
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: sr+K31ZgyVQyyfJB+tElvSqdHQ3D0T6LWFdY7jg/QC4=
Subject key identifier: 02:7B:CC:34:CB:D3:09:03:2F:3C:1A:1C:16:B3:FE:9E:25:49:6E:CD
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 0199221E61BFAAC035B0733C6049CE15490B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:40 +0000
Manifest this update: Sun 07 Sep 2025 03:00:40 +0000
Manifest next update: Mon 08 Sep 2025 03:00:40 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: qCPUQo5QTXBW2z7TfSkLAkOG163xwpgmuz4UhSeXVYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:61:bf:aa:c0:35:b0:73:3c:60:49:ce:15:49:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Sep 7 03:00:40 2025 GMT
Not After : Sep 8 03:00:40 2025 GMT
Subject: CN=027bcc34cbd309032f3c1a1c16b3fe9e25496ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:20:d1:9c:2e:28:f0:cd:41:8d:e8:54:a7:
3f:c2:b8:60:ac:dc:76:13:18:7d:46:b6:8c:e2:ed:
cb:9f:84:78:3a:c0:a1:3c:64:f8:80:a3:30:46:4f:
31:cb:4d:80:36:4f:82:13:b3:b2:b6:18:90:b9:f7:
e9:09:03:75:15:df:ff:40:4f:5f:ac:c9:bc:59:b2:
31:18:a4:90:21:04:d8:9e:37:b4:44:d0:d3:ff:a9:
26:93:62:ff:f3:60:d8:e2:0b:d7:93:de:73:9e:4e:
de:f6:da:c0:25:db:09:1e:87:29:a5:66:c0:72:a7:
ba:d9:a3:9e:b6:b6:46:5d:e0:84:4a:42:e2:61:70:
d7:d6:38:d7:c2:ff:ee:5a:c6:da:43:ce:04:dd:46:
bc:67:ad:f3:34:fc:ca:24:cb:3b:a1:5e:6b:f0:8d:
df:68:a7:b3:92:ab:5e:a7:6c:52:e6:da:c0:6a:61:
7b:ab:a6:c4:c9:f9:7a:9c:e2:2b:95:8a:13:cb:23:
14:ff:5d:0e:71:83:d6:c6:ad:8e:a8:a5:00:69:4a:
b2:a8:47:19:f8:5f:9f:ca:ad:af:7a:a0:5a:8a:3b:
7a:ea:26:03:c2:8f:dc:d0:30:cb:15:f3:31:cf:5c:
dd:08:cd:c9:7f:24:ff:bc:1c:0a:36:6f:91:e5:99:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7B:CC:34:CB:D3:09:03:2F:3C:1A:1C:16:B3:FE:9E:25:49:6E:CD
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:97:03:74:71:4c:ca:1c:20:e6:25:60:a1:01:8b:33:e1:04:
1d:24:a8:c9:d6:9e:54:c6:13:b1:5e:e6:46:38:f1:a0:fb:d0:
d5:af:4c:dc:9e:04:3f:40:b6:54:6f:25:d4:d8:d8:f4:8d:a1:
54:6b:a2:3f:ec:80:49:36:4d:0d:49:90:f2:c9:54:78:52:75:
4e:35:21:63:4d:24:ba:6e:39:8c:a1:89:de:37:44:75:ee:8d:
e1:2e:32:13:4f:72:52:b0:d4:3d:69:81:fb:f9:17:6d:10:49:
41:d0:73:8c:3c:6e:20:13:ab:97:a9:54:e3:0a:f1:12:f2:48:
e7:7d:44:10:87:62:7f:47:e7:15:d9:ae:23:ae:a8:fb:61:b2:
f5:64:68:cd:3f:34:59:a5:09:d4:87:fe:b1:24:a0:83:0c:81:
4d:ff:c4:0a:7d:c8:0e:e6:05:06:f0:53:81:81:d0:cf:16:13:
bd:7a:d9:b6:2a:45:2d:e1:f1:29:3d:09:30:eb:e4:46:89:fb:
c5:e0:2d:ae:ef:33:f3:04:40:cb:31:d4:4c:fe:50:3b:34:a2:
5e:e4:00:d5:66:0c:4e:a5:d7:7f:47:0b:77:e7:39:b3:4b:ad:
be:63:88:d7:49:67:ca:43:f9:49:ba:cf:55:50:0d:54:85:b7:
1a:70:12:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHmG/qsA1sHM8YEnOFUkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx
ZTJiNjAwHhcNMjUwOTA3MDMwMDQwWhcNMjUwOTA4MDMwMDQwWjAzMTEwLwYDVQQD
EygwMjdiY2MzNGNiZDMwOTAzMmYzYzFhMWMxNmIzZmU5ZTI1NDk2ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw38g0ZwuKPDNQY3oVKc/wrhgrNx2
Exh9RraM4u3Ln4R4OsChPGT4gKMwRk8xy02ANk+CE7OythiQuffpCQN1Fd//QE9f
rMm8WbIxGKSQIQTYnje0RNDT/6kmk2L/82DY4gvXk95znk7e9trAJdsJHocppWbA
cqe62aOetrZGXeCESkLiYXDX1jjXwv/uWsbaQ84E3Ua8Z63zNPzKJMs7oV5r8I3f
aKezkqtep2xS5trAamF7q6bEyfl6nOIrlYoTyyMU/10OcYPWxq2OqKUAaUqyqEcZ
+F+fyq2veqBaijt66iYDwo/c0DDLFfMxz1zdCM3JfyT/vBwKNm+R5Zn93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ7zDTL0wkDLzwaHBaz/p4lSW7NMB8GA1UdIwQY
MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt
OTA1NDA3ZWIwZjUzLzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz
LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJcDdHFM
yhwg5iVgoQGLM+EEHSSoydaeVMYTsV7mRjjxoPvQ1a9M3J4EP0C2VG8l1NjY9I2h
VGuiP+yASTZNDUmQ8slUeFJ1TjUhY00kum45jKGJ3jdEde6N4S4yE09yUrDUPWmB
+/kXbRBJQdBzjDxuIBOrl6lU4wrxEvJI531EEIdif0fnFdmuI66o+2Gy9WRozT80
WaUJ1If+sSSggwyBTf/ECn3IDuYFBvBTgYHQzxYTvXrZtipFLeHxKT0JMOvkRon7
xeAtru8z8wRAyzHUTP5QOzSiXuQA1WYMTqXXf0cLd+c5s0utvmOI10lnykP5SbrP
VVANVIW3GnASqA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:29 2025 by rpki-client