Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: BfX2ujDkhLbeQQ3yIfbQ5sfn1GVPPrGpimdY+MdCRMk=
Subject key identifier: 48:DF:A3:9C:26:58:CF:85:62:B0:AC:5B:62:8F:15:79:EA:FA:E4:68
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 0198744FB4E5EA007FD713F3BA7828547710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 09:00:37 +0000
Manifest this update: Mon 04 Aug 2025 09:00:37 +0000
Manifest next update: Tue 05 Aug 2025 09:00:37 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: px/J6Zk1GvY4BvPeo6lDn8gC2b8DQQQocEZkccixv8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b4:e5:ea:00:7f:d7:13:f3:ba:78:28:54:77:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Aug 4 09:00:37 2025 GMT
Not After : Aug 5 09:00:37 2025 GMT
Subject: CN=48dfa39c2658cf8562b0ac5b628f1579eafae468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:d5:64:1d:32:f2:57:84:80:9b:6f:84:b5:
c0:db:1e:e7:2f:51:0e:65:20:b8:a0:e8:41:54:e0:
b2:08:ac:bc:b0:73:fb:e2:c7:a6:21:3c:80:9e:94:
1d:c5:51:db:12:ab:06:98:12:5a:48:41:ab:0c:b4:
5c:85:d4:6a:2a:f0:75:73:f3:60:6a:42:e7:04:fc:
2e:c6:44:8d:24:8c:71:39:5e:26:15:3b:f6:06:6e:
5a:79:88:40:3e:e2:81:df:08:71:36:6f:6d:32:41:
fd:f9:4f:ac:24:fd:9a:f4:c9:45:43:bf:07:1a:5e:
05:9a:9d:be:1e:ac:0b:b9:b6:1d:5c:1b:e4:1b:c2:
3e:86:f6:f7:c4:17:db:2f:eb:7c:f7:de:8c:af:cc:
3f:81:1f:27:d3:be:e7:14:e7:59:c0:2d:01:c6:f0:
49:93:7d:c1:4c:7e:34:74:79:25:f7:25:67:70:8a:
30:08:32:5a:7f:ed:81:26:5f:63:c1:a2:a2:35:9b:
6b:31:43:ab:88:07:3f:4a:2e:6d:13:47:85:52:37:
67:3c:94:ac:58:98:4d:64:57:3c:cc:b1:81:2d:ed:
03:96:24:9d:4b:50:fb:39:46:95:0f:d1:c5:c5:bb:
9f:0a:c5:bc:91:d3:4e:e8:90:48:57:be:57:1a:fc:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:A3:9C:26:58:CF:85:62:B0:AC:5B:62:8F:15:79:EA:FA:E4:68
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:83:a8:95:91:04:43:c2:5a:1d:ba:64:63:4b:dd:fc:33:
88:cf:75:3a:52:1a:f9:e7:2e:9d:61:00:1e:03:d5:b1:82:7f:
8a:db:e1:64:20:71:c8:c3:40:06:9f:89:04:27:cf:23:70:53:
df:c1:f8:ee:84:c2:20:ac:ef:af:bf:8f:f1:ae:bc:d2:f6:5d:
52:80:af:93:c7:75:73:8d:d8:c9:f4:d9:e1:d5:96:b7:0e:4a:
bd:05:ef:84:25:1d:01:8d:74:7a:28:65:38:81:14:fe:95:e4:
bf:b9:9f:0b:a0:f9:db:4e:6f:a1:7b:41:4d:66:f3:a6:dd:bc:
a5:08:9d:dc:4a:71:3e:e8:66:16:de:96:9b:bd:7f:45:f5:e2:
81:60:bd:65:fa:6f:56:76:82:57:8e:47:4d:25:ab:4d:52:19:
96:28:27:35:16:89:a9:0b:3a:e6:22:79:44:11:b2:0c:50:c1:
d5:a5:56:f3:fe:f2:72:01:44:13:30:7b:eb:5a:7f:8c:fb:3c:
ec:fc:d1:ab:da:8a:7c:c1:1e:95:10:f1:60:db:68:95:a4:48:
12:9f:56:c7:80:b0:c7:7b:d5:07:dc:f2:4e:e3:85:6b:80:73:
9f:27:77:08:b2:fe:87:2c:d5:7b:df:ed:46:9e:a7:ff:c9:1a:
15:40:06:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T7Tl6gB/1xPzungoVHcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGMyYzU1ZGM4ZWI5OTdiZjU5MTIxZDRjMmZmZDU0NDRh
MjJlMmQwHhcNMjUwODA0MDkwMDM3WhcNMjUwODA1MDkwMDM3WjAzMTEwLwYDVQQD
Eyg0OGRmYTM5YzI2NThjZjg1NjJiMGFjNWI2MjhmMTU3OWVhZmFlNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYvVZB0y8leEgJtvhLXA2x7nL1EO
ZSC4oOhBVOCyCKy8sHP74semITyAnpQdxVHbEqsGmBJaSEGrDLRchdRqKvB1c/Ng
akLnBPwuxkSNJIxxOV4mFTv2Bm5aeYhAPuKB3whxNm9tMkH9+U+sJP2a9MlFQ78H
Gl4Fmp2+HqwLubYdXBvkG8I+hvb3xBfbL+t8996Mr8w/gR8n077nFOdZwC0BxvBJ
k33BTH40dHkl9yVncIowCDJaf+2BJl9jwaKiNZtrMUOriAc/Si5tE0eFUjdnPJSs
WJhNZFc8zLGBLe0DliSdS1D7OUaVD9HFxbufCsW8kdNO6JBIV75XGvwQ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjfo5wmWM+FYrCsW2KPFXnq+uRoMB8GA1UdIwQY
MBaAFJaMLFXcjrmXv1kSHUwv/VREoi4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYt
MTU0ZTU5OWZkMzVmLzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYtMTU0ZTU5OWZkMzVm
LzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNqDqJWR
BEPCWh26ZGNL3fwziM91OlIa+ecunWEAHgPVsYJ/itvhZCBxyMNABp+JBCfPI3BT
38H47oTCIKzvr7+P8a680vZdUoCvk8d1c43YyfTZ4dWWtw5KvQXvhCUdAY10eihl
OIEU/pXkv7mfC6D5205voXtBTWbzpt28pQid3EpxPuhmFt6Wm71/RfXigWC9Zfpv
VnaCV45HTSWrTVIZlignNRaJqQs65iJ5RBGyDFDB1aVW8/7ycgFEEzB761p/jPs8
7PzRq9qKfMEelRDxYNtolaRIEp9Wx4Cwx3vVB9zyTuOFa4Bznyd3CLL+hyzVe9/t
Rp6n/8kaFUAGIA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:07 2025 by rpki-client