Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: Kl6BUVbfSHq+P9YnhIqI5QBPJ8lCf+pMnmp/aSOmlpo=
Subject key identifier: 44:57:91:9F:6B:70:9B:F1:96:1F:11:D0:2C:E6:CD:35:23:55:14:56
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 0198D473D40857543E4986E43A32A34D57C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (hash: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: 1YdMIFuUfuUitUG/GPOtZCvlv5TvzxvPQXDX6szArEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d4:08:57:54:3e:49:86:e4:3a:32:a3:4d:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=4457919f6b709bf1961f11d02ce6cd3523551456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:e1:db:c2:68:62:10:5a:24:63:b8:43:84:
54:a1:00:43:69:13:c1:38:90:65:2a:be:71:6f:8d:
58:79:c3:35:e3:17:4d:b0:3e:f7:3a:a2:48:8c:13:
06:f9:e4:18:7e:6b:3d:58:0d:b3:93:15:29:b3:61:
26:f0:d5:01:98:65:ae:e9:18:bb:0c:4f:2f:32:73:
b5:81:ae:fb:1e:07:3c:50:c2:cb:1b:54:93:57:53:
a5:07:38:6f:31:24:c4:5f:61:c3:2b:be:ae:d7:db:
ef:88:e5:77:b3:b6:9d:6c:da:d3:63:9a:c6:ee:99:
ac:83:63:5e:ad:c9:4a:c1:d3:a3:3b:2d:df:e8:d9:
c3:57:42:81:4a:9e:c1:42:af:11:71:d7:4b:e5:73:
e3:7c:3b:40:c3:6a:ef:39:25:c0:ae:30:a2:38:91:
b3:c6:a9:f7:37:6e:c2:c6:cb:d4:dd:3d:5c:90:dc:
fc:a1:de:95:17:13:12:59:77:9a:eb:ce:f1:06:6d:
93:e1:05:65:fb:87:8a:99:34:c3:6c:f2:55:34:db:
bd:e0:70:12:99:29:cf:f4:5b:66:90:46:d5:2e:44:
08:c4:b0:df:99:bd:e3:4e:43:1a:26:23:77:cc:4a:
51:89:34:2f:22:ef:7d:20:08:06:4a:f9:cc:e8:29:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:91:9F:6B:70:9B:F1:96:1F:11:D0:2C:E6:CD:35:23:55:14:56
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:31:1f:e7:8d:9c:94:9c:29:2a:72:3c:17:2f:46:65:b8:
a7:93:4b:ce:62:e4:92:0e:f6:82:70:18:a3:54:cf:4a:b7:5c:
cb:80:b9:09:28:ba:1a:8d:63:eb:1a:8f:91:68:27:27:ac:72:
26:cf:30:d6:79:b2:6b:4c:72:c4:fb:39:2c:24:3e:78:6b:fb:
56:ce:84:97:67:cc:d9:be:ee:23:d6:fb:d0:24:95:15:a7:1a:
57:53:b9:28:70:44:b5:a2:c1:26:3b:cf:fd:a4:0f:29:b2:b2:
c8:0d:be:a5:4a:c6:65:4d:57:8f:34:1b:48:10:6a:e0:1d:d1:
68:b4:26:b0:d3:56:70:ff:48:b7:7b:37:a1:04:3e:eb:70:fe:
bf:d2:83:0d:75:4d:17:30:8d:24:c8:2d:92:b7:40:82:3b:3c:
14:a3:ea:0e:6b:f8:2c:2a:38:38:ee:d9:16:43:82:80:f9:65:
3d:34:ed:d5:b0:41:b1:eb:58:3f:31:ca:80:38:8e:66:90:6c:
c4:8d:17:73:6d:a4:c2:88:71:27:e7:b8:12:f8:9d:76:bd:60:
f8:5d:ed:0a:68:ce:8c:85:77:c7:fe:6c:c3:28:b1:96:5c:4f:
c6:3e:19:41:b9:3e:13:1f:4d:b8:2b:ca:02:b7:c8:f2:57:88:
ed:7b:ff:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9QIV1Q+SYbkOjKjTVfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZDIzY2M1NWFlZWFmMzM3ZWRiNzNlYWUyNWI1OTA5N2Ey
Nzc4NGMwHhcNMjUwODIzMDEwMzM3WhcNMjUwODI0MDEwMzM3WjAzMTEwLwYDVQQD
Eyg0NDU3OTE5ZjZiNzA5YmYxOTYxZjExZDAyY2U2Y2QzNTIzNTUxNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cfh28JoYhBaJGO4Q4RUoQBDaRPB
OJBlKr5xb41YecM14xdNsD73OqJIjBMG+eQYfms9WA2zkxUps2Em8NUBmGWu6Ri7
DE8vMnO1ga77Hgc8UMLLG1STV1OlBzhvMSTEX2HDK76u19vviOV3s7adbNrTY5rG
7pmsg2NerclKwdOjOy3f6NnDV0KBSp7BQq8RcddL5XPjfDtAw2rvOSXArjCiOJGz
xqn3N27CxsvU3T1ckNz8od6VFxMSWXea687xBm2T4QVl+4eKmTTDbPJVNNu94HAS
mSnP9FtmkEbVLkQIxLDfmb3jTkMaJiN3zEpRiTQvIu99IAgGSvnM6Ckm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERXkZ9rcJvxlh8R0CzmzTUjVRRWMB8GA1UdIwQY
MBaAFK/SPMVa7q8zfttz6uJbWQl6J3hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2Mt
NDk0ZjA4YzIxNDk3LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2MtNDk0ZjA4YzIxNDk3
LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcicxH+eN
nJScKSpyPBcvRmW4p5NLzmLkkg72gnAYo1TPSrdcy4C5CSi6Go1j6xqPkWgnJ6xy
Js8w1nmya0xyxPs5LCQ+eGv7Vs6El2fM2b7uI9b70CSVFacaV1O5KHBEtaLBJjvP
/aQPKbKyyA2+pUrGZU1XjzQbSBBq4B3RaLQmsNNWcP9It3s3oQQ+63D+v9KDDXVN
FzCNJMgtkrdAgjs8FKPqDmv4LCo4OO7ZFkOCgPllPTTt1bBBsetYPzHKgDiOZpBs
xI0Xc22kwohxJ+e4Eviddr1g+F3tCmjOjIV3x/5swyixllxPxj4ZQbk+Ex9NuCvK
ArfI8leI7Xv/YQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:09 2025 by rpki-client