Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: HNsx+hMKBSgPsUHUdQtjWdC2KDbUscf7Dr5SifdZKzU=
Subject key identifier: 0B:EC:11:17:44:EC:CE:A9:DF:19:E6:47:0C:BB:A1:05:C6:07:8B:19
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 0197BBC71503E73C2672D3DDC6464405E3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 13AE
Signing time: Sun 29 Jun 2025 13:01:15 +0000
Manifest this update: Sun 29 Jun 2025 13:01:15 +0000
Manifest next update: Mon 30 Jun 2025 13:01:15 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: iWzsne4dc3LLxzC2VYfANNN/c3zSDUrGLLX9iI4ufE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:15:03:e7:3c:26:72:d3:dd:c6:46:44:05:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Jun 29 13:01:15 2025 GMT
Not After : Jun 30 13:01:15 2025 GMT
Subject: CN=0bec111744eccea9df19e6470cbba105c6078b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:0c:e3:01:69:e3:84:16:9d:b1:aa:68:c8:
4c:8c:08:a1:cd:cc:cf:29:74:29:d3:0e:c1:a9:53:
65:0f:e3:e1:9e:7c:f9:92:52:72:52:c2:f4:4a:7d:
88:3e:74:ef:19:a0:5c:0d:cd:80:f9:5b:5f:6c:7b:
31:63:a6:44:b0:3c:73:7a:a1:f1:62:4f:91:c3:8d:
36:08:9d:ba:96:dd:84:f4:8f:85:76:40:f0:2a:ba:
4c:28:04:0f:45:31:f2:0f:70:f3:04:f6:bd:e6:ad:
d4:d1:15:10:20:13:e6:c5:39:63:0a:08:27:3c:20:
89:d8:1b:83:f2:39:2f:a8:7e:b1:18:57:a1:99:d7:
95:e6:86:f7:0d:32:7c:88:cd:70:3f:c6:a4:c1:bb:
d7:78:15:e1:ab:37:bb:eb:83:17:13:b0:fd:e9:a0:
c0:30:2d:9b:49:f6:b1:81:a3:06:34:af:dc:3a:9d:
48:c8:29:14:6a:b7:08:8a:f4:0d:6a:ea:e5:cf:46:
77:77:73:cf:d8:f3:44:9d:02:dd:1f:4f:ac:64:01:
d1:6f:49:d4:ef:77:3a:2a:a0:7d:90:6e:98:5f:3f:
58:31:b1:70:d0:ff:b0:42:a1:ee:f9:40:51:21:f1:
d2:61:0c:c6:cf:42:bc:b8:c8:2b:b9:10:ea:9d:57:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:11:17:44:EC:CE:A9:DF:19:E6:47:0C:BB:A1:05:C6:07:8B:19
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:02:be:29:6e:62:6b:c7:c2:77:19:86:3c:89:96:3a:0a:
49:26:6f:d9:0a:a2:a6:88:ea:27:36:65:8b:63:49:d1:0b:3c:
93:fb:67:b3:9e:6b:0a:7a:86:0e:e2:0c:96:41:06:8a:02:34:
ca:a7:64:b8:9b:0f:cc:1e:6a:e1:8f:0c:1f:75:b0:ad:55:0b:
6a:36:51:00:89:0f:10:60:3a:80:27:fa:3a:b3:b8:09:e5:72:
e7:1e:36:22:e2:85:94:4a:18:ad:d8:07:7e:b8:45:8b:63:a7:
a0:44:27:be:3d:32:8c:98:bf:a0:c0:ea:7d:6c:18:0e:27:6d:
2d:43:28:fd:26:22:8a:19:6e:fc:32:20:79:18:f2:8d:6b:80:
ce:b4:ad:7c:9a:da:ed:90:3f:52:72:31:c1:4d:3b:c8:fe:29:
1c:10:8c:94:f1:b6:2f:d7:59:28:b8:f3:61:4a:02:1c:15:31:
7b:b0:44:e5:22:8a:45:ce:b9:19:e6:8a:fe:a4:5d:65:9a:80:
52:b4:f5:cc:60:3e:1e:05:4b:53:ec:6f:5e:41:94:83:4d:86:
e0:b6:a3:16:db:ae:e6:2b:74:96:3c:df:84:59:d9:68:ba:7a:
9e:39:03:66:a6:d0:d1:4d:6f:6c:bc:c0:f4:f0:ea:fb:7a:1d:
f8:06:83:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7xxUD5zwmctPdxkZEBeP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDg4MjhkN2I5OWIwYTk3MDE3ZWMyNmJjYmVmZTk2ZmRi
ZTk1NzkwHhcNMjUwNjI5MTMwMTE1WhcNMjUwNjMwMTMwMTE1WjAzMTEwLwYDVQQD
EygwYmVjMTExNzQ0ZWNjZWE5ZGYxOWU2NDcwY2JiYTEwNWM2MDc4YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYMM4wFp44QWnbGqaMhMjAihzczP
KXQp0w7BqVNlD+Phnnz5klJyUsL0Sn2IPnTvGaBcDc2A+VtfbHsxY6ZEsDxzeqHx
Yk+Rw402CJ26lt2E9I+FdkDwKrpMKAQPRTHyD3DzBPa95q3U0RUQIBPmxTljCggn
PCCJ2BuD8jkvqH6xGFehmdeV5ob3DTJ8iM1wP8akwbvXeBXhqze764MXE7D96aDA
MC2bSfaxgaMGNK/cOp1IyCkUarcIivQNaurlz0Z3d3PP2PNEnQLdH0+sZAHRb0nU
73c6KqB9kG6YXz9YMbFw0P+wQqHu+UBRIfHSYQzGz0K8uMgruRDqnVevGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvsERdE7M6p3xnmRwy7oQXGB4sZMB8GA1UdIwQY
MBaAFJdIgo17mbCpcBfsJry+/pb9vpV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgt
YTRhMDc1Mzk4YjBlLzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgtYTRhMDc1Mzk4YjBl
LzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMgCvilu
YmvHwncZhjyJljoKSSZv2QqipojqJzZli2NJ0Qs8k/tns55rCnqGDuIMlkEGigI0
yqdkuJsPzB5q4Y8MH3WwrVULajZRAIkPEGA6gCf6OrO4CeVy5x42IuKFlEoYrdgH
frhFi2OnoEQnvj0yjJi/oMDqfWwYDidtLUMo/SYiihlu/DIgeRjyjWuAzrStfJra
7ZA/UnIxwU07yP4pHBCMlPG2L9dZKLjzYUoCHBUxe7BE5SKKRc65GeaK/qRdZZqA
UrT1zGA+HgVLU+xvXkGUg02G4LajFtuu5it0ljzfhFnZaLp6njkDZqbQ0U1vbLzA
9PDq+3od+AaDcg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:44 2025 by rpki-client