Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: 4VdZw74yhYdj1iNvb+/D5/i9s3mVDavS4xLcEkouNi4=
Subject key identifier: 21:CC:D9:96:A8:C6:DE:83:FE:1F:11:48:36:D2:C4:E4:1E:50:AE:42
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01984776976C463AB492238204984C1A38AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 159D
Signing time: Sat 26 Jul 2025 16:00:10 +0000
Manifest this update: Sat 26 Jul 2025 16:00:10 +0000
Manifest next update: Sun 27 Jul 2025 16:00:10 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: lQHlNgXGEhUzIfg11qh4cLAwEgmXtHHxAGY2meCVOQ4=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:97:6c:46:3a:b4:92:23:82:04:98:4c:1a:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jul 26 16:00:10 2025 GMT
Not After : Jul 27 16:00:10 2025 GMT
Subject: CN=21ccd996a8c6de83fe1f114836d2c4e41e50ae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:d4:35:4b:77:c3:43:30:e7:c2:59:eb:8c:
99:5c:2b:0a:85:76:91:02:99:14:d3:14:fc:ec:48:
af:5e:99:86:70:c9:ec:ac:e4:9a:0b:ec:2a:d3:d7:
59:50:ca:2d:74:ce:38:e7:30:4b:cc:75:8d:c3:9b:
b5:14:30:a6:59:08:a9:a8:da:29:c9:dc:b8:b0:de:
a2:93:63:9c:22:a7:c8:8a:ee:23:73:9b:55:c4:f6:
d3:0e:b7:86:ca:98:1d:29:ae:3c:5b:12:de:85:07:
f6:13:fc:ea:01:40:59:96:d9:37:88:5c:3a:b0:26:
c3:11:18:3f:db:8b:5d:ac:6b:ea:02:5a:29:20:a5:
7e:84:54:53:63:a2:b4:8f:28:91:1e:0f:7a:5c:85:
b9:e1:c1:86:94:34:e5:15:53:40:5d:a6:d7:e4:14:
e4:5f:d7:e3:c0:19:cc:81:53:28:92:a1:60:e1:13:
88:20:f5:0b:7d:88:a9:8f:e8:7b:01:1c:ee:76:8e:
b2:f6:a9:38:ee:77:f2:e0:de:07:54:ce:c1:37:9e:
6d:4d:15:6a:86:69:e9:68:cf:74:b2:71:10:cb:c2:
7c:14:6d:fa:25:f9:9d:97:27:78:a1:e0:18:b1:b7:
43:7b:b7:14:cd:bf:b6:ee:8f:59:57:f6:87:99:9d:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:D9:96:A8:C6:DE:83:FE:1F:11:48:36:D2:C4:E4:1E:50:AE:42
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:24:11:5c:bd:03:f0:d7:29:fc:0b:30:b9:fc:47:16:38:48:
ae:7b:97:4c:38:bb:9e:5b:9a:23:07:c4:ab:3f:32:85:37:2e:
ba:31:7e:65:70:ec:88:3a:af:4e:6c:c5:4d:3d:6f:d5:7e:06:
cd:32:67:a5:ce:16:c5:26:4a:be:0e:20:40:3a:b0:e1:e5:35:
ff:01:3a:d6:d9:dd:05:54:e6:1c:7b:36:0f:b2:f0:c1:9a:88:
91:d0:be:c2:aa:b9:cb:e4:06:0f:91:44:3f:4a:69:ff:b9:f4:
a1:4d:04:35:94:83:8a:7f:9f:ef:ee:53:9e:5b:55:e6:6c:ad:
6b:1d:eb:63:bf:9c:7b:08:1d:d6:10:62:75:2a:cb:35:4e:4d:
fc:2f:e6:00:f7:1e:29:db:64:5e:12:0b:ea:5e:5c:41:81:31:
55:9c:37:56:fd:df:99:f5:a4:a2:28:61:e8:72:1e:06:ea:e9:
86:39:b1:56:1e:7f:c5:0b:ae:09:3e:2d:8c:1a:40:66:b5:ae:
e0:13:b7:5f:cc:92:e8:fd:5d:09:d4:0d:a5:d4:40:5b:52:ef:
45:9d:a4:d1:1a:4f:15:30:68:8b:26:16:8d:fb:75:4b:20:0e:
b4:43:dd:be:fe:60:af:da:49:de:b4:49:b0:fb:3b:5a:e1:49:
25:08:c7:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdpdsRjq0kiOCBJhMGjiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjUwNzI2MTYwMDEwWhcNMjUwNzI3MTYwMDEwWjAzMTEwLwYDVQQD
EygyMWNjZDk5NmE4YzZkZTgzZmUxZjExNDgzNmQyYzRlNDFlNTBhZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLDUNUt3w0Mw58JZ64yZXCsKhXaR
ApkU0xT87EivXpmGcMnsrOSaC+wq09dZUMotdM445zBLzHWNw5u1FDCmWQipqNop
ydy4sN6ik2OcIqfIiu4jc5tVxPbTDreGypgdKa48WxLehQf2E/zqAUBZltk3iFw6
sCbDERg/24tdrGvqAlopIKV+hFRTY6K0jyiRHg96XIW54cGGlDTlFVNAXabX5BTk
X9fjwBnMgVMokqFg4ROIIPULfYipj+h7ARzudo6y9qk47nfy4N4HVM7BN55tTRVq
hmnpaM90snEQy8J8FG36Jfmdlyd4oeAYsbdDe7cUzb+27o9ZV/aHmZ2k/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHM2Zaoxt6D/h8RSDbSxOQeUK5CMB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyQRXL0D
8Ncp/AswufxHFjhIrnuXTDi7nluaIwfEqz8yhTcuujF+ZXDsiDqvTmzFTT1v1X4G
zTJnpc4WxSZKvg4gQDqw4eU1/wE61tndBVTmHHs2D7LwwZqIkdC+wqq5y+QGD5FE
P0pp/7n0oU0ENZSDin+f7+5TnltV5mytax3rY7+cewgd1hBidSrLNU5N/C/mAPce
KdtkXhIL6l5cQYExVZw3Vv3fmfWkoihh6HIeBurphjmxVh5/xQuuCT4tjBpAZrWu
4BO3X8yS6P1dCdQNpdRAW1LvRZ2k0RpPFTBoiyYWjft1SyAOtEPdvv5gr9pJ3rRJ
sPs7WuFJJQjH7A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:42:19 2025 by rpki-client