Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: QEo0n2oIJhbUywWouX9lA1iZl0K1S1dV2gtE0NGwVdI=
Subject key identifier: C7:7B:ED:E9:39:1F:74:FE:15:12:0D:7F:79:8C:E7:1D:4C:03:2B:F4
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019872984857A51623FC74326802F0F01E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 0F66
Signing time: Mon 04 Aug 2025 01:00:39 +0000
Manifest this update: Mon 04 Aug 2025 01:00:39 +0000
Manifest next update: Tue 05 Aug 2025 01:00:39 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: vVub+cipAqlV9JeU52XN7ZXSgd2qKINWryD3Kj+xjAc=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:48:57:a5:16:23:fc:74:32:68:02:f0:f0:1e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Aug 4 01:00:39 2025 GMT
Not After : Aug 5 01:00:39 2025 GMT
Subject: CN=c77bede9391f74fe15120d7f798ce71d4c032bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:3c:07:fd:e5:d2:01:31:f4:fc:ad:14:a9:
5a:09:df:7d:c6:07:07:cf:f2:e2:58:3f:80:ca:e9:
11:89:4c:01:1c:8a:a0:e4:7b:4a:d4:73:55:cc:5d:
d5:6b:1b:cb:18:75:a6:e4:e1:5e:a8:f3:b2:f9:76:
c4:af:4e:62:32:31:a0:73:a3:2a:b2:55:94:e4:78:
4f:3a:3d:40:b6:67:7b:21:e9:9a:93:e5:b6:14:13:
03:e2:0b:83:1f:5b:c7:69:87:eb:e6:39:53:1b:5f:
17:79:46:d9:3d:6b:e5:59:51:66:c7:4d:fc:90:d1:
c2:df:17:5a:5f:e5:f2:c8:73:6b:a0:f9:cb:92:63:
ea:94:86:a5:53:a0:b9:8b:14:29:b5:84:be:17:08:
5f:2a:cc:da:00:b1:d9:98:51:ee:27:0d:7a:9c:bb:
a7:b6:07:4a:df:68:9e:4f:f3:4a:5c:54:00:a0:5b:
42:22:c1:d8:93:7e:b7:84:01:f4:06:3f:a7:39:dc:
a2:cd:bf:ef:eb:a9:6f:7e:63:b0:39:7f:6d:6b:69:
ae:36:e8:bb:14:17:db:19:d6:a4:4a:7c:51:dd:49:
50:17:0a:92:ee:31:7b:58:da:9c:ab:ab:b4:ca:48:
ac:1f:a5:76:4e:ab:93:e4:11:91:3b:16:d1:b3:ad:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:ED:E9:39:1F:74:FE:15:12:0D:7F:79:8C:E7:1D:4C:03:2B:F4
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:b3:fe:2a:5b:51:c4:57:54:47:9c:99:a1:05:30:94:80:
56:20:36:a7:96:0f:76:1e:12:a3:e0:26:28:78:ed:50:dd:c9:
2c:a3:5b:fc:5c:ea:07:19:44:c3:a4:9c:ef:c9:93:e1:2f:2f:
e5:92:39:4e:d3:5a:f7:ec:0f:4c:28:83:87:95:e9:ee:3b:31:
b7:16:4f:0e:bc:11:b8:7a:c1:23:8a:1e:3d:74:12:1a:15:9e:
94:74:1d:7a:df:4d:ce:ac:3a:b4:a3:04:78:1b:c3:2c:1c:f7:
66:3c:bc:e3:b3:eb:8d:80:58:b5:5e:01:4a:c0:86:17:38:cc:
b5:a0:d4:fc:5d:c6:dd:af:ff:11:8a:2b:9b:d6:a5:6d:99:99:
c2:68:40:20:80:31:32:31:ee:59:d2:c4:66:ca:36:3e:39:e0:
67:73:0c:f8:dd:13:d1:e9:d5:97:ce:5e:c3:4c:4a:bf:99:e4:
68:82:23:97:23:48:bf:3a:34:24:01:c2:ac:fd:10:b1:e9:8d:
74:60:ee:14:f8:88:eb:62:96:2c:c3:66:a4:d0:29:8d:a9:19:
d2:18:73:91:e3:aa:5e:2a:54:6d:b9:1b:16:ea:43:43:f4:53:
8b:00:8f:07:24:8b:f4:55:a8:8e:df:f3:05:f5:a0:75:34:14:
15:90:e5:9d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhymEhXpRYj/HQyaALw8B5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjUwODA0MDEwMDM5WhcNMjUwODA1MDEwMDM5WjAzMTEwLwYDVQQD
EyhjNzdiZWRlOTM5MWY3NGZlMTUxMjBkN2Y3OThjZTcxZDRjMDMyYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudM8B/3l0gEx9PytFKlaCd99xgcH
z/LiWD+AyukRiUwBHIqg5HtK1HNVzF3VaxvLGHWm5OFeqPOy+XbEr05iMjGgc6Mq
slWU5HhPOj1Atmd7Iemak+W2FBMD4guDH1vHaYfr5jlTG18XeUbZPWvlWVFmx038
kNHC3xdaX+XyyHNroPnLkmPqlIalU6C5ixQptYS+FwhfKszaALHZmFHuJw16nLun
tgdK32ieT/NKXFQAoFtCIsHYk363hAH0Bj+nOdyizb/v66lvfmOwOX9ta2muNui7
FBfbGdakSnxR3UlQFwqS7jF7WNqcq6u0ykisH6V2TquT5BGROxbRs63DuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMd77ek5H3T+FRINf3mM5x1MAyv0MB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw
MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZ+z
/ipbUcRXVEecmaEFMJSAViA2p5YPdh4So+AmKHjtUN3JLKNb/FzqBxlEw6Sc78mT
4S8v5ZI5TtNa9+wPTCiDh5Xp7jsxtxZPDrwRuHrBI4oePXQSGhWelHQdet9Nzqw6
tKMEeBvDLBz3Zjy847PrjYBYtV4BSsCGFzjMtaDU/F3G3a//EYorm9albZmZwmhA
IIAxMjHuWdLEZso2PjngZ3MM+N0T0enVl85ew0xKv5nkaIIjlyNIvzo0JAHCrP0Q
semNdGDuFPiI62KWLMNmpNApjakZ0hhzkeOqXipUbbkbFupDQ/RTiwCPBySL9FWo
jt/zBfWgdTQUFZDlnQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:03 2025 by rpki-client