Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: PPNSYNEpfFioiHEPbHalSFgKlfzbr+kD+VvQ6JVOdNM=
Subject key identifier: E8:13:A3:BF:7B:E4:C9:3A:A3:B2:2D:50:74:B4:C7:72:36:1D:21:C2
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01993380E5E4E9FD371645DC7B7E91027167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 1687
Signing time: Wed 10 Sep 2025 12:01:49 +0000
Manifest this update: Wed 10 Sep 2025 12:01:49 +0000
Manifest next update: Thu 11 Sep 2025 12:01:49 +0000
Files and hashes: 1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: Z9bmSXS7LGjFzRFYvKF6Ik8qNdDSYI4B5yl5RWBOsv0=)
7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:e5:e4:e9:fd:37:16:45:dc:7b:7e:91:02:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Sep 10 12:01:49 2025 GMT
Not After : Sep 11 12:01:49 2025 GMT
Subject: CN=e813a3bf7be4c93aa3b22d5074b4c772361d21c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:d0:06:6a:6f:d3:12:86:07:fc:9a:cf:f4:
2f:08:a0:c1:5e:d4:67:ce:5d:39:93:04:82:29:99:
8f:26:25:95:03:0b:29:83:64:0f:75:11:ba:89:97:
93:dd:c3:1c:13:e2:32:80:8c:a4:80:89:1b:f7:27:
c5:46:71:6f:01:3a:29:56:5b:63:d6:b9:86:68:db:
48:d1:b2:bc:af:54:78:df:b5:37:76:f3:77:4e:87:
f7:d6:23:cf:aa:84:00:eb:49:a3:1d:95:13:ec:49:
ca:6a:8a:f1:f9:c8:99:11:81:43:2f:c4:bf:3e:85:
ec:0b:ed:57:eb:c9:df:d7:a5:df:10:40:c0:bc:75:
d7:be:16:fc:c4:7c:48:7c:08:e4:6a:c6:64:35:d0:
b1:75:2c:83:36:60:a3:ef:77:79:5a:bb:8c:07:3e:
70:3a:96:26:16:9d:d3:89:48:ea:0f:f6:a7:77:d7:
4f:b5:ad:f9:c5:54:7b:0e:dd:2b:f1:15:0e:47:5f:
36:54:18:e2:ca:39:0a:21:de:34:46:71:42:02:2b:
9c:77:c9:d0:75:f7:fb:ac:da:1c:2f:d4:d3:30:ca:
44:2d:98:bd:4a:ea:13:25:a8:da:e4:39:74:25:fd:
ef:5e:87:12:c6:b8:0c:af:61:af:57:d8:ff:59:53:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:A3:BF:7B:E4:C9:3A:A3:B2:2D:50:74:B4:C7:72:36:1D:21:C2
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:4e:b0:f1:32:dd:45:c5:20:c0:a2:64:fe:86:30:5b:10:
7f:51:af:02:83:80:96:0c:59:65:ca:53:d4:86:98:69:7f:95:
39:a6:cd:12:b0:e3:ec:b3:4b:f2:24:b7:8e:fc:6b:3b:40:e6:
0a:4a:39:d5:d0:1b:0a:16:23:f1:25:bd:7e:d9:49:fa:ab:54:
86:80:19:38:17:43:c5:c6:3d:f3:1f:4c:09:46:da:57:55:c9:
19:9d:dd:a8:49:84:0b:52:09:95:1d:df:a5:36:07:86:5d:03:
34:7c:84:0c:6a:c0:1c:33:eb:f0:b0:cf:b4:72:f3:d6:99:3d:
fb:91:1a:c7:80:f8:d4:a9:c9:7f:50:4b:3e:fd:96:f9:9f:0b:
5d:d6:f0:e1:e5:5e:f2:97:f9:4c:61:98:7c:7d:ef:10:6c:06:
63:c6:2e:e2:a3:63:26:53:49:df:75:eb:f2:21:51:7e:38:7d:
09:26:c0:ad:fc:c1:40:de:39:3e:71:3e:0b:75:04:48:26:53:
83:88:38:f5:ad:b2:c4:c0:c2:80:37:f1:23:c7:59:23:db:1a:
a2:84:d3:d0:4d:3b:97:5c:f8:5e:da:22:75:ab:f5:dd:f3:b8:
cd:b3:c6:9d:f1:48:cd:3d:0a:9c:de:f4:03:35:77:82:cf:f7:
26:b9:d2:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzgOXk6f03FkXce36RAnFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz
OTM0YjgwHhcNMjUwOTEwMTIwMTQ5WhcNMjUwOTExMTIwMTQ5WjAzMTEwLwYDVQQD
EyhlODEzYTNiZjdiZTRjOTNhYTNiMjJkNTA3NGI0Yzc3MjM2MWQyMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFvQBmpv0xKGB/yaz/QvCKDBXtRn
zl05kwSCKZmPJiWVAwspg2QPdRG6iZeT3cMcE+IygIykgIkb9yfFRnFvATopVltj
1rmGaNtI0bK8r1R437U3dvN3Tof31iPPqoQA60mjHZUT7EnKaorx+ciZEYFDL8S/
PoXsC+1X68nf16XfEEDAvHXXvhb8xHxIfAjkasZkNdCxdSyDNmCj73d5WruMBz5w
OpYmFp3TiUjqD/and9dPta35xVR7Dt0r8RUOR182VBjiyjkKId40RnFCAiucd8nQ
dff7rNocL9TTMMpELZi9SuoTJaja5Dl0Jf3vXocSxrgMr2GvV9j/WVMWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgTo7975Mk6o7ItUHS0x3I2HSHCMB8GA1UdIwQY
MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt
MDI1M2QwNGZiOGZmLzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm
LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNtOsPEy
3UXFIMCiZP6GMFsQf1GvAoOAlgxZZcpT1IaYaX+VOabNErDj7LNL8iS3jvxrO0Dm
Cko51dAbChYj8SW9ftlJ+qtUhoAZOBdDxcY98x9MCUbaV1XJGZ3dqEmEC1IJlR3f
pTYHhl0DNHyEDGrAHDPr8LDPtHLz1pk9+5Eax4D41KnJf1BLPv2W+Z8LXdbw4eVe
8pf5TGGYfH3vEGwGY8Yu4qNjJlNJ33Xr8iFRfjh9CSbArfzBQN45PnE+C3UESCZT
g4g49a2yxMDCgDfxI8dZI9saooTT0E07l1z4Xtoidav13fO4zbPGnfFIzT0KnN70
AzV3gs/3JrnS3Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:55:53 2025 by rpki-client