Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: QhHwyOmpY7694qZZy5DLi+/yEy6/DiVWxFsIyR9U7pk=
Subject key identifier: 2F:7C:47:76:94:5F:F0:30:5D:F1:E3:C9:27:89:CD:DD:DB:55:B6:C6
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 01987486AFC13AF9A4D304905EF348BC6DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 10:00:40 +0000
Manifest this update: Mon 04 Aug 2025 10:00:40 +0000
Manifest next update: Tue 05 Aug 2025 10:00:40 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: +Da1ZkChUZxi+Nta5smoSCiddq3qlXdmg76XsN7FN5g=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:af:c1:3a:f9:a4:d3:04:90:5e:f3:48:bc:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Aug 4 10:00:40 2025 GMT
Not After : Aug 5 10:00:40 2025 GMT
Subject: CN=2f7c4776945ff0305df1e3c92789cddddb55b6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:cc:e7:92:74:c3:aa:c1:20:d9:a8:e0:e3:
49:9a:4d:54:18:55:f5:80:92:a3:66:1f:1e:ac:76:
fe:86:a9:aa:89:b0:c2:67:a6:9d:70:80:68:9b:5c:
f6:50:10:db:f0:b5:cd:ae:95:6e:78:24:b7:22:0c:
30:b5:98:4d:3e:6d:61:6a:72:8c:5e:f7:e4:1e:3e:
16:54:28:b6:4a:3c:6a:0a:d8:d7:9c:69:73:5e:a9:
49:02:1c:ac:8c:c8:98:37:75:eb:f2:53:0b:72:0e:
9c:78:2d:5a:6c:dc:5a:48:4d:e6:bf:58:71:79:32:
57:cf:f2:a4:15:d7:53:36:7d:ba:a1:fe:9f:cc:4a:
83:15:f9:3b:35:d4:13:cd:57:07:db:e2:1b:0e:73:
bb:89:91:49:94:f0:74:95:70:23:fb:5b:03:2b:41:
44:7a:64:08:9e:19:b0:0f:0e:1d:09:f6:c1:35:c2:
2c:bd:9c:25:86:a4:26:f9:54:e9:53:2e:44:c9:72:
c8:69:2a:99:04:e5:6b:a2:94:0f:de:27:1a:8b:d5:
d9:a5:45:f6:79:c7:53:00:c8:2f:ce:7c:53:e7:5d:
39:c8:55:8a:c2:d4:65:00:eb:c6:ff:df:02:6e:fb:
89:da:d4:6c:74:4c:9d:3e:82:d1:f7:16:81:3d:90:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7C:47:76:94:5F:F0:30:5D:F1:E3:C9:27:89:CD:DD:DB:55:B6:C6
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:5d:8a:d7:5c:ee:95:a9:01:5c:58:ec:f7:f9:aa:40:c6:
d7:34:b7:11:c9:11:a6:08:44:ce:3a:07:62:ff:03:ad:13:04:
45:ee:ff:c7:22:93:a1:47:72:57:1a:42:6c:6b:9f:db:5d:3f:
a8:4a:9a:58:7c:ac:1a:f8:b5:61:6a:42:48:27:63:5c:9c:99:
71:63:f6:eb:64:d4:c4:21:12:54:21:d3:39:20:32:77:b0:3f:
a1:b6:cd:55:0c:fa:9b:30:0b:b1:2f:47:fc:e6:3f:d5:d7:c1:
3f:f4:5b:67:f0:6b:b8:8c:fc:ce:2c:84:8f:17:b5:84:8c:4e:
6b:a0:e3:46:3b:10:a6:a5:a2:5a:c1:70:26:22:f0:fb:b8:16:
09:c8:72:c3:06:ea:6e:3a:cd:d0:67:2d:a7:be:b7:ed:92:b4:
28:a2:a5:bc:9f:91:ef:97:58:fc:bd:c9:cc:dd:c8:20:25:a3:
33:7b:71:e2:f5:0e:44:2c:ab:08:3d:cc:a5:e3:ef:da:b0:90:
83:36:29:4b:5e:65:15:84:28:59:fd:b3:fa:c2:f7:28:97:98:
47:06:ac:63:18:33:df:3e:9e:5f:af:15:0f:a2:76:1b:0c:72:
07:6a:66:dc:3e:52:a8:36:97:ad:c4:97:ee:cb:da:b0:43:ff:
bd:13:69:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hq/BOvmk0wSQXvNIvG3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzRmNzBhOTJkNDZhYzAyYzhkZmU3Zjk3NWJlNDhhYmQ2
MmU3YTQwHhcNMjUwODA0MTAwMDQwWhcNMjUwODA1MTAwMDQwWjAzMTEwLwYDVQQD
EygyZjdjNDc3Njk0NWZmMDMwNWRmMWUzYzkyNzg5Y2RkZGRiNTViNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFPM55J0w6rBINmo4ONJmk1UGFX1
gJKjZh8erHb+hqmqibDCZ6adcIBom1z2UBDb8LXNrpVueCS3IgwwtZhNPm1hanKM
XvfkHj4WVCi2SjxqCtjXnGlzXqlJAhysjMiYN3Xr8lMLcg6ceC1abNxaSE3mv1hx
eTJXz/KkFddTNn26of6fzEqDFfk7NdQTzVcH2+IbDnO7iZFJlPB0lXAj+1sDK0FE
emQInhmwDw4dCfbBNcIsvZwlhqQm+VTpUy5EyXLIaSqZBOVropQP3icai9XZpUX2
ecdTAMgvznxT5105yFWKwtRlAOvG/98CbvuJ2tRsdEydPoLR9xaBPZBdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC98R3aUX/AwXfHjySeJzd3bVbbGMB8GA1UdIwQY
MBaAFA/E9wqS1GrALI3+f5db5Iq9YuekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgt
NjViODZhMDM1YTA4LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgtNjViODZhMDM1YTA4
LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0Nditdc
7pWpAVxY7Pf5qkDG1zS3EckRpghEzjoHYv8DrRMERe7/xyKToUdyVxpCbGuf210/
qEqaWHysGvi1YWpCSCdjXJyZcWP262TUxCESVCHTOSAyd7A/obbNVQz6mzALsS9H
/OY/1dfBP/RbZ/BruIz8ziyEjxe1hIxOa6DjRjsQpqWiWsFwJiLw+7gWCchywwbq
bjrN0Gctp7637ZK0KKKlvJ+R75dY/L3JzN3IICWjM3tx4vUORCyrCD3MpePv2rCQ
gzYpS15lFYQoWf2z+sL3KJeYRwasYxgz3z6eX68VD6J2GwxyB2pm3D5SqDaXrcSX
7svasEP/vRNpCg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:41 2025 by rpki-client