Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: zjhDd4Cre1vKHAE6jYeL7M1Yq39ZcySukF2/Np8EvSM=
Subject key identifier: 74:AA:4F:10:DF:BF:96:63:BD:48:1F:19:DE:44:25:3F:F9:E2:37:FE
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0199375CE14DCBE0B58EF27D7A92201CA297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1686
Signing time: Thu 11 Sep 2025 06:00:57 +0000
Manifest this update: Thu 11 Sep 2025 06:00:57 +0000
Manifest next update: Fri 12 Sep 2025 06:00:57 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: CwZEQN50x31Dx10zTSXJnwcMr/0J6EFnnt7tgVLkwhI=)
2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=)
4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)
7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:e1:4d:cb:e0:b5:8e:f2:7d:7a:92:20:1c:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Sep 11 06:00:57 2025 GMT
Not After : Sep 12 06:00:57 2025 GMT
Subject: CN=74aa4f10dfbf9663bd481f19de44253ff9e237fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:6d:4f:19:8d:d8:1e:dc:6b:40:af:58:87:
b1:13:c5:78:d0:3d:22:70:4b:2a:c7:4d:30:36:dd:
6d:68:3b:41:01:2b:fe:ea:6c:10:c2:56:e5:8d:a5:
f8:60:07:35:f4:d7:50:8c:38:7b:4b:76:ff:d0:ef:
14:42:d3:d2:3f:ca:99:93:a5:85:4a:7a:82:f2:63:
49:85:c6:fc:88:2d:0f:5d:0b:98:50:d1:b6:a9:92:
0c:81:cc:74:89:70:5e:ff:84:49:b5:62:75:f6:44:
6f:5f:96:dd:15:a2:06:46:14:0a:4c:52:2f:22:07:
74:17:13:9e:a0:57:a6:a1:f3:d5:56:57:ee:8c:21:
6d:51:9e:a4:80:79:d9:1a:f5:84:e5:28:b6:8a:77:
4c:7b:55:38:22:3c:88:2d:2d:4c:4f:0d:2e:b4:e9:
5d:47:5e:df:88:a2:f3:aa:91:92:fc:6d:f7:f1:64:
76:f3:29:29:92:00:c6:e7:4b:56:50:b4:02:da:f1:
f3:0f:4f:60:2c:dc:32:2c:10:35:63:97:53:58:d7:
b9:73:de:c9:b1:82:b2:c5:2f:fa:b7:80:a6:fd:e3:
08:fd:11:10:53:89:2b:24:13:64:d7:cb:b2:a2:50:
1d:6d:b2:03:35:4c:1d:06:35:9d:67:5c:6c:6e:15:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:4F:10:DF:BF:96:63:BD:48:1F:19:DE:44:25:3F:F9:E2:37:FE
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bd:c2:bf:4a:1e:16:50:51:2d:53:8a:78:af:dc:3d:f7:ae:
5a:2e:d7:1d:5a:c9:8d:ec:56:4a:6f:f3:d4:21:12:4c:47:f4:
bc:e1:f1:26:0b:1e:de:29:74:7e:5c:d4:fe:0d:1a:e0:f3:7e:
06:d7:d9:a3:01:ed:4b:8d:cc:1c:35:a7:b1:87:5c:b3:1d:5f:
69:b0:4c:dc:21:1f:3b:37:11:11:c1:38:81:dd:5a:7e:8a:e9:
18:f7:ac:23:ec:e3:4f:5b:fe:70:6c:de:79:f2:50:d8:f9:ab:
a4:d1:9b:5f:6c:4b:09:ec:2e:f8:81:7c:5d:66:20:f1:f2:b0:
2b:25:f3:db:dd:2e:81:15:1b:dd:c5:c9:eb:a7:85:3f:7e:ee:
5f:ff:46:fc:c9:96:32:ae:57:1d:1b:4f:e3:5c:ca:12:96:ea:
04:f7:d0:71:3c:33:70:eb:d4:ad:4a:b6:05:b1:1e:38:d0:3d:
76:8d:98:f6:cd:a8:3e:0c:28:84:0e:fe:fe:2f:6c:18:c4:39:
44:89:a9:a2:b6:1f:9d:d3:8d:41:2d:a9:45:bf:ff:82:ca:95:
d0:c3:26:27:ab:09:d4:7f:48:9a:d2:b6:cf:67:22:33:de:f4:
c5:48:a1:5f:ff:89:fd:8f:40:94:34:05:6c:66:fb:d5:d6:73:
51:ba:93:82
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZk3XOFNy+C1jvJ9epIgHKKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1
MGQ4MTMwHhcNMjUwOTExMDYwMDU3WhcNMjUwOTEyMDYwMDU3WjAzMTEwLwYDVQQD
Eyg3NGFhNGYxMGRmYmY5NjYzYmQ0ODFmMTlkZTQ0MjUzZmY5ZTIzN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJNtTxmN2B7ca0CvWIexE8V40D0i
cEsqx00wNt1taDtBASv+6mwQwlbljaX4YAc19NdQjDh7S3b/0O8UQtPSP8qZk6WF
SnqC8mNJhcb8iC0PXQuYUNG2qZIMgcx0iXBe/4RJtWJ19kRvX5bdFaIGRhQKTFIv
Igd0FxOeoFemofPVVlfujCFtUZ6kgHnZGvWE5Si2indMe1U4IjyILS1MTw0utOld
R17fiKLzqpGS/G338WR28ykpkgDG50tWULQC2vHzD09gLNwyLBA1Y5dTWNe5c97J
sYKyxS/6t4Cm/eMI/REQU4krJBNk18uyolAdbbIDNUwdBjWdZ1xsbhWdXQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHSqTxDfv5ZjvUgfGd5EJT/54jf+MB8GA1UdIwQY
MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0
LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx
ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL3C
v0oeFlBRLVOKeK/cPfeuWi7XHVrJjexWSm/z1CESTEf0vOHxJgse3il0flzU/g0a
4PN+BtfZowHtS43MHDWnsYdcsx1fabBM3CEfOzcREcE4gd1aforpGPesI+zjT1v+
cGzeefJQ2PmrpNGbX2xLCewu+IF8XWYg8fKwKyXz290ugRUb3cXJ66eFP37uX/9G
/MmWMq5XHRtP41zKEpbqBPfQcTwzcOvUrUq2BbEeONA9do2Y9s2oPgwohA7+/i9s
GMQ5RImporYfndONQS2pRb//gsqV0MMmJ6sJ1H9ImtK2z2ciM970xUihX/+J/Y9A
lDQFbGb71dZzUbqTgg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 13:38:41 2025 by rpki-client