Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: tH/cIJ2UBYHi809e5GXXJ/YT1OqMTVifI3Vrn3a9wng=
Subject key identifier: 0C:0A:41:44:9A:30:8A:73:15:0E:82:6E:9D:23:0D:CE:81:1B:DD:45
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0198D4729FA98591874CA2E1410C8EBEC4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 144C
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: wpk6QOdJliOlzsGVdWjHNc4x0nq3FnyzflB15omhr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9f:a9:85:91:87:4c:a2:e1:41:0c:8e:be:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=0c0a41449a308a73150e826e9d230dce811bdd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:69:02:3d:72:90:91:5c:28:df:ca:cb:00:
31:36:91:34:ff:47:48:78:54:e6:a7:da:c6:c9:a6:
29:fb:05:70:d9:c9:0e:e0:ba:94:bd:f9:2d:68:28:
0b:98:f0:b2:36:29:28:05:1e:b8:84:3f:10:ca:94:
69:3e:1d:92:67:8b:af:ff:ff:b6:45:73:cb:78:62:
c9:67:00:d1:e3:6e:a1:48:4e:73:e4:70:4f:8d:7a:
58:65:80:a2:8f:b5:61:dd:d2:73:71:ff:12:ac:93:
b3:37:4c:f6:35:c8:29:51:75:9e:da:c5:91:0f:60:
e1:65:21:ec:00:1c:0d:86:dc:38:c7:71:1f:a5:6f:
6e:bf:86:a3:f5:64:f5:c8:8f:0f:b7:c0:eb:b4:fe:
11:3c:9d:8f:c0:42:0a:74:54:78:fc:b3:92:f2:89:
ce:cb:9b:9e:ec:19:99:8e:ca:06:f0:67:47:e7:58:
73:b7:cb:e9:a7:ac:59:8b:43:37:b8:60:dc:16:f4:
8d:be:51:4d:a4:f6:d8:56:46:bb:56:44:37:85:f6:
07:1b:e2:7a:a8:e9:ea:05:f7:06:ac:4a:8c:62:2f:
7f:da:03:90:a2:5b:43:ca:4b:45:6c:21:30:ac:b7:
4c:00:f9:a1:a1:e6:cf:c4:14:d4:eb:5b:7d:f8:94:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:41:44:9A:30:8A:73:15:0E:82:6E:9D:23:0D:CE:81:1B:DD:45
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:3f:e1:86:11:fd:d6:d2:d9:77:a2:ba:4e:62:c9:f7:f1:
34:ca:10:e8:8f:a0:af:a9:17:4b:2b:5b:bc:69:44:16:d9:2c:
ca:83:cf:34:b7:6c:21:6c:86:89:f9:a1:f0:14:17:66:97:d8:
a4:11:25:56:f7:c1:b5:90:75:c8:fd:b0:fe:94:c8:13:18:1f:
13:d9:a5:41:26:9d:39:ff:15:d6:64:10:e7:cb:a4:05:ad:37:
07:27:e6:af:b3:0d:b3:ea:5d:2e:1d:7a:cf:4c:1d:15:39:a5:
12:99:16:4e:a7:3a:b5:cc:b6:91:fc:49:8c:e6:a4:1a:7e:42:
c1:35:f4:00:30:8a:ad:fa:02:88:51:a5:34:9c:d1:a0:b8:c9:
ba:4c:0f:66:50:c0:18:06:27:0c:8d:37:be:26:ac:4a:32:10:
3c:60:a7:52:b9:d4:58:da:c3:b3:dc:d7:c6:cb:9e:e0:1c:0f:
4b:8e:ca:d6:a9:04:12:28:20:c1:4e:79:63:62:c2:ed:dd:bc:
73:98:dc:1a:63:a3:bb:8e:7e:20:f2:07:41:d9:0a:32:59:5b:
99:27:96:a3:5d:0b:cd:f9:da:d3:d4:cd:61:07:40:f2:66:7a:
c8:f0:8b:d9:07:13:ff:02:28:91:97:ae:08:15:fe:c5:2a:4e:
d9:19:9f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcp+phZGHTKLhQQyOvsSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx
NGVmYmEwHhcNMjUwODIzMDEwMjE4WhcNMjUwODI0MDEwMjE4WjAzMTEwLwYDVQQD
EygwYzBhNDE0NDlhMzA4YTczMTUwZTgyNmU5ZDIzMGRjZTgxMWJkZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkctpAj1ykJFcKN/KywAxNpE0/0dI
eFTmp9rGyaYp+wVw2ckO4LqUvfktaCgLmPCyNikoBR64hD8QypRpPh2SZ4uv//+2
RXPLeGLJZwDR426hSE5z5HBPjXpYZYCij7Vh3dJzcf8SrJOzN0z2NcgpUXWe2sWR
D2DhZSHsABwNhtw4x3EfpW9uv4aj9WT1yI8Pt8DrtP4RPJ2PwEIKdFR4/LOS8onO
y5ue7BmZjsoG8GdH51hzt8vpp6xZi0M3uGDcFvSNvlFNpPbYVka7VkQ3hfYHG+J6
qOnqBfcGrEqMYi9/2gOQoltDyktFbCEwrLdMAPmhoebPxBTU61t9+JRsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwKQUSaMIpzFQ6Cbp0jDc6BG91FMB8GA1UdIwQY
MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt
MzQ5N2Y3ZTJkZTYyLzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy
LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2Q/4YYR
/dbS2Xeiuk5iyffxNMoQ6I+gr6kXSytbvGlEFtksyoPPNLdsIWyGifmh8BQXZpfY
pBElVvfBtZB1yP2w/pTIExgfE9mlQSadOf8V1mQQ58ukBa03Byfmr7MNs+pdLh16
z0wdFTmlEpkWTqc6tcy2kfxJjOakGn5CwTX0ADCKrfoCiFGlNJzRoLjJukwPZlDA
GAYnDI03viasSjIQPGCnUrnUWNrDs9zXxsue4BwPS47K1qkEEiggwU55Y2LC7d28
c5jcGmOju45+IPIHQdkKMllbmSeWo10Lzfna09TNYQdA8mZ6yPCL2QcT/wIokZeu
CBX+xSpO2RmfMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:43 2025 by rpki-client