Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: DBRGf/S1js6xgy8xJxjLs9OB1hAhH9WshSTl98G4474=
Subject key identifier: CF:AE:6D:BF:74:40:81:A6:61:02:20:62:97:3E:63:F6:21:12:2E:38
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019A26D46F93A9FFF34C9F11FB93AF0A5B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1702
Signing time: Mon 27 Oct 2025 18:00:47 +0000
Manifest this update: Mon 27 Oct 2025 18:00:47 +0000
Manifest next update: Tue 28 Oct 2025 18:00:47 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: PhejIiHy8iB7JKX7SuclWaPKR37CZGoIrVHCVGPP2Zo=)
2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=)
4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)
7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:6f:93:a9:ff:f3:4c:9f:11:fb:93:af:0a:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Oct 27 18:00:47 2025 GMT
Not After : Oct 28 18:00:47 2025 GMT
Subject: CN=cfae6dbf744081a661022062973e63f621122e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:2d:69:19:e0:ab:61:36:dc:51:aa:8d:d0:
1a:03:67:47:b5:2e:67:e5:d8:55:1f:53:d5:90:c3:
9a:82:87:b6:3e:e9:b9:01:67:63:49:61:84:93:94:
ff:a6:33:80:a1:8d:d9:7d:35:79:f0:ca:ac:59:43:
64:ce:5e:2f:73:e9:2f:bd:af:f8:58:40:7d:5b:8a:
c3:e5:45:dd:bc:8b:9c:fe:c9:78:b2:55:3e:ff:b0:
bb:06:48:b8:3d:f3:63:b9:6e:f9:23:42:0a:b8:63:
22:a6:9c:18:a3:42:13:30:59:b7:c5:0b:65:64:e8:
7e:f9:07:b3:f5:5b:1a:e9:c5:82:d5:06:90:0a:c1:
74:32:2b:bb:8c:02:e8:f1:66:86:54:f3:ef:05:49:
c9:3e:15:7c:fb:50:6d:97:71:88:ac:f4:16:38:0a:
5a:68:0b:22:4c:86:cd:68:ec:69:dc:ae:aa:e7:4b:
ab:4a:57:84:60:2e:3f:00:fa:2c:6f:3c:63:20:91:
6f:5c:1c:0f:66:48:4b:79:25:1d:fe:09:56:14:55:
90:ce:1a:57:fb:2a:60:45:d9:d6:04:b8:bc:ec:20:
25:75:29:50:2a:b5:f5:5b:54:6b:85:37:66:e4:d9:
6b:5c:84:00:2f:98:fa:b8:c3:7f:35:2e:21:21:6c:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AE:6D:BF:74:40:81:A6:61:02:20:62:97:3E:63:F6:21:12:2E:38
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:2b:8f:fa:2c:31:59:f0:d5:78:3f:d0:f7:1a:b7:ae:e1:
1d:64:38:64:1f:2c:4d:e9:d8:44:78:a1:fa:b3:1a:d7:26:db:
9a:48:ff:3b:7a:95:96:4a:e9:2c:1c:a8:01:4d:78:7b:49:ee:
ff:d4:97:54:bf:a9:8f:c3:47:1f:0c:2a:b0:43:b1:9e:b7:f5:
46:44:0d:ca:45:b9:37:62:4f:63:bd:54:2a:a7:ad:96:ce:70:
69:98:df:8f:b0:c6:2a:3c:22:41:3c:63:b5:37:43:c3:0b:f0:
93:82:cc:59:c5:89:95:9b:2f:d0:c9:7c:e4:50:08:8a:dc:37:
62:a9:a9:b0:2e:20:c3:e1:5b:11:24:d4:13:7b:47:0e:76:df:
9c:0c:6a:cb:89:fb:b6:a5:89:d6:61:00:b9:bf:9e:c7:11:af:
70:bb:1a:da:4f:8f:92:62:9e:ec:f9:86:7f:db:74:f1:60:1e:
66:42:d3:68:e0:a7:28:41:d8:3f:bc:a0:84:d9:cf:69:23:a8:
3b:b4:c5:e2:d3:3e:d9:45:b2:63:e2:69:b9:43:91:7c:81:7d:
65:17:b2:13:82:aa:9f:44:2e:03:8a:ba:4f:8d:93:7f:7c:8e:
f8:39:39:7f:82:c6:ba:49:e4:e1:06:70:05:a8:ae:79:61:1f:
ab:4b:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:41:10 2025 by rpki-client