Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: cb8UK7iry6Kt6Sv8CJIgiGQfeb20xX7X6H8Apf3CUbk=
Subject key identifier: 26:DC:3F:F0:4D:41:2E:AE:CD:5E:7F:E6:F2:EC:2F:95:CB:79:5E:34
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019883C31500B47B30BA9681BDE27AB53379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 13D4
Signing time: Thu 07 Aug 2025 09:00:56 +0000
Manifest this update: Thu 07 Aug 2025 09:00:56 +0000
Manifest next update: Fri 08 Aug 2025 09:00:56 +0000
Files and hashes: 1: 6rStul-KJYhq6MLDsqFqp0QCJ-w.roa (hash: UgkfY0GpWezlJwqyNlWzjCQU4cnRnYzqK30vIO1treQ=)
2: GAmyQv8-gT8CZ7d-txbZl5EhOio.roa (hash: iUcK9uyMQ6focHOP9BZWCHQasgvLPeszd6U4NOgrxL8=)
3: ZfBa2kOopYZN1zSmKbC-lmjGWMU.roa (hash: XOVEAESgfg7MRdYVfSlFUrFkfMe08NvtY8t3C+PTjsk=)
4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: 1+zf1bamcT7d7ZcAPEkHYo3sUELb9ne1mU4Wk862Z1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:15:00:b4:7b:30:ba:96:81:bd:e2:7a:b5:33:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Aug 7 09:00:56 2025 GMT
Not After : Aug 8 09:00:56 2025 GMT
Subject: CN=26dc3ff04d412eaecd5e7fe6f2ec2f95cb795e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:65:79:a2:53:ab:05:c2:85:b9:0a:09:a0:
fe:da:c1:8f:a2:45:be:db:8a:67:b4:8f:ed:6e:4b:
9a:19:c8:17:6c:5f:b4:48:20:7a:71:97:0a:7c:9b:
e9:6c:9f:b6:9d:b1:5c:70:54:08:35:17:64:1f:48:
1d:7a:b5:2d:e9:3d:1f:61:d6:27:5c:db:b8:3f:95:
74:0c:0c:d7:cf:11:bd:8b:04:4b:be:50:a3:74:ff:
57:7c:b8:75:35:5f:ea:05:3c:b1:87:d6:75:75:2c:
0f:db:48:64:49:d5:9c:dc:bb:91:d2:8e:9b:88:0a:
70:7c:cb:82:58:ee:41:3c:18:19:56:d1:65:29:a3:
77:78:3c:27:35:ff:55:21:cc:1a:6e:5a:f6:88:0b:
42:2d:fb:27:f0:73:d0:53:c3:69:fc:a5:4a:f6:47:
15:ff:31:ff:d3:20:cb:63:54:c1:a6:38:f5:38:24:
d1:12:d3:82:46:ff:8a:0b:25:b3:fb:da:31:42:76:
95:b1:36:95:a7:f0:e7:bf:37:30:4a:1a:28:27:92:
b2:41:e5:22:7f:4a:82:78:ae:0f:bd:e3:4b:72:e9:
aa:57:56:a4:21:9a:c7:50:17:f4:c8:91:6d:1d:83:
ab:ad:76:b0:e6:93:d2:06:3d:af:1c:ac:32:ab:07:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:3F:F0:4D:41:2E:AE:CD:5E:7F:E6:F2:EC:2F:95:CB:79:5E:34
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:f1:b2:84:c3:b3:ca:35:b6:14:4b:40:b4:0c:3a:92:b0:
26:4f:64:6a:f5:fd:4f:6a:c5:da:2f:c1:60:b2:35:63:08:dd:
41:0e:31:ab:8d:7b:7b:27:ce:3e:ec:25:cd:06:96:10:f1:49:
fe:fb:92:26:80:32:31:53:a0:92:72:bb:d3:e0:d0:05:4d:b4:
c6:24:3a:7d:9f:87:28:e4:e7:d6:fe:86:38:ce:83:5b:9a:d8:
dc:8c:4c:7c:73:ce:ff:31:87:31:fa:21:86:b0:43:b8:c0:5d:
8c:5c:26:ab:02:db:bc:36:97:87:c6:04:38:fd:20:3c:47:4d:
28:f4:ab:61:9f:1b:20:04:43:4b:69:4f:73:32:15:85:1c:47:
87:e8:f2:da:36:0d:8c:a6:11:d9:01:3d:2d:c2:7f:16:88:e1:
fd:46:35:00:9b:01:1a:b0:32:fd:fe:8d:f3:fa:7f:93:18:88:
a3:4f:08:55:4a:12:95:4a:94:da:a7:bb:9c:b0:ac:51:1e:a5:
7e:5d:d0:00:c7:dc:5f:9f:d0:6d:f5:3f:c9:88:69:2e:c0:20:
53:31:9f:6f:50:d1:57:d5:86:19:c3:bd:c5:43:c7:09:5f:62:
bc:dc:8b:72:83:ff:b8:14:a0:4e:8d:6d:fc:98:95:56:13:b9:
8a:08:36:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDwxUAtHswupaBveJ6tTN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjUwODA3MDkwMDU2WhcNMjUwODA4MDkwMDU2WjAzMTEwLwYDVQQD
EygyNmRjM2ZmMDRkNDEyZWFlY2Q1ZTdmZTZmMmVjMmY5NWNiNzk1ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxleaJTqwXChbkKCaD+2sGPokW+
24pntI/tbkuaGcgXbF+0SCB6cZcKfJvpbJ+2nbFccFQINRdkH0gderUt6T0fYdYn
XNu4P5V0DAzXzxG9iwRLvlCjdP9XfLh1NV/qBTyxh9Z1dSwP20hkSdWc3LuR0o6b
iApwfMuCWO5BPBgZVtFlKaN3eDwnNf9VIcwablr2iAtCLfsn8HPQU8Np/KVK9kcV
/zH/0yDLY1TBpjj1OCTREtOCRv+KCyWz+9oxQnaVsTaVp/DnvzcwShooJ5KyQeUi
f0qCeK4PveNLcumqV1akIZrHUBf0yJFtHYOrrXaw5pPSBj2vHKwyqweoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbcP/BNQS6uzV5/5vLsL5XLeV40MB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX/xsoTD
s8o1thRLQLQMOpKwJk9kavX9T2rF2i/BYLI1YwjdQQ4xq417eyfOPuwlzQaWEPFJ
/vuSJoAyMVOgknK70+DQBU20xiQ6fZ+HKOTn1v6GOM6DW5rY3IxMfHPO/zGHMfoh
hrBDuMBdjFwmqwLbvDaXh8YEOP0gPEdNKPSrYZ8bIARDS2lPczIVhRxHh+jy2jYN
jKYR2QE9LcJ/Fojh/UY1AJsBGrAy/f6N8/p/kxiIo08IVUoSlUqU2qe7nLCsUR6l
fl3QAMfcX5/QbfU/yYhpLsAgUzGfb1DRV9WGGcO9xUPHCV9ivNyLcoP/uBSgTo1t
/JiVVhO5igg2Tg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:46 2025 by rpki-client