Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: eh2t8dSX2MysZhXuZZYCOYZVShWHOOdxbN+Qce+cxT8=
Subject key identifier: 27:76:56:46:A3:42:8F:22:95:DD:D8:DB:C6:6B:4B:B6:5E:83:6B:6A
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 0198733CF7C0DF92AD74F38D073614FA87F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0727
Signing time: Mon 04 Aug 2025 04:00:31 +0000
Manifest this update: Mon 04 Aug 2025 04:00:31 +0000
Manifest next update: Tue 05 Aug 2025 04:00:31 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: lq68xe1Gmg8Tw8bERZrJKzk0UDZae3q1l3LjsVgWKfk=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f7:c0:df:92:ad:74:f3:8d:07:36:14:fa:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Aug 4 04:00:31 2025 GMT
Not After : Aug 5 04:00:31 2025 GMT
Subject: CN=27765646a3428f2295ddd8dbc66b4bb65e836b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:27:bd:a5:94:11:b2:53:31:1e:61:37:d9:
47:59:5b:76:6d:a3:59:fe:a2:c7:83:b9:08:6f:f6:
59:f4:21:d1:9c:de:65:b7:8c:90:bc:90:98:85:d3:
e3:c3:01:05:13:1c:71:e6:1a:d6:f7:35:f6:cd:7f:
46:31:bf:24:a0:4f:51:1d:7b:57:46:8b:77:20:92:
c8:e6:a7:73:eb:9b:4d:5e:36:d3:4d:4d:84:80:82:
49:22:8c:3a:87:41:51:81:b6:46:ae:dd:cc:73:4e:
03:39:fc:7a:97:0c:21:79:b7:7f:85:a9:a4:a6:63:
f6:f2:53:c9:39:77:cb:a4:56:1b:f8:62:86:0b:ca:
58:f7:2f:78:08:c8:28:6c:c8:56:23:92:82:db:f4:
fd:e2:f1:b2:16:b6:61:b1:f1:61:5b:ec:7c:b3:6e:
ff:f8:81:8a:6d:f5:54:5d:f2:19:a2:19:6e:f3:0a:
7d:c2:ad:f6:82:e8:3d:91:cd:0d:99:fe:76:76:ce:
7a:1a:a2:c0:da:0a:23:a3:c3:da:f4:cd:72:d8:37:
a1:92:4b:a8:ae:dd:e3:8b:81:d9:e4:3f:79:56:0c:
41:b8:d3:fb:6e:03:a0:fc:d6:3c:fe:ba:94:8e:9e:
d5:d4:57:c9:08:5a:39:17:b2:ec:3f:8f:de:bc:b5:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:56:46:A3:42:8F:22:95:DD:D8:DB:C6:6B:4B:B6:5E:83:6B:6A
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:5d:b9:43:79:a4:68:33:ae:16:3e:9b:69:85:bc:31:4e:
e8:5a:6b:4c:81:69:b6:90:ba:08:f9:93:d1:e8:30:09:8a:d5:
79:c1:b6:6c:2b:4c:e0:c9:f9:cd:d7:30:4e:65:0f:3b:7f:72:
df:13:cd:d3:75:ba:d4:c4:14:55:51:14:1a:31:45:43:4b:7e:
31:48:f2:e2:ac:83:66:a0:85:d8:5b:44:28:87:b8:07:2c:58:
12:59:b4:de:a6:e2:12:39:db:66:57:15:97:e1:27:dc:09:50:
03:dc:b9:29:ea:6b:94:8f:77:c4:ae:77:6b:55:4d:95:88:fa:
be:fe:19:25:bc:cf:73:f1:7b:65:64:db:1f:19:31:57:fc:c4:
8c:9c:a6:51:4b:48:03:a7:51:a8:c9:bc:42:7b:7b:17:6f:63:
5e:44:2f:73:51:c7:5a:c1:5b:0d:26:43:ef:3f:43:47:c4:e5:
aa:ed:ff:89:6c:15:48:6f:b0:6d:4c:3e:f4:8b:0f:f6:cc:59:
01:d9:20:9f:ae:b9:60:9a:68:75:1a:e3:1a:45:04:b2:ed:25:
74:bb:1e:d9:df:49:b8:67:0d:7c:d7:4e:7c:d3:5e:1d:57:4f:
92:83:2f:79:cc:b3:4c:bb:1b:03:ca:35:aa:48:a8:0c:91:ea:
d9:ce:c5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPPfA35KtdPONBzYU+ofyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk
NTY3ZjQwHhcNMjUwODA0MDQwMDMxWhcNMjUwODA1MDQwMDMxWjAzMTEwLwYDVQQD
EygyNzc2NTY0NmEzNDI4ZjIyOTVkZGQ4ZGJjNjZiNGJiNjVlODM2YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxMnvaWUEbJTMR5hN9lHWVt2baNZ
/qLHg7kIb/ZZ9CHRnN5lt4yQvJCYhdPjwwEFExxx5hrW9zX2zX9GMb8koE9RHXtX
Rot3IJLI5qdz65tNXjbTTU2EgIJJIow6h0FRgbZGrt3Mc04DOfx6lwwhebd/hamk
pmP28lPJOXfLpFYb+GKGC8pY9y94CMgobMhWI5KC2/T94vGyFrZhsfFhW+x8s27/
+IGKbfVUXfIZohlu8wp9wq32gug9kc0Nmf52ds56GqLA2gojo8Pa9M1y2Dehkkuo
rt3ji4HZ5D95VgxBuNP7bgOg/NY8/rqUjp7V1FfJCFo5F7LsP4/evLX+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd2VkajQo8ild3Y28ZrS7Zeg2tqMB8GA1UdIwQY
MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt
Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk
LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnABduUN5
pGgzrhY+m2mFvDFO6FprTIFptpC6CPmT0egwCYrVecG2bCtM4Mn5zdcwTmUPO39y
3xPN03W61MQUVVEUGjFFQ0t+MUjy4qyDZqCF2FtEKIe4ByxYElm03qbiEjnbZlcV
l+En3AlQA9y5KeprlI93xK53a1VNlYj6vv4ZJbzPc/F7ZWTbHxkxV/zEjJymUUtI
A6dRqMm8Qnt7F29jXkQvc1HHWsFbDSZD7z9DR8Tlqu3/iWwVSG+wbUw+9IsP9sxZ
Adkgn665YJpodRrjGkUEsu0ldLse2d9JuGcNfNdOfNNeHVdPkoMvecyzTLsbA8o1
qkioDJHq2c7FYg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:59 2025 by rpki-client