Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: byhMaZLRC/wtt8mG9pPwsJJhMhRjnHSgjZHT3VXK/MA=
Subject key identifier: E2:5C:5C:42:DB:31:E1:98:EA:6B:DD:A4:69:37:95:DB:4B:C6:8B:FA
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 0199233136EB5801E69B82A3919F0A845684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 167B
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: M3fOEClsXKvLtAnTcn5Su0j9iMg.roa (hash: E6qGvNO+V5ltNH3cwyFEtJdp+n857np9BM5la+TV5nM=)
2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=)
3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: kLBhWZwxIvLjGsX96fZXsgBkFoDfS7KI4gH4bkwQ6V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:36:eb:58:01:e6:9b:82:a3:91:9f:0a:84:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=e25c5c42db31e198ea6bdda4693795db4bc68bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:58:3c:fa:d4:5b:b6:4e:76:1c:37:b5:a1:
2a:25:da:e0:e8:b9:2e:b9:8e:fe:bd:15:7d:c8:eb:
f2:40:62:de:d6:4f:d5:66:4b:07:9f:84:bc:49:72:
c6:23:c6:45:07:09:21:bf:af:9c:e8:51:c8:a5:4f:
f0:f1:7b:ca:83:4c:d7:7d:92:e8:a3:59:dd:65:4d:
4e:1f:de:af:81:bf:63:59:0e:5e:8e:ec:37:fc:dc:
95:3d:f7:57:e3:af:48:e9:2d:42:a8:19:1a:63:bd:
14:a9:e2:b0:a6:b8:92:bb:01:45:47:57:ce:99:3c:
c1:7d:41:ec:34:57:a6:21:19:b0:6b:b2:3f:7b:c6:
d9:2a:9a:4e:55:83:5f:95:e6:6b:8b:f6:77:7f:ca:
98:ae:76:fd:45:b5:3f:4c:a2:91:70:bf:56:2d:7a:
f2:62:38:ab:e4:cf:14:b7:5e:fe:ac:a3:bd:f2:0a:
47:72:76:a8:0f:bd:8c:5c:92:25:aa:75:eb:13:c1:
82:0e:8d:7c:ce:2e:eb:b4:da:a5:8b:08:12:a3:6c:
c6:88:70:c7:28:35:e1:a6:2a:31:42:47:35:56:8a:
7b:f6:eb:dc:41:02:9a:0b:dc:92:6d:f6:32:e7:ec:
ff:61:3f:2d:29:44:e8:3c:df:84:9e:73:9d:95:7d:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:5C:42:DB:31:E1:98:EA:6B:DD:A4:69:37:95:DB:4B:C6:8B:FA
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:94:f8:11:bd:8f:3b:b0:c4:ff:32:8b:58:ce:9e:df:76:
1e:3e:67:6a:83:af:24:8e:ad:e1:a8:ad:37:9c:7b:0e:42:34:
a6:3f:61:01:be:be:ab:7d:f7:cd:53:1f:4a:b4:f9:0c:a9:2b:
d2:a4:fd:00:9a:a7:0b:97:60:ea:62:5b:7e:f3:de:d7:d7:57:
a1:12:85:ca:f0:e3:51:96:9e:26:b7:50:04:c6:59:16:d1:aa:
20:f4:95:e3:1a:48:dd:77:5b:49:89:75:ac:cc:c3:37:47:66:
99:9f:6c:28:69:1f:33:0f:3f:31:d7:14:f1:9a:72:00:cc:d4:
92:5a:6d:56:2d:75:13:63:6b:7f:01:6e:f6:81:5a:aa:9e:fa:
cf:6c:b6:01:28:8a:3d:48:4f:e5:8a:78:ed:be:8c:c5:36:68:
d4:6f:d4:6f:a5:97:d5:47:e3:87:06:c1:b7:62:14:03:89:08:
39:d1:fe:b1:c2:ff:08:87:6c:10:24:7c:13:41:32:f3:30:a2:
1f:c4:de:de:a4:7d:ec:01:42:fb:4a:ee:6a:bd:42:50:0f:b6:
26:ba:97:5c:e6:73:47:93:33:f4:f7:22:8a:6a:df:30:a3:8f:
42:68:e8:20:70:d9:7b:77:d0:41:3e:7a:d5:f7:8b:53:41:30:
7d:d4:2d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMTbrWAHmm4KjkZ8KhFaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjUwOTA3MDgwMDUxWhcNMjUwOTA4MDgwMDUxWjAzMTEwLwYDVQQD
EyhlMjVjNWM0MmRiMzFlMTk4ZWE2YmRkYTQ2OTM3OTVkYjRiYzY4YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH9YPPrUW7ZOdhw3taEqJdrg6Lku
uY7+vRV9yOvyQGLe1k/VZksHn4S8SXLGI8ZFBwkhv6+c6FHIpU/w8XvKg0zXfZLo
o1ndZU1OH96vgb9jWQ5ejuw3/NyVPfdX469I6S1CqBkaY70UqeKwpriSuwFFR1fO
mTzBfUHsNFemIRmwa7I/e8bZKppOVYNfleZri/Z3f8qYrnb9RbU/TKKRcL9WLXry
Yjir5M8Ut17+rKO98gpHcnaoD72MXJIlqnXrE8GCDo18zi7rtNqliwgSo2zGiHDH
KDXhpioxQkc1Vop79uvcQQKaC9ySbfYy5+z/YT8tKUToPN+EnnOdlX0odwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJcXELbMeGY6mvdpGk3ldtLxov6MB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzmU+BG9
jzuwxP8yi1jOnt92Hj5naoOvJI6t4aitN5x7DkI0pj9hAb6+q333zVMfSrT5DKkr
0qT9AJqnC5dg6mJbfvPe19dXoRKFyvDjUZaeJrdQBMZZFtGqIPSV4xpI3XdbSYl1
rMzDN0dmmZ9sKGkfMw8/MdcU8ZpyAMzUklptVi11E2NrfwFu9oFaqp76z2y2ASiK
PUhP5Yp47b6MxTZo1G/Ub6WX1UfjhwbBt2IUA4kIOdH+scL/CIdsECR8E0Ey8zCi
H8Te3qR97AFC+0ruar1CUA+2JrqXXOZzR5Mz9PciimrfMKOPQmjoIHDZe3fQQT56
1feLU0EwfdQtKA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:52 2025 by rpki-client