Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: Y5U7M3pT3CHJTeZnwQOldXutfODMq95he5GXi18/a9A=
Subject key identifier: 44:3F:8F:4A:38:55:54:DE:38:1F:FE:22:6B:35:BE:26:B4:E9:90:9A
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 0198752C2FC9E955BBCE8AB8A5AB633E66D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 1631
Signing time: Mon 04 Aug 2025 13:01:26 +0000
Manifest this update: Mon 04 Aug 2025 13:01:26 +0000
Manifest next update: Tue 05 Aug 2025 13:01:26 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: er+JFpPgjejfDpn+fe8mvmJBv1zVjYPq8ar/zkArAm4=)
2: IbNwOiJ1le6Y53Nfy_nDXLnu_e8.roa (hash: WT+RMze0r66BHerB43Jku9h5V4DbQETjQUbfL1+hc8o=)
3: PE9TZdJ8-Lln6kf9d9axXJAbp-c.roa (hash: L+Px9nqboU0pthFP3MQiGwoS0A274PGNuMWfIopTQcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:2f:c9:e9:55:bb:ce:8a:b8:a5:ab:63:3e:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Aug 4 13:01:26 2025 GMT
Not After : Aug 5 13:01:26 2025 GMT
Subject: CN=443f8f4a385554de381ffe226b35be26b4e9909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:38:b1:df:56:66:2e:75:45:55:48:47:65:
aa:f5:bd:47:57:e6:96:76:ba:d4:46:41:61:22:8a:
f1:d1:b4:b2:46:e1:80:92:b6:0a:e6:49:26:00:d4:
5a:22:75:10:92:cb:b8:79:30:1a:4f:45:7f:f2:e8:
ed:77:e8:ac:9d:34:bd:cc:81:9a:48:cb:97:95:40:
25:4a:16:86:49:4f:9a:20:28:39:9b:97:43:a8:84:
f3:6e:79:a9:db:f0:76:b4:01:9e:3a:b7:99:2b:36:
ba:76:b4:bd:2b:28:6b:a6:4d:5b:f4:55:13:4b:0b:
6e:06:ab:31:6d:01:e9:82:a7:72:9f:29:1b:1a:70:
45:e9:40:6d:2d:7a:a8:a8:04:ec:6a:ad:47:6b:c0:
70:2e:ba:15:f7:53:c0:a0:37:4c:da:e4:7d:5e:4c:
cd:62:4f:9a:01:d5:a0:1f:7f:59:9d:20:c7:34:d7:
17:b6:e3:ac:2a:15:8b:d6:0f:90:01:d7:c4:48:c0:
ce:45:5d:58:ed:a5:fc:bf:d0:b2:08:f4:b6:6b:07:
e6:12:d3:32:4b:e0:56:45:c1:a6:b4:38:91:f2:7a:
49:8b:52:d3:bd:df:44:9a:53:de:bc:ab:bb:e8:0b:
e6:b1:08:45:66:b4:9d:44:75:bf:6f:5c:d8:c0:4e:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:8F:4A:38:55:54:DE:38:1F:FE:22:6B:35:BE:26:B4:E9:90:9A
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:10:a5:9f:4b:36:15:43:6c:96:eb:36:29:23:8d:ff:0f:2d:
8b:d1:b8:43:f8:aa:9a:04:ed:77:a6:6f:8d:38:be:7e:cb:9c:
86:c0:20:61:ef:63:79:d7:0c:0a:37:57:49:e3:0e:da:1a:df:
09:d5:9f:e9:5c:48:ce:66:22:bd:45:ff:58:79:3d:d4:bb:7d:
a6:f1:af:47:ef:b1:f4:36:bb:c0:a9:0d:c4:ff:df:bc:11:c6:
15:a1:83:68:c1:06:aa:d2:bf:68:00:40:bb:75:8f:12:7c:f0:
5c:68:8d:50:94:b5:59:26:93:29:ff:19:21:cf:c2:28:7d:a9:
6c:c5:53:92:0f:79:60:35:e0:a9:48:b9:12:22:bc:b0:e1:35:
1a:05:05:5d:6c:95:09:26:18:d6:88:11:93:b1:d4:e1:24:c0:
d8:31:13:57:ea:e5:a6:b5:46:42:74:7d:e2:ab:a3:0a:1a:b5:
41:bb:7e:11:43:d7:f2:e7:34:92:21:a2:2d:50:a8:6a:da:9e:
cf:d5:49:61:e5:65:a4:1e:73:64:3f:8d:70:06:6b:dc:33:7e:
df:69:4e:83:e4:f1:18:1f:22:b4:72:ad:b2:ed:ec:91:3b:00:
2a:d3:72:4a:55:5c:3b:d0:bb:04:06:99:54:e5:eb:74:d5:a0:
1b:20:b2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1LC/J6VW7zoq4patjPmbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjUwODA0MTMwMTI2WhcNMjUwODA1MTMwMTI2WjAzMTEwLwYDVQQD
Eyg0NDNmOGY0YTM4NTU1NGRlMzgxZmZlMjI2YjM1YmUyNmI0ZTk5MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHY4sd9WZi51RVVIR2Wq9b1HV+aW
drrURkFhIorx0bSyRuGAkrYK5kkmANRaInUQksu4eTAaT0V/8ujtd+isnTS9zIGa
SMuXlUAlShaGSU+aICg5m5dDqITzbnmp2/B2tAGeOreZKza6drS9Kyhrpk1b9FUT
SwtuBqsxbQHpgqdynykbGnBF6UBtLXqoqATsaq1Ha8BwLroV91PAoDdM2uR9XkzN
Yk+aAdWgH39ZnSDHNNcXtuOsKhWL1g+QAdfESMDORV1Y7aX8v9CyCPS2awfmEtMy
S+BWRcGmtDiR8npJi1LTvd9EmlPevKu76AvmsQhFZrSdRHW/b1zYwE6+nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ/j0o4VVTeOB/+Ims1via06ZCaMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBCln0s2
FUNslus2KSON/w8ti9G4Q/iqmgTtd6ZvjTi+fsuchsAgYe9jedcMCjdXSeMO2hrf
CdWf6VxIzmYivUX/WHk91Lt9pvGvR++x9Da7wKkNxP/fvBHGFaGDaMEGqtK/aABA
u3WPEnzwXGiNUJS1WSaTKf8ZIc/CKH2pbMVTkg95YDXgqUi5EiK8sOE1GgUFXWyV
CSYY1ogRk7HU4STA2DETV+rlprVGQnR94qujChq1Qbt+EUPX8uc0kiGiLVCoatqe
z9VJYeVlpB5zZD+NcAZr3DN+32lOg+TxGB8itHKtsu3skTsAKtNySlVcO9C7BAaZ
VOXrdNWgGyCysg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:38 2025 by rpki-client