Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: XFjbpq/ehLW4iHz8WHFcrF+NRhkyzP5tFyCTng0xoIY=
Subject key identifier: 1A:F4:CC:53:6A:B9:AD:C2:D8:B0:F3:2A:1F:45:11:81:68:56:5E:65
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019881D4EF9D0DD86E81B792215E092A49B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 14BC
Signing time: Thu 07 Aug 2025 00:01:12 +0000
Manifest this update: Thu 07 Aug 2025 00:01:12 +0000
Manifest next update: Fri 08 Aug 2025 00:01:12 +0000
Files and hashes: 1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=)
2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=)
3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: jsx3xqa8AK9ab6rGJmoG17fIoo8VgGOU8uKsiHSL0dM=)
4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=)
5: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (hash: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=)
6: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=)
7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=)
8: YcddWRNkcNBtg2GRMDNHHw9mFJ4.roa (hash: G/xopPnzXkAvpcbYnZmulnHRu0yyJM+YK09jXPq59tw=)
9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:ef:9d:0d:d8:6e:81:b7:92:21:5e:09:2a:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Aug 7 00:01:12 2025 GMT
Not After : Aug 8 00:01:12 2025 GMT
Subject: CN=1af4cc536ab9adc2d8b0f32a1f45118168565e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:a0:bd:31:7d:d1:cd:d4:aa:c3:78:27:db:
11:16:1a:6a:9c:18:89:86:0a:fe:16:af:21:83:7d:
44:32:6a:2a:1e:47:dc:df:f0:1a:2c:d3:cc:f5:3d:
7c:63:38:29:89:05:cb:8c:d9:6a:25:87:87:ee:3a:
2d:e5:08:56:e3:c9:e5:52:01:01:59:f9:72:cf:c7:
05:07:0e:20:8d:7f:b8:32:76:f2:2f:7b:38:3a:67:
d8:07:fc:e7:bf:fa:e2:55:88:51:65:9a:d6:75:1a:
70:99:e9:30:8c:fb:51:59:fa:de:14:62:3c:84:58:
4f:df:f8:6e:aa:31:85:20:28:d7:71:23:3f:d1:a7:
88:7b:86:ff:9d:8c:06:34:fa:3e:da:a0:a2:ec:2a:
1a:45:ca:7e:46:cb:47:01:b1:f5:43:1f:2b:6a:d2:
8b:cf:c5:4c:35:1a:fb:ad:25:ca:aa:c0:e6:3f:8f:
4f:be:ce:1f:5d:a7:59:f7:f3:c3:7a:36:96:08:ee:
10:12:d0:50:1d:27:d7:d5:73:6b:3d:88:13:e0:83:
d0:ae:e6:f2:1b:e5:3e:b3:54:c6:c9:42:dc:61:bc:
11:54:ae:37:2a:75:5d:a2:ec:75:e7:29:75:b3:e7:
c9:cc:d6:95:e6:82:8a:4c:1f:6c:08:12:de:a9:e2:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F4:CC:53:6A:B9:AD:C2:D8:B0:F3:2A:1F:45:11:81:68:56:5E:65
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d9:1c:bc:af:91:cb:c6:5e:a7:34:01:b7:ee:82:bb:34:20:
52:9e:c7:0d:88:cc:dd:41:f2:e8:a4:78:c5:21:91:91:fc:fe:
29:c7:ba:14:ef:ae:fd:c5:b4:81:6e:3e:cc:b4:9a:9d:05:c5:
f4:9d:ac:ab:5a:1c:e7:60:0a:d1:33:3d:2d:13:87:a5:95:c8:
e5:b0:f7:0a:cb:fc:73:e0:20:d6:06:98:8e:dc:24:a8:66:50:
e3:dc:e6:1b:16:a9:72:71:f0:22:d8:7e:6e:fe:9e:bb:b2:e3:
41:8b:49:39:6d:49:3e:c6:aa:57:d0:b8:fb:24:f9:81:57:0e:
b7:a5:96:ce:e6:cc:ba:9a:02:dc:6b:71:c9:ea:21:97:c4:f1:
19:3f:b5:c7:ff:57:c7:7a:3e:d7:2a:49:f9:95:cc:7d:56:ce:
68:86:24:e8:42:a0:ee:35:6e:70:1a:a4:c6:1d:54:5a:34:95:
62:16:02:83:7f:82:d3:4c:b2:c8:f8:8f:d8:47:62:84:c7:37:
a8:0b:5d:a7:2f:2f:b8:8a:25:33:c5:d0:dc:08:61:6f:d5:09:
cc:1a:5a:03:59:0b:07:6f:b8:53:0e:78:6d:1c:d6:4f:98:75:
85:b5:b3:df:94:1f:f5:8f:29:63:63:55:1b:16:98:05:5c:0e:
69:e2:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:21 2025 by rpki-client