Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: Ke590s5gBQJ0yo5uF4M7twq+MXqhKw2HR6FgUlh5jqk=
Subject key identifier: A3:72:6B:D9:90:83:04:3B:0B:7F:E2:4E:77:15:4C:F9:16:3A:EF:77
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019923317CC0CAD47D643C84164B732DD054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0C45
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: Hd2eCg/FzKjg4syvUB8+tHzhRZRsIry5LSJ2U974woY=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7c:c0:ca:d4:7d:64:3c:84:16:4b:73:2d:d0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=a3726bd99083043b0b7fe24e77154cf9163aef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:13:9e:f7:37:e1:ae:3f:5d:cb:f8:b7:7e:
cf:0b:47:9f:02:2f:74:4c:7e:fd:2c:41:f1:bd:cf:
05:24:5c:fc:ee:dd:ca:fa:7f:50:8e:64:64:93:8d:
a4:16:10:1a:bc:92:ed:a6:46:d4:db:c9:e9:d5:6b:
11:a5:3e:20:6a:c2:05:b1:ac:79:13:ef:76:42:50:
13:e8:5b:03:bd:7f:79:98:99:9e:2c:a9:99:c9:5a:
f8:d3:68:0f:40:f4:60:f1:f3:e0:b7:83:3d:e6:29:
c4:af:ec:32:8c:0a:7b:66:9b:d8:07:e6:da:10:4c:
d3:98:69:f9:b6:7f:d3:b6:55:93:6d:52:43:99:c3:
1d:76:a4:0e:92:e7:01:4b:6a:b2:10:63:55:9f:b4:
29:5b:a9:c5:1e:01:46:2c:5e:c0:7e:3c:75:09:5c:
f1:08:a0:2d:dd:d3:41:a4:fa:68:62:da:29:7b:d2:
46:ef:e8:2a:5d:21:ab:60:cd:9e:be:b6:77:a1:ba:
dc:0c:08:4e:b1:71:0b:04:50:f7:ef:34:48:2e:28:
0c:64:2b:b2:7c:f7:e0:ca:13:da:61:d6:88:50:ed:
d3:d3:a1:5c:f6:06:b4:ae:39:45:c8:3d:30:27:34:
96:3b:94:11:77:8e:b4:f8:ce:2d:e1:41:35:c3:ca:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:72:6B:D9:90:83:04:3B:0B:7F:E2:4E:77:15:4C:F9:16:3A:EF:77
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:07:57:dc:52:90:88:2d:67:5e:81:9e:21:ad:a6:e0:6a:
57:31:f8:1f:34:6b:69:92:76:05:e3:dc:9a:fc:0a:7d:47:50:
e2:5c:e0:ef:52:91:fa:c3:3e:8a:89:86:bf:5d:a5:72:be:d8:
e8:d6:c6:f4:1b:02:66:fc:8c:4a:12:e4:22:2b:c6:70:18:d2:
90:09:6a:b5:2c:ad:31:30:eb:78:d3:03:85:d1:b5:2e:9c:7a:
b5:09:6c:57:24:19:f1:2e:88:b7:64:35:aa:79:2b:8c:d0:79:
94:97:f9:14:15:f4:0d:29:90:c8:16:2a:a3:f6:8c:21:4c:5d:
4b:cd:26:08:84:c5:68:e7:1f:13:8b:e0:71:0a:50:bb:bd:20:
e9:d2:f9:7c:ff:7b:5c:ff:2e:fc:1d:da:49:e6:fc:d6:92:bf:
09:8e:70:8d:69:c6:b2:26:fb:6a:bb:a2:29:dc:e1:4e:08:e3:
cc:cb:2d:fe:9c:bc:ad:55:0c:d3:b6:df:42:c0:36:fd:7f:0e:
33:11:49:30:d3:83:d6:6a:a7:ae:22:07:36:fb:97:58:1b:4d:
0b:28:2b:4a:df:95:be:73:79:2f:34:bb:9e:6e:3b:e9:88:9b:
4c:41:b5:b4:76:de:1c:d1:8f:b9:d4:8b:29:00:9f:d5:76:ce:
ba:f5:f5:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkjMXzAytR9ZDyEFktzLdBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzI1Njc0NWJkMjczYzkxODZhZTI5NjM2OGEyMTE3ZDNk
MmNhZDkwHhcNMjUwOTA3MDgwMTA5WhcNMjUwOTA4MDgwMTA5WjAzMTEwLwYDVQQD
EyhhMzcyNmJkOTkwODMwNDNiMGI3ZmUyNGU3NzE1NGNmOTE2M2FlZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr68Tnvc34a4/Xcv4t37PC0efAi90
TH79LEHxvc8FJFz87t3K+n9QjmRkk42kFhAavJLtpkbU28np1WsRpT4gasIFsax5
E+92QlAT6FsDvX95mJmeLKmZyVr402gPQPRg8fPgt4M95inEr+wyjAp7ZpvYB+ba
EEzTmGn5tn/TtlWTbVJDmcMddqQOkucBS2qyEGNVn7QpW6nFHgFGLF7Afjx1CVzx
CKAt3dNBpPpoYtope9JG7+gqXSGrYM2evrZ3obrcDAhOsXELBFD37zRILigMZCuy
fPfgyhPaYdaIUO3T06Fc9ga0rjlFyD0wJzSWO5QRd460+M4t4UE1w8pyLwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKNya9mQgwQ7C3/iTncVTPkWOu93MB8GA1UdIwQY
MBaAFPnCVnRb0nPJGGriljaKIRfT0srZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jSldkRnZTYzhrWWF1S1dOb29oRjlQU3l0ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNDRjYmIwLTFhZWUtNDQ5MC1hYzUy
LWM5NDFlNmE5MTM5Zi8xLzEtY0pXZEZ2U2M4a1lhdUtXTm9vaEY5UFN5dGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFkLzQ0Y2JiMC0xYWVlLTQ0OTAtYWM1Mi1jOTQxZTZhOTEz
OWYvMS8xLWNKV2RGdlNjOGtZYXVLV05vb2hGOVBTeXRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOYH
V9xSkIgtZ16BniGtpuBqVzH4HzRraZJ2BePcmvwKfUdQ4lzg71KR+sM+iomGv12l
cr7Y6NbG9BsCZvyMShLkIivGcBjSkAlqtSytMTDreNMDhdG1Lpx6tQlsVyQZ8S6I
t2Q1qnkrjNB5lJf5FBX0DSmQyBYqo/aMIUxdS80mCITFaOcfE4vgcQpQu70g6dL5
fP97XP8u/B3aSeb81pK/CY5wjWnGsib7aruiKdzhTgjjzMst/py8rVUM07bfQsA2
/X8OMxFJMNOD1mqnriIHNvuXWBtNCygrSt+VvnN5LzS7nm476YibTEG1tHbeHNGP
udSLKQCf1XbOuvX1IQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:37 2025 by rpki-client