Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: zyXHmWBO76G+UyRHmv8T5DCc28DECWUtSs289CA/O2M=
Subject key identifier: 44:49:FA:F1:3F:C6:1C:0B:8F:F8:C9:7E:75:F8:90:5F:6C:34:A1:43
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0197CCBA91FABD0DC20B28525352B2908E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0D49
Signing time: Wed 02 Jul 2025 20:01:08 +0000
Manifest this update: Wed 02 Jul 2025 20:01:08 +0000
Manifest next update: Thu 03 Jul 2025 20:01:08 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: rsqwAjKkkOAH2pfUCsU1oMXQxj3OAU9yJNZWOPBBEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:91:fa:bd:0d:c2:0b:28:52:53:52:b2:90:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jul 2 20:01:08 2025 GMT
Not After : Jul 3 20:01:08 2025 GMT
Subject: CN=4449faf13fc61c0b8ff8c97e75f8905f6c34a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:66:12:b6:4f:e0:e7:99:8b:4a:8c:b4:f5:
8b:dd:42:ab:8f:ec:2e:0c:ca:3e:ed:c9:77:af:7d:
01:23:44:fe:c3:ba:ea:74:d8:bb:a8:59:93:65:13:
1f:f7:98:c3:31:2b:57:5e:8d:fd:29:38:f7:1d:6e:
0a:1c:77:d9:ed:0f:9e:1d:ba:a6:e1:83:3b:a8:cb:
04:68:ee:c0:fc:3b:49:b9:83:7c:35:2b:a3:74:18:
25:e3:5f:e6:06:c0:f8:5f:fe:39:92:6e:f4:d0:7d:
04:eb:fd:cd:2b:b8:1b:14:94:dd:3c:70:01:8a:0b:
38:ac:4e:5e:7f:74:f9:84:1b:af:81:91:82:a0:10:
bc:6e:84:cf:80:df:52:c5:3d:1e:ce:f4:e1:17:24:
50:22:52:db:92:60:f3:7f:7d:31:a1:e3:62:1a:68:
5d:3b:9e:f5:ba:9b:c1:95:4b:f4:08:c5:b5:9a:6b:
e3:8f:38:ce:6b:38:f8:f1:b8:60:00:ef:46:3b:93:
d6:9f:c5:4d:ef:77:91:d3:c7:f2:1d:6c:68:df:3e:
65:22:3f:64:df:a2:43:7f:b5:38:b7:59:2b:6d:81:
4a:46:25:dd:d1:25:e7:f6:8c:89:6f:20:37:d1:1d:
e8:6c:3b:b8:f0:71:14:5b:e9:ac:7b:7e:12:f7:88:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:FA:F1:3F:C6:1C:0B:8F:F8:C9:7E:75:F8:90:5F:6C:34:A1:43
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:31:60:0f:6b:59:72:4d:88:88:64:97:4c:3f:bd:5b:e1:67:
64:54:42:9e:fb:02:44:1f:ce:8e:e0:08:d3:c4:1b:bc:b5:e4:
bd:e1:09:c0:26:fb:c7:00:9c:08:4b:0b:38:bb:57:f8:8a:0a:
bd:0d:8a:f9:75:1d:b2:ca:03:4e:16:04:81:f9:9e:58:15:01:
a0:dd:64:11:f6:23:8d:cb:ba:7e:2e:ba:25:7c:29:c7:63:1c:
e8:f4:0f:6d:b6:d4:3a:c2:89:85:0f:49:6d:79:dc:0e:70:dd:
a8:29:fa:90:65:a6:33:13:5d:f4:97:75:aa:b2:ee:4b:c3:0a:
be:fe:16:5d:4a:3d:de:61:58:b8:9a:4d:13:f2:d8:ec:34:21:
f9:57:97:7c:b6:f3:45:13:86:22:b0:44:8f:9a:0a:c2:f2:f9:
c5:b4:fc:9a:30:5b:93:87:68:ae:a1:8e:07:fb:4f:95:bf:a2:
37:55:b4:dc:32:22:64:30:32:cf:06:f0:ff:b4:c5:a9:2f:b9:
9e:54:f1:e1:8f:27:60:1a:b8:eb:99:a1:54:37:0c:85:4b:09:
c1:b0:ec:17:04:2b:b3:07:ff:0a:17:07:bc:a2:0d:59:b7:8c:
df:9b:3d:09:7b:05:7e:56:89:5a:c4:94:31:c9:7e:34:e6:f9:
04:7b:2a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMupH6vQ3CCyhSU1KykI4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZGRmYWYxM2I3ZGJlMDVkYWEzMmI1ODc4YjhiNjgwMjQw
NDU5NzEwHhcNMjUwNzAyMjAwMTA4WhcNMjUwNzAzMjAwMTA4WjAzMTEwLwYDVQQD
Eyg0NDQ5ZmFmMTNmYzYxYzBiOGZmOGM5N2U3NWY4OTA1ZjZjMzRhMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P9mErZP4OeZi0qMtPWL3UKrj+wu
DMo+7cl3r30BI0T+w7rqdNi7qFmTZRMf95jDMStXXo39KTj3HW4KHHfZ7Q+eHbqm
4YM7qMsEaO7A/DtJuYN8NSujdBgl41/mBsD4X/45km700H0E6/3NK7gbFJTdPHAB
igs4rE5ef3T5hBuvgZGCoBC8boTPgN9SxT0ezvThFyRQIlLbkmDzf30xoeNiGmhd
O571upvBlUv0CMW1mmvjjzjOazj48bhgAO9GO5PWn8VN73eR08fyHWxo3z5lIj9k
36JDf7U4t1krbYFKRiXd0SXn9oyJbyA30R3obDu48HEUW+mse34S94gjrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERJ+vE/xhwLj/jJfnX4kF9sNKFDMB8GA1UdIwQY
MBaAFKfd+vE7fb4F2qMrWHi4toAkBFlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDkt
ZmJiNTUzYjg0NjQxLzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDktZmJiNTUzYjg0NjQx
LzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjFgD2tZ
ck2IiGSXTD+9W+FnZFRCnvsCRB/OjuAI08QbvLXkveEJwCb7xwCcCEsLOLtX+IoK
vQ2K+XUdssoDThYEgfmeWBUBoN1kEfYjjcu6fi66JXwpx2Mc6PQPbbbUOsKJhQ9J
bXncDnDdqCn6kGWmMxNd9Jd1qrLuS8MKvv4WXUo93mFYuJpNE/LY7DQh+VeXfLbz
RROGIrBEj5oKwvL5xbT8mjBbk4dorqGOB/tPlb+iN1W03DIiZDAyzwbw/7TFqS+5
nlTx4Y8nYBq465mhVDcMhUsJwbDsFwQrswf/ChcHvKINWbeM35s9CXsFflaJWsSU
Mcl+NOb5BHsqYQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:27:00 2025 by rpki-client