Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: NYBOTL2/A/yPRSs+33h+HsJS5tmPsghZw5DlrlZniBY=
Subject key identifier: CE:9E:D2:97:E6:DE:13:0B:A5:D1:51:DD:42:DB:6E:80:5B:A8:D6:14
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0198801DC1BC68064E92D84D303E0BD2502F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 092C
Signing time: Wed 06 Aug 2025 16:01:30 +0000
Manifest this update: Wed 06 Aug 2025 16:01:30 +0000
Manifest next update: Thu 07 Aug 2025 16:01:30 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: XXIp/YI/JUiAT7L3vpAVOJ5xzNhr048O7FfCsYny2TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:c1:bc:68:06:4e:92:d8:4d:30:3e:0b:d2:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Aug 6 16:01:30 2025 GMT
Not After : Aug 7 16:01:30 2025 GMT
Subject: CN=ce9ed297e6de130ba5d151dd42db6e805ba8d614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:1c:f7:a3:7a:43:11:9d:4e:04:33:91:2a:
e6:02:c8:72:85:9d:5f:00:e8:3f:0f:fd:0c:7d:52:
a4:bb:cc:11:29:4d:17:06:77:7f:01:63:25:86:46:
f1:5c:45:99:f0:d6:da:26:00:02:b0:c8:8c:4b:37:
60:dc:67:49:9b:0e:5d:25:cf:b9:6e:25:ad:c3:11:
0a:51:5c:e9:57:40:7e:6d:8d:59:cf:52:1c:55:33:
78:14:7d:0e:df:a7:57:95:55:5f:7a:84:ff:22:d4:
b6:17:73:1f:13:f7:c7:d7:46:c2:dc:11:f1:63:ef:
73:3c:00:15:42:81:d2:2d:f5:ca:db:eb:a6:b8:25:
dd:81:61:a5:15:9e:34:34:80:61:b3:54:bb:d6:67:
74:bb:a0:b1:46:79:91:ff:cb:a2:a6:7b:c0:c4:c2:
0d:88:fd:15:b6:fb:da:ac:5b:97:0a:92:fe:ba:e6:
2c:29:66:8c:37:a4:60:3f:a2:ff:a9:ff:e9:f4:5b:
6e:ab:90:5c:7b:0c:fa:1b:c2:fe:7a:7c:99:96:7a:
25:c0:e3:1e:86:dd:8b:8a:d3:82:2a:d5:0d:0e:73:
8d:ab:3a:bc:8e:6c:1a:32:67:4c:c3:e8:1c:c5:d9:
ef:93:19:aa:2f:d7:f1:b2:3c:48:3e:c2:5a:32:4f:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:D2:97:E6:DE:13:0B:A5:D1:51:DD:42:DB:6E:80:5B:A8:D6:14
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d9:e2:18:42:f2:a3:90:c1:07:45:99:45:68:21:f6:53:b0:
bf:95:e6:1a:80:2c:c3:a9:6f:51:12:d5:09:a2:1f:7b:34:83:
44:53:8e:19:54:64:9b:40:56:80:fa:eb:20:51:0a:60:19:13:
00:a8:41:a1:52:95:94:46:44:bf:ac:8e:35:6d:cc:ed:fc:96:
2c:42:71:e2:0c:98:34:20:2d:ca:4b:02:89:6c:e6:f5:7c:f0:
4c:56:e5:2a:d9:9c:df:b6:80:23:10:0c:e6:55:2e:7f:86:c2:
3b:db:1f:f3:86:fe:87:19:21:f0:a2:eb:39:1f:2f:dc:22:b5:
a6:21:5d:20:61:dc:c0:bd:d2:3d:96:99:c4:9d:44:4f:19:8f:
d9:df:29:5d:ab:96:a3:5b:57:ad:ff:94:49:2d:ed:05:9f:94:
95:92:d9:26:a4:b0:1e:01:77:17:0d:df:55:5f:9f:06:ed:14:
1c:31:0c:00:26:49:a0:31:05:c1:d2:a1:7e:e7:b4:2b:bb:a8:
26:64:0c:43:e5:d9:8e:53:48:46:c6:cb:a5:db:d3:fb:f3:e9:
51:e5:ab:02:f3:e8:46:b0:38:be:48:6c:d1:4e:fe:03:1e:24:
0f:b3:04:56:03:c2:ef:41:44:da:c7:4a:2a:fe:35:2b:58:4a:
45:95:d8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAHcG8aAZOkthNMD4L0lAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjUwODA2MTYwMTMwWhcNMjUwODA3MTYwMTMwWjAzMTEwLwYDVQQD
EyhjZTllZDI5N2U2ZGUxMzBiYTVkMTUxZGQ0MmRiNmU4MDViYThkNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoYc96N6QxGdTgQzkSrmAshyhZ1f
AOg/D/0MfVKku8wRKU0XBnd/AWMlhkbxXEWZ8NbaJgACsMiMSzdg3GdJmw5dJc+5
biWtwxEKUVzpV0B+bY1Zz1IcVTN4FH0O36dXlVVfeoT/ItS2F3MfE/fH10bC3BHx
Y+9zPAAVQoHSLfXK2+umuCXdgWGlFZ40NIBhs1S71md0u6CxRnmR/8uipnvAxMIN
iP0VtvvarFuXCpL+uuYsKWaMN6RgP6L/qf/p9Ftuq5Bcewz6G8L+enyZlnolwOMe
ht2LitOCKtUNDnONqzq8jmwaMmdMw+gcxdnvkxmqL9fxsjxIPsJaMk+yKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6e0pfm3hMLpdFR3ULbboBbqNYUMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdniGELy
o5DBB0WZRWgh9lOwv5XmGoAsw6lvURLVCaIfezSDRFOOGVRkm0BWgPrrIFEKYBkT
AKhBoVKVlEZEv6yONW3M7fyWLEJx4gyYNCAtyksCiWzm9XzwTFblKtmc37aAIxAM
5lUuf4bCO9sf84b+hxkh8KLrOR8v3CK1piFdIGHcwL3SPZaZxJ1ETxmP2d8pXauW
o1tXrf+USS3tBZ+UlZLZJqSwHgF3Fw3fVV+fBu0UHDEMACZJoDEFwdKhfue0K7uo
JmQMQ+XZjlNIRsbLpdvT+/PpUeWrAvPoRrA4vkhs0U7+Ax4kD7MEVgPC70FE2sdK
Kv41K1hKRZXYcA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:27:14 2025 by rpki-client