Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: hAyT1w37TimWu4Siy0LP9yQj4z1cd9Kwran+7Sy3D5U=
Subject key identifier: B1:87:29:89:43:8A:AE:BE:F2:C8:3D:D2:59:B8:2E:0F:DC:12:06:14
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 0198D65F375FB096A53AB3763EF628E2B739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 11CE
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: QEVtxJW0SFPNKtTiM1TE6HWLf7pCJYeGKQmlLgOkaZk=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:37:5f:b0:96:a5:3a:b3:76:3e:f6:28:e2:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=b1872989438aaebef2c83dd259b82e0fdc120614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:35:54:66:07:7a:fd:f9:fa:98:09:4c:4e:
9c:a7:91:be:e1:5d:de:62:90:bd:c8:32:13:4b:27:
f7:1e:96:0b:57:92:79:06:9c:59:0e:c3:39:a4:2b:
f7:a1:f3:66:3d:58:26:cf:f9:6a:47:65:12:7f:20:
c2:61:91:c5:d5:2e:75:d8:5e:c0:0e:4e:49:5a:3f:
a8:77:ac:21:17:bc:ea:1c:e9:a3:d5:21:6c:83:bb:
dc:54:fb:f1:ba:a4:1b:56:fe:4d:dd:e4:ab:f1:08:
ec:b8:6e:0e:be:22:9c:9f:88:df:f6:22:88:6b:f4:
36:86:dc:57:39:1a:3a:88:75:88:20:6b:9e:fe:ab:
46:ea:f1:c7:10:6b:6d:8b:62:37:c9:72:6a:c3:03:
64:90:fe:72:10:40:04:54:ed:d2:dc:2f:60:77:52:
e7:d0:35:e9:a4:dc:39:d5:e6:29:e3:6a:c4:48:5d:
19:ca:0b:d4:fe:51:88:f9:bc:06:32:d9:00:54:dd:
b5:d6:10:c1:58:8f:e3:0d:00:a7:6b:55:88:e7:f4:
69:9f:47:d1:ec:d0:44:0e:45:6e:71:77:49:77:ab:
16:16:4c:35:6e:08:74:ee:4c:7e:6e:4a:02:0c:58:
8d:61:be:64:4f:3e:cc:85:b8:0f:5e:41:59:f2:93:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:29:89:43:8A:AE:BE:F2:C8:3D:D2:59:B8:2E:0F:DC:12:06:14
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:35:ec:4a:23:7f:4c:a4:9f:4a:ba:e2:5b:88:d5:1a:ab:
ff:61:2e:b8:9b:8a:54:58:c1:0d:c9:09:a5:57:08:16:ae:1f:
08:20:23:24:36:9f:14:01:7a:d6:4e:7a:e7:12:1c:e7:d4:df:
91:92:b2:5c:fb:ed:35:51:8e:63:7e:8b:f4:c9:f2:c1:47:67:
f8:7a:4e:13:f9:ea:32:e3:29:9f:48:8a:87:cb:01:80:f2:34:
c7:03:a7:9c:6a:37:68:7f:6f:bd:c8:a5:d0:6f:eb:c3:ae:c3:
33:3b:a8:38:1b:55:fe:73:4d:3f:6c:41:b5:5e:3f:fd:1d:91:
a1:1d:c3:c9:70:fd:38:3e:e6:f1:2b:e1:ed:e7:e7:af:91:ae:
68:44:1f:c1:6f:76:75:8c:7c:e7:52:05:4b:31:1d:53:09:05:
e2:e4:64:c1:ca:1f:3d:b8:13:fb:53:0f:da:09:e6:ac:2a:f4:
9a:e6:91:6a:55:46:a0:e1:a8:c8:c7:89:d1:24:d3:cf:7d:b2:
cd:16:03:2f:e8:9c:88:38:ed:75:4b:e7:db:f5:ac:d0:72:d0:
b6:85:df:f7:16:a0:cd:ab:9e:b9:07:a7:34:fe:fe:c7:19:be:
35:8a:0c:f7:10:91:b4:5e:a0:71:6a:57:90:46:1d:e4:c0:14:
b4:98:c2:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzdfsJalOrN2PvYo4rc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc4NmIyNGI0YjMwMjc1YmNjOGQ1MjQ0ZTM0ZWUwMDQ4
MWQ3OTAwHhcNMjUwODIzMTAwMDIwWhcNMjUwODI0MTAwMDIwWjAzMTEwLwYDVQQD
EyhiMTg3Mjk4OTQzOGFhZWJlZjJjODNkZDI1OWI4MmUwZmRjMTIwNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXE1VGYHev35+pgJTE6cp5G+4V3e
YpC9yDITSyf3HpYLV5J5BpxZDsM5pCv3ofNmPVgmz/lqR2USfyDCYZHF1S512F7A
Dk5JWj+od6whF7zqHOmj1SFsg7vcVPvxuqQbVv5N3eSr8QjsuG4OviKcn4jf9iKI
a/Q2htxXORo6iHWIIGue/qtG6vHHEGtti2I3yXJqwwNkkP5yEEAEVO3S3C9gd1Ln
0DXppNw51eYp42rESF0ZygvU/lGI+bwGMtkAVN211hDBWI/jDQCna1WI5/Rpn0fR
7NBEDkVucXdJd6sWFkw1bgh07kx+bkoCDFiNYb5kTz7MhbgPXkFZ8pNnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGHKYlDiq6+8sg90lm4Lg/cEgYUMB8GA1UdIwQY
MBaAFL/XhrJLSzAnW8yNUkTjTuAEgdeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5Yjct
MWExZjkzNjQ1NGVjLzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5YjctMWExZjkzNjQ1NGVj
LzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOo17Eoj
f0ykn0q64luI1Rqr/2EuuJuKVFjBDckJpVcIFq4fCCAjJDafFAF61k565xIc59Tf
kZKyXPvtNVGOY36L9MnywUdn+HpOE/nqMuMpn0iKh8sBgPI0xwOnnGo3aH9vvcil
0G/rw67DMzuoOBtV/nNNP2xBtV4//R2RoR3DyXD9OD7m8Svh7efnr5GuaEQfwW92
dYx851IFSzEdUwkF4uRkwcofPbgT+1MP2gnmrCr0muaRalVGoOGoyMeJ0STTz32y
zRYDL+iciDjtdUvn2/Ws0HLQtoXf9xagzaueuQenNP7+xxm+NYoM9xCRtF6gcWpX
kEYd5MAUtJjCZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:04 2025 by rpki-client