Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: oru6xx8ZaztrlJTkGGy8zBZTCE6vAx0zxxzvaVbBGKI=
Subject key identifier: 9D:3C:6C:45:81:67:84:0F:AB:1D:7A:44:B1:7B:DA:DE:18:4F:16:F3
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 0198906BC953B2032902C6E1405FC563BA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 0C13
Signing time: Sat 09 Aug 2025 20:00:39 +0000
Manifest this update: Sat 09 Aug 2025 20:00:39 +0000
Manifest next update: Sun 10 Aug 2025 20:00:39 +0000
Files and hashes: 1: KvErQkIa-7bptS15YPSXyRA9CSc.roa (hash: oCFio8e2SnoXuYWAJDUSo/+OUQCG41H/KpmIERPwk3M=)
2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: k4TptA4WObr8agCMdrQm3caUwjjhpfSZ3QBM8KpuN4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:c9:53:b2:03:29:02:c6:e1:40:5f:c5:63:ba:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Aug 9 20:00:39 2025 GMT
Not After : Aug 10 20:00:39 2025 GMT
Subject: CN=9d3c6c458167840fab1d7a44b17bdade184f16f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:13:6a:7b:ad:0c:35:7d:19:7f:24:15:30:
cf:5c:a3:2f:ed:29:d4:3c:e7:1c:6a:84:64:f5:22:
77:a0:d9:d7:c0:41:b4:0b:50:80:bc:a9:1b:85:8e:
40:d3:71:df:31:3d:10:65:15:37:e8:79:b6:57:66:
13:05:51:f7:20:09:90:1b:2c:3e:f0:db:fb:5d:a1:
b9:a1:6b:9d:1d:c8:f8:a0:e8:63:89:ff:51:4b:29:
d8:b9:4b:a2:7d:7f:63:e8:7b:ca:f8:4a:f0:e0:28:
ae:42:28:0c:12:a2:3a:15:be:59:f8:8f:12:3e:9d:
cc:03:9f:6a:a1:f4:04:3b:f5:6b:f8:e9:f6:9a:7d:
3f:fa:99:33:53:4c:f7:fd:74:3a:34:62:4b:f3:1f:
88:65:4e:68:d4:01:64:fb:b4:29:7a:e6:67:3f:99:
40:a6:ac:d6:f1:bd:a2:c0:f1:51:4e:37:39:cf:f5:
c3:56:63:b6:27:cc:ac:86:2e:b0:07:df:5b:8f:9e:
45:67:96:48:4e:12:bc:9a:c1:e8:ba:8c:1e:ea:84:
2a:f3:07:90:4e:fc:98:b0:87:84:17:b7:1a:f5:e0:
89:7d:c8:4f:fa:97:87:ba:ae:75:66:96:92:72:9f:
cd:b7:7a:04:76:82:3b:73:6a:19:38:c4:02:9e:94:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3C:6C:45:81:67:84:0F:AB:1D:7A:44:B1:7B:DA:DE:18:4F:16:F3
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:4a:5f:1e:ba:e8:af:1f:e3:4a:bc:5f:0e:45:0c:9a:e1:
99:17:08:3b:16:b3:8f:40:03:1a:f9:89:d5:f2:28:cf:56:8f:
d8:e1:02:2a:a9:6f:0d:04:8c:a5:4c:84:1d:f2:82:c4:74:7a:
04:0e:91:3f:c3:70:1d:15:a0:cb:f2:f3:23:8c:5d:58:75:38:
40:1c:67:2a:26:3e:35:36:50:3b:4c:6f:aa:56:7d:34:df:0e:
40:3c:80:e9:fc:b1:f5:0b:67:5c:83:41:7b:f6:db:2a:35:d0:
23:59:9f:ad:02:17:cf:37:9c:c5:be:f7:3c:80:91:19:9d:b9:
2d:d4:cf:41:62:7f:ee:d0:08:8c:84:21:2c:16:28:37:cc:c6:
9a:f9:21:04:64:19:f9:f8:e0:b4:a0:ae:c7:75:51:7a:e1:81:
e6:b5:6d:9c:70:48:e0:e7:59:48:33:44:1d:b6:d6:bf:88:d7:
0a:0c:17:c8:cf:f2:8e:11:a3:b5:12:70:ac:52:87:d3:16:a7:
bb:ae:73:c5:a9:b9:c0:a9:24:29:5a:83:ac:a4:c0:74:17:45:
6a:ea:44:33:34:90:39:57:cf:0a:a4:8f:f6:64:59:6d:cf:b2:
39:84:1a:f4:49:7b:17:58:70:44:6d:30:55:c3:4a:d0:1e:1f:
94:ff:95:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQa8lTsgMpAsbhQF/FY7qLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGQ4ZDBjZWViY2NkNzViNjA2YmE0OTY4ZjVjNzk0NmU4
ZDQ3YzAwHhcNMjUwODA5MjAwMDM5WhcNMjUwODEwMjAwMDM5WjAzMTEwLwYDVQQD
Eyg5ZDNjNmM0NTgxNjc4NDBmYWIxZDdhNDRiMTdiZGFkZTE4NGYxNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVwTanutDDV9GX8kFTDPXKMv7SnU
POccaoRk9SJ3oNnXwEG0C1CAvKkbhY5A03HfMT0QZRU36Hm2V2YTBVH3IAmQGyw+
8Nv7XaG5oWudHcj4oOhjif9RSynYuUuifX9j6HvK+Erw4CiuQigMEqI6Fb5Z+I8S
Pp3MA59qofQEO/Vr+On2mn0/+pkzU0z3/XQ6NGJL8x+IZU5o1AFk+7QpeuZnP5lA
pqzW8b2iwPFRTjc5z/XDVmO2J8yshi6wB99bj55FZ5ZIThK8msHouowe6oQq8weQ
TvyYsIeEF7ca9eCJfchP+peHuq51ZpaScp/Nt3oEdoI7c2oZOMQCnpRGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ08bEWBZ4QPqx16RLF72t4YTxbzMB8GA1UdIwQY
MBaAFC+NjQzuvM11tga6SWj1x5RujUfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQyTkRPNjh6WFcyQnJwSmFQWEhsRzZOUjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjNiYmQtNGE2MS00MmM1LThiMDct
M2NiZDUyNTdiMDNlLzEvTDQyTkRPNjh6WFcyQnJwSmFQWEhsRzZOUjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjNiYmQtNGE2MS00MmM1LThiMDctM2NiZDUyNTdiMDNl
LzEvTDQyTkRPNjh6WFcyQnJwSmFQWEhsRzZOUjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbxKXx66
6K8f40q8Xw5FDJrhmRcIOxazj0ADGvmJ1fIoz1aP2OECKqlvDQSMpUyEHfKCxHR6
BA6RP8NwHRWgy/LzI4xdWHU4QBxnKiY+NTZQO0xvqlZ9NN8OQDyA6fyx9QtnXINB
e/bbKjXQI1mfrQIXzzecxb73PICRGZ25LdTPQWJ/7tAIjIQhLBYoN8zGmvkhBGQZ
+fjgtKCux3VReuGB5rVtnHBI4OdZSDNEHbbWv4jXCgwXyM/yjhGjtRJwrFKH0xan
u65zxam5wKkkKVqDrKTAdBdFaupEMzSQOVfPCqSP9mRZbc+yOYQa9El7F1hwRG0w
VcNK0B4flP+VqA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:22 2025 by rpki-client