Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: qMiTgWiaKoA+dvDIcLm2ktfbTDwypOIOAR3/xPTcM9I=
Subject key identifier: F3:B9:A6:55:5C:5F:01:A9:E0:A6:C3:97:01:C3:8A:41:C5:96:5A:47
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019A71EE95A11E31B1BDC43F36944FC2867C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 013D
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=)
2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: oRTLnadJqmsuvbzw1Eyp8K/tKtMqeiViGyKaTkdT0Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:95:a1:1e:31:b1:bd:c4:3f:36:94:4f:c2:86:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=f3b9a6555c5f01a9e0a6c39701c38a41c5965a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:4b:b0:31:7a:38:c7:8d:ec:8f:36:92:f7:
e5:a0:00:70:59:fd:a1:9d:30:28:05:85:b5:41:c4:
ae:71:74:21:f7:34:d8:62:39:31:4c:dd:ab:32:4a:
28:c1:21:e4:79:86:98:16:eb:b7:3f:53:fe:90:1c:
1d:9b:a1:7b:0e:68:79:b1:c2:b9:df:e0:80:40:e9:
36:a2:84:30:51:79:bc:68:da:58:77:49:be:a0:80:
fb:ec:6c:a8:ff:0e:d8:6c:d7:13:d6:fc:fd:a8:c2:
c1:b2:c6:2c:b5:68:e8:0e:ba:21:10:bc:34:ae:66:
66:e3:82:0b:80:8f:77:48:46:27:e4:24:2b:6a:29:
a5:3d:83:80:ca:16:67:05:0a:72:1f:61:fd:b4:3c:
db:3a:87:7b:96:48:01:b7:82:6c:38:76:b4:e4:05:
b6:00:f1:0b:ac:3c:be:50:d3:39:f9:59:51:7f:7b:
01:24:8b:26:93:97:7b:c3:49:78:75:c5:1c:91:6f:
fd:ff:ac:8f:94:6d:67:0c:d5:30:d5:71:39:ca:44:
df:b0:49:84:e9:d2:19:8b:18:85:e0:04:56:8d:49:
38:0a:55:d2:9c:36:7e:69:a2:5f:76:6c:e2:a2:99:
3f:3d:09:dd:27:12:66:74:4a:68:11:38:79:52:f2:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B9:A6:55:5C:5F:01:A9:E0:A6:C3:97:01:C3:8A:41:C5:96:5A:47
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:6d:5f:d0:c7:bd:c6:a8:48:e4:4b:73:2a:3f:6d:4a:2e:
06:89:89:b3:10:c5:78:e0:e6:32:29:a9:84:ca:b5:09:4a:32:
f1:2e:0c:0c:86:ca:b6:7d:67:04:c4:0d:e2:5e:d9:07:ff:93:
54:ac:8e:f3:3f:49:93:74:86:e1:18:15:30:60:df:3b:61:4d:
43:11:c3:4e:4b:cd:14:51:1b:36:97:e5:42:1b:f7:e9:ba:8b:
73:1f:ad:d0:08:52:ab:26:44:a7:8c:9b:b5:e3:7d:b6:98:17:
3d:e5:56:c4:c5:94:90:5c:a7:4d:b6:07:50:4f:f9:d5:dc:42:
8a:19:6c:ea:06:6e:b2:76:5e:d7:dd:2b:63:37:a3:2f:92:7b:
96:94:38:7e:8f:aa:12:c4:ee:b4:6e:72:51:7a:d1:6c:d7:d1:
54:57:d1:14:1a:5d:30:0a:90:e8:ce:af:b5:6c:e1:05:a0:e4:
7f:55:a6:8e:2e:7e:fb:5f:2d:8e:93:d4:01:04:f0:14:93:9e:
b8:f4:c2:d9:1b:79:6f:09:3a:de:c5:c7:4e:d2:a6:42:16:60:
4a:03:ac:1d:94:ec:fa:9f:e7:35:e3:a4:e8:2b:2a:84:78:e6:
dd:b8:ce:c4:7d:53:86:38:73:7b:96:8f:2b:02:23:3c:6e:c2:
7b:36:3d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pWhHjGxvcQ/NpRPwoZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDUxY2FlODc3ZGY0MGE1ZDM5NDEyNjA1MDcwODQxYmQx
MDJjNTQwHhcNMjUxMTExMDgwMDUyWhcNMjUxMTEyMDgwMDUyWjAzMTEwLwYDVQQD
EyhmM2I5YTY1NTVjNWYwMWE5ZTBhNmMzOTcwMWMzOGE0MWM1OTY1YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45ZLsDF6OMeN7I82kvfloABwWf2h
nTAoBYW1QcSucXQh9zTYYjkxTN2rMkoowSHkeYaYFuu3P1P+kBwdm6F7Dmh5scK5
3+CAQOk2ooQwUXm8aNpYd0m+oID77Gyo/w7YbNcT1vz9qMLBssYstWjoDrohELw0
rmZm44ILgI93SEYn5CQraimlPYOAyhZnBQpyH2H9tDzbOod7lkgBt4JsOHa05AW2
APELrDy+UNM5+VlRf3sBJIsmk5d7w0l4dcUckW/9/6yPlG1nDNUw1XE5ykTfsEmE
6dIZixiF4ARWjUk4ClXSnDZ+aaJfdmziopk/PQndJxJmdEpoETh5UvK/pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPO5plVcXwGp4KbDlwHDikHFllpHMB8GA1UdIwQY
MBaAFAjVHK6HffQKXTlBJgUHCEG9ECxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUt
NGI0ZDFhZDk2YzBlLzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hNmIwMDktMmQwYi00OGRkLTgyNWUtNGI0ZDFhZDk2YzBl
LzEvQ05VY3JvZDk5QXBkT1VFbUJRY0lRYjBRTEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6ttX9DH
vcaoSORLcyo/bUouBomJsxDFeODmMimphMq1CUoy8S4MDIbKtn1nBMQN4l7ZB/+T
VKyO8z9Jk3SG4RgVMGDfO2FNQxHDTkvNFFEbNpflQhv36bqLcx+t0AhSqyZEp4yb
teN9tpgXPeVWxMWUkFynTbYHUE/51dxCihls6gZusnZe190rYzejL5J7lpQ4fo+q
EsTutG5yUXrRbNfRVFfRFBpdMAqQ6M6vtWzhBaDkf1Wmji5++18tjpPUAQTwFJOe
uPTC2Rt5bwk63sXHTtKmQhZgSgOsHZTs+p/nNeOk6CsqhHjm3bjOxH1Thjhze5aP
KwIjPG7CezY9cw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:48 2025 by rpki-client