a:bd:b8:fb:e8:96:8b:3f:05:15:21:
4a:09:6e:c1:61:15:1b:f4:33:d1:a5:86:c0:25:b3:f5:df:e9:
0e:fc:7b:ee:24:d3:00:97:6f:78:37:46:72:99:09:ab:69:a9:
dd:b4:03:f6:fb:94:b6:a7:ed:52:73:ab:b8:d8:00:b3:87:6b:
f6:90:ba:7a:b7:16:bc:e7:3e:d2:72:30:bb:74:bd:17:28:c9:
4b:2d:4b:8b:f7:9d:e3:74:12:e7:24:55:0b:7e:99:d2:e2:5a:
33:7c:86:53:8d:a6:bd:1e:04:ef:64:20:c2:b9:cc:0e:19:dc:
6c:fb:d3:2b:f9:35:e8:4e:b5:b6:8c:33:29:15:78:e3:f9:d2:
bb:1a:d9:6b:b2:c9:69:1d:60:1f:fa:f0:3e:3b:dc:59:ae:09:
93:04:2b:48:64:c9:e5:4f:98:de:1b:cc:5d:7f:60:8f:86:7e:
5a:48:45:30:bf:61:03:37:f3:d1:8f:95:d2:cb:73:1e:74:2d:
83:0a:08:07:54:14:03:44:e6:ef:a0:ad:8f:35:9b:4b:ba:92:
ed:d7:5f:60:77:f5:61:7e:f5:fa:43:a2:7d:9e:64:a8:57:ad:
b3:65:69:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh59xiG7MLPYKucXMbeejGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODRjYzdjMWIzM2QyNzk3N2ZjY2RiMzRiM2NjMjk0YTJh
NDA4OGMwHhcNMjUwOTA3MDIwMTA3WhcNMjUwOTA4MDIwMTA3WjAzMTEwLwYDVQQD
Eyg3NzE1YzM1NTI2ZDdhYWE2MzQwNzI3ZDgyOTdhNzg5MjI1MTExZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobR++divd+FUrDX8ytQ0FrH4kAh6
ffxUwizT5n9p5+R6QzHNwENHwfKOjKaxlSr83gLOmSU/cpTWOeRR5Xs0o8w6fLYH
fN/8NnM5fznGIoQkmQ+Eq6GBnU8KN+LO9JiGrZ8MDx94g7UTcmd4ugvPXtRNqyeG
roqKGONurbtYOHHGOFzCbeDoCRGYbgNgtRp1B0CuxQpdkQdkUL+zzlV/GNo86cU0
bv1/xe044sPCZpfmymP+UNZGByuWUQnvcKlhFqRD1CNhBg/0O8P1YeRBFOqSdspB
P83AihbF2OKqVx1xTMjSQUjSeEmRAQeAhMMH16R9qYJNJ+vy1u0DICdF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcVw1Um16qmNAcn2Cl6eJIlER33MB8GA1UdIwQY
MBaAFJeEzHwbM9J5d/zNs0s8wpSipAiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmIt
Yzg4NmZiNmIzYmNkLzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmItYzg4NmZiNmIzYmNk
LzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQaKhK1m
QtKyRpVjljRLeHUGQt6hw4eyKlq9uPvolos/BRUhSgluwWEVG/Qz0aWGwCWz9d/p
Dvx77iTTAJdveDdGcpkJq2mp3bQD9vuUtqftUnOruNgAs4dr9pC6ercWvOc+0nIw
u3S9FyjJSy1Li/ed43QS5yRVC36Z0uJaM3yGU42mvR4E72QgwrnMDhncbPvTK/k1
6E61towzKRV44/nSuxrZa7LJaR1gH/rwPjvcWa4JkwQrSGTJ5U+Y3hvMXX9gj4Z+
WkhFML9hAzfz0Y+V0stzHnQtgwoIB1QUA0Tm76CtjzWbS7qS7ddfYHf1YX71+kOi
fZ5kqFets2VpgA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client