Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: su2OXcNh5K4XkLYCOIVb1DvjK4yj4jy5XSR34Pxw/Go=
Subject key identifier: A3:C9:7A:97:9A:90:F1:50:A4:0E:E4:40:56:C6:E9:80:EA:4B:AC:B3
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 01988DD90873B35A79F7BEE9D62A18516732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 0321
Signing time: Sat 09 Aug 2025 08:01:07 +0000
Manifest this update: Sat 09 Aug 2025 08:01:07 +0000
Manifest next update: Sun 10 Aug 2025 08:01:07 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: QE3H+ZLfyyW30ElXw6c2bHEERbtwqraJNNQDvw1oNHQ=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:08:73:b3:5a:79:f7:be:e9:d6:2a:18:51:67:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Aug 9 08:01:07 2025 GMT
Not After : Aug 10 08:01:07 2025 GMT
Subject: CN=a3c97a979a90f150a40ee44056c6e980ea4bacb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:08:4c:71:e9:b3:e4:26:82:a3:df:97:7f:
2a:5f:25:02:d9:39:c0:82:2e:40:c7:69:51:62:92:
b8:65:5b:2e:23:06:74:e2:4a:b3:0d:e6:98:9f:83:
2c:37:32:e4:c3:76:c7:40:1f:ce:e1:1a:ff:63:0b:
6a:78:35:36:34:61:71:04:9b:30:90:01:ce:aa:4f:
bd:4b:f4:5a:7f:95:a6:b8:e0:23:aa:31:9e:2b:c5:
f2:2b:af:b6:4d:4d:dc:2d:2e:a1:fa:6f:ca:8a:e1:
45:dd:b3:8a:e2:db:a9:d4:ff:8c:e3:dc:e0:50:d4:
ca:75:b3:46:ee:4c:90:9f:2b:bb:b9:d0:87:c3:a5:
aa:62:9b:ec:18:ef:87:c2:8c:91:a4:e4:d7:91:6e:
4c:de:4c:4e:d5:85:d3:a3:f6:1f:a2:6f:e4:8b:8f:
85:2c:b0:da:35:de:ab:ce:34:1d:dc:a4:d7:29:3e:
82:7e:f8:71:17:52:cc:05:80:0d:a4:24:a2:b1:46:
96:d2:32:26:56:16:db:b8:78:97:91:29:7a:5b:94:
30:61:e8:a0:50:6c:23:e6:d5:aa:59:b0:d3:da:21:
ee:fc:a6:45:0a:c1:7b:21:2f:7a:4f:55:11:e9:32:
9b:3b:32:0f:df:6f:9e:1a:f9:65:4c:53:b7:5d:a0:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:7A:97:9A:90:F1:50:A4:0E:E4:40:56:C6:E9:80:EA:4B:AC:B3
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a1:3d:d2:7c:77:50:b0:be:69:70:f3:fe:85:2b:d9:fe:e8:
4c:c2:0b:32:e4:3f:e2:56:d8:4d:36:2e:cc:18:13:22:f2:9f:
d7:33:c6:95:5b:f6:6c:91:c0:ab:07:3f:52:ad:7b:ed:89:9a:
4f:63:51:64:cc:af:64:5f:09:1a:c6:76:ec:64:c5:79:84:a9:
c7:bf:8d:df:5e:47:48:fc:a3:c7:7c:29:e5:a5:92:f1:a4:88:
0b:a4:55:45:a3:d0:a2:3f:17:0f:ca:ae:63:98:d1:1e:03:17:
1f:ba:44:d3:5c:30:c9:af:79:e3:73:0f:aa:4b:10:9d:ee:94:
bb:b7:51:2a:28:3b:f3:04:34:a9:d9:49:6b:5c:68:cc:19:26:
46:bf:96:bc:18:86:a2:71:c2:57:21:c7:2e:cc:ac:81:35:e2:
44:c9:d7:fa:a3:1d:88:f1:6d:b7:ac:d9:22:16:76:05:0f:24:
f9:24:cd:21:35:5e:6b:a0:e7:e3:b7:71:c8:8d:31:e2:ff:54:
c2:1a:69:11:34:af:47:24:84:91:bd:4f:ca:49:3f:de:0b:50:
0a:d0:22:ab:37:46:e2:d0:18:2a:d5:2e:e9:93:e9:d8:56:cf:
7f:68:63:f7:2c:ca:bd:c9:d4:64:7c:22:e6:7d:d6:ce:28:cf:
d0:22:0d:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2Qhzs1p5977p1ioYUWcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy
MDUzYjQwHhcNMjUwODA5MDgwMTA3WhcNMjUwODEwMDgwMTA3WjAzMTEwLwYDVQQD
EyhhM2M5N2E5NzlhOTBmMTUwYTQwZWU0NDA1NmM2ZTk4MGVhNGJhY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mgITHHps+QmgqPfl38qXyUC2TnA
gi5Ax2lRYpK4ZVsuIwZ04kqzDeaYn4MsNzLkw3bHQB/O4Rr/YwtqeDU2NGFxBJsw
kAHOqk+9S/Raf5WmuOAjqjGeK8XyK6+2TU3cLS6h+m/KiuFF3bOK4tup1P+M49zg
UNTKdbNG7kyQnyu7udCHw6WqYpvsGO+HwoyRpOTXkW5M3kxO1YXTo/Yfom/ki4+F
LLDaNd6rzjQd3KTXKT6CfvhxF1LMBYANpCSisUaW0jImVhbbuHiXkSl6W5QwYeig
UGwj5tWqWbDT2iHu/KZFCsF7IS96T1UR6TKbOzIP32+eGvllTFO3XaC/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPJepeakPFQpA7kQFbG6YDqS6yzMB8GA1UdIwQY
MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt
MzA2MjUzMTc0MzBkLzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk
LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6E90nx3
ULC+aXDz/oUr2f7oTMILMuQ/4lbYTTYuzBgTIvKf1zPGlVv2bJHAqwc/Uq177Yma
T2NRZMyvZF8JGsZ27GTFeYSpx7+N315HSPyjx3wp5aWS8aSIC6RVRaPQoj8XD8qu
Y5jRHgMXH7pE01wwya9543MPqksQne6Uu7dRKig78wQ0qdlJa1xozBkmRr+WvBiG
onHCVyHHLsysgTXiRMnX+qMdiPFtt6zZIhZ2BQ8k+STNITVea6Dn47dxyI0x4v9U
whppETSvRySEkb1Pykk/3gtQCtAiqzdG4tAYKtUu6ZPp2FbPf2hj9yzKvcnUZHwi
5n3WzijP0CINtA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:04 2025 by rpki-client