Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: iNVkqnO3ctbZtbWdu4uuFdB/3nKmkeqvrPqu5JwY42E=
Subject key identifier: 84:33:3B:36:9B:89:9F:02:79:AF:FB:0A:F4:30:6F:0A:B3:EA:CB:28
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 0198D583A742EE97765692521CEBAEBDED7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: Bn2OgZ+TCYQR55EvSIRvTD0JWddE8OlNAnXD8Ak2Avs=)
2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a7:42:ee:97:76:56:92:52:1c:eb:ae:bd:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=84333b369b899f0279affb0af4306f0ab3eacb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:89:09:0d:81:4d:43:1d:2e:0c:86:1b:1c:
74:0e:0e:ee:2d:ca:d6:a1:b8:61:e6:20:1b:4f:05:
f3:ba:8f:b7:b7:d6:dd:ee:65:a1:4b:fb:49:4b:55:
8c:47:ad:52:b9:66:a7:cb:dc:d1:d1:3a:95:5d:d6:
fe:40:70:ba:a8:cc:a6:f0:c5:19:1e:ab:46:ea:16:
07:1c:5e:a2:2a:b2:48:d5:00:88:29:5c:4a:8a:27:
77:ac:67:d5:60:1f:a4:45:0a:be:67:a3:ef:7a:c0:
2a:a4:42:d0:97:7c:1d:a1:74:d7:30:2e:62:06:9e:
30:57:3a:91:e0:8d:32:f9:d1:eb:e5:d4:07:82:eb:
fe:04:74:6c:68:cb:c5:f9:37:a1:17:f2:d4:23:23:
10:9d:57:26:49:91:07:5c:55:f7:d3:73:c6:91:8a:
c3:e9:43:45:c3:46:af:5f:8b:88:65:e3:08:6f:00:
f5:5b:55:e8:60:4c:ee:1f:65:5d:cf:5e:c8:a3:b1:
3d:c2:7d:1d:ac:85:0b:1a:59:f1:21:8b:61:28:a6:
a0:19:d5:fa:15:43:fa:3f:74:08:fa:41:b8:fa:f9:
e2:dd:a3:ea:5b:fc:b6:10:f2:05:27:3f:c3:a8:76:
37:8b:1d:92:75:15:c2:e7:7f:8c:a1:21:e4:52:dc:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:3B:36:9B:89:9F:02:79:AF:FB:0A:F4:30:6F:0A:B3:EA:CB:28
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e7:ca:6f:32:b3:e2:2a:a0:6b:f5:ae:da:4a:dc:9a:fa:a0:
51:63:52:7c:67:cc:c2:fd:56:85:d5:87:a4:f7:95:9f:27:3e:
06:01:71:ff:0f:0c:12:3f:e0:48:89:38:8d:3d:ec:e1:82:fd:
cc:4d:d0:1f:80:cc:18:59:e6:c2:30:97:ac:2a:39:bc:b0:75:
e5:eb:e2:21:3b:c3:74:df:55:3c:6d:8b:cd:a0:8f:f4:07:f7:
25:5e:96:0a:2b:fc:c8:6e:2e:56:26:7a:2f:7b:ab:11:45:0e:
9b:57:8e:b7:bb:60:13:f4:ba:5f:6c:67:5a:6e:50:68:2c:91:
ea:8c:c7:69:31:e7:53:5c:d7:f9:a5:43:a1:06:53:66:24:3a:
b2:11:85:58:75:8d:d1:e5:ae:ed:86:c0:30:89:b5:99:fa:61:
1b:01:d8:8f:69:d4:c5:0a:77:14:f3:2d:85:de:44:85:ff:0c:
75:b5:cf:09:6a:f1:49:8f:ee:ba:0b:35:28:de:3b:8a:86:e1:
99:33:b9:5d:08:2f:e7:25:59:42:09:76:d6:74:2c:b4:15:77:
c2:11:8b:32:59:ae:11:32:a0:cc:65:b9:89:56:2d:02:bd:e8:
4b:7d:c2:0a:0d:a1:f3:0a:d9:7d:f5:d0:01:f9:65:e5:9e:6d:
b2:81:b5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6dC7pd2VpJSHOuuve1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2
YjUwMGYwHhcNMjUwODIzMDYwMDMxWhcNMjUwODI0MDYwMDMxWjAzMTEwLwYDVQQD
Eyg4NDMzM2IzNjliODk5ZjAyNzlhZmZiMGFmNDMwNmYwYWIzZWFjYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE2JCQ2BTUMdLgyGGxx0Dg7uLcrW
obhh5iAbTwXzuo+3t9bd7mWhS/tJS1WMR61SuWany9zR0TqVXdb+QHC6qMym8MUZ
HqtG6hYHHF6iKrJI1QCIKVxKiid3rGfVYB+kRQq+Z6PvesAqpELQl3wdoXTXMC5i
Bp4wVzqR4I0y+dHr5dQHguv+BHRsaMvF+TehF/LUIyMQnVcmSZEHXFX303PGkYrD
6UNFw0avX4uIZeMIbwD1W1XoYEzuH2Vdz17Io7E9wn0drIULGlnxIYthKKagGdX6
FUP6P3QI+kG4+vni3aPqW/y2EPIFJz/DqHY3ix2SdRXC53+MoSHkUtxYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQzOzabiZ8Cea/7CvQwbwqz6ssoMB8GA1UdIwQY
MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt
ZjQyMTc2Y2QwNDQ1LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1
LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsufKbzKz
4iqga/Wu2krcmvqgUWNSfGfMwv1WhdWHpPeVnyc+BgFx/w8MEj/gSIk4jT3s4YL9
zE3QH4DMGFnmwjCXrCo5vLB15eviITvDdN9VPG2LzaCP9Af3JV6WCiv8yG4uViZ6
L3urEUUOm1eOt7tgE/S6X2xnWm5QaCyR6ozHaTHnU1zX+aVDoQZTZiQ6shGFWHWN
0eWu7YbAMIm1mfphGwHYj2nUxQp3FPMthd5Ehf8MdbXPCWrxSY/uugs1KN47iobh
mTO5XQgv5yVZQgl21nQstBV3whGLMlmuETKgzGW5iVYtAr3oS33CCg2h8wrZffXQ
Afll5Z5tsoG1MQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:50 2025 by rpki-client