Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: 8MNkPm2MJATgSD4VP/or0YINuT5vm/P79J6klkJHtDA=
Subject key identifier: 84:E3:E0:4C:B5:BD:BE:29:C3:EC:0A:14:3A:A9:EB:17:E0:24:07:13
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019921B21A6F7F469212C23A3150A547A801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:24 +0000
Manifest this update: Sun 07 Sep 2025 01:02:24 +0000
Manifest next update: Mon 08 Sep 2025 01:02:24 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: lHjhYlNaeM7XO5PibOr+K8wNhns3TzFK+Ib3ghE9ZN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:1a:6f:7f:46:92:12:c2:3a:31:50:a5:47:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Sep 7 01:02:24 2025 GMT
Not After : Sep 8 01:02:24 2025 GMT
Subject: CN=84e3e04cb5bdbe29c3ec0a143aa9eb17e0240713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:d1:34:bb:90:83:26:d9:b1:c7:c4:86:04:
4f:8f:67:f4:5a:80:dd:d7:29:6a:e2:a6:83:71:c9:
84:ac:bf:14:7c:f7:b7:c8:bc:63:5e:60:dc:08:11:
55:2b:67:f9:4c:b8:d5:79:a4:cf:e8:99:94:16:02:
3b:0e:56:1e:c3:32:8a:99:25:00:fc:e4:6c:77:cb:
69:83:50:e0:97:6a:f3:63:02:65:ad:26:94:3e:f2:
4f:09:f5:65:a2:ca:37:3a:23:df:0b:57:9a:82:5f:
26:f6:14:65:23:62:76:38:da:22:81:a1:80:d9:99:
6d:02:0d:da:0b:ba:aa:ee:41:85:2f:79:fc:2a:4d:
3a:ae:6c:23:4d:14:3e:5d:fe:07:6e:a7:e3:93:80:
71:03:3f:3f:be:fc:f5:c2:40:2f:61:d7:c1:44:05:
1e:5e:01:ca:4b:1f:c7:d9:78:3b:8a:92:7a:d6:57:
e4:21:f7:53:85:34:11:41:ed:b2:78:a3:34:fa:4a:
64:6b:6b:83:dc:80:6d:d3:b5:03:20:8e:39:cc:35:
39:78:e0:d4:38:e5:64:05:75:19:1c:3f:68:5c:fb:
68:8e:79:2c:e3:c4:81:b6:4a:23:33:e7:70:7c:74:
f4:e5:52:e8:75:49:9a:23:bc:02:3c:80:17:a0:c4:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:E0:4C:B5:BD:BE:29:C3:EC:0A:14:3A:A9:EB:17:E0:24:07:13
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:95:a3:6f:54:f7:71:87:3d:1f:f9:28:57:15:84:08:d9:00:
f9:91:2d:96:60:49:6e:47:28:e1:d1:2e:66:ec:0f:d6:f0:82:
ef:ca:36:c1:c8:2f:02:74:36:47:e7:22:10:72:43:0d:e0:33:
84:07:63:3d:3c:85:f9:27:86:d5:8f:4b:9c:a5:93:bf:ac:28:
36:6a:5f:af:57:34:ad:6e:de:d1:45:0c:c4:9b:e9:91:58:96:
4f:74:ca:19:a6:ad:1e:7b:aa:73:47:87:d2:92:47:7e:1a:18:
86:77:8b:b9:b5:a5:32:66:12:01:7e:18:ed:67:3f:34:c2:5a:
77:9b:ec:29:9a:b6:bd:0a:35:a6:c8:cb:f3:12:4b:ab:be:ff:
0d:ea:f0:bf:13:4e:3b:b4:83:af:bd:0f:c1:b1:ec:a8:4c:c6:
d7:cf:8f:c4:cf:44:0e:47:77:46:22:24:48:e6:06:f1:2a:1e:
dc:0e:2c:ec:7d:5a:31:20:2a:6d:7d:88:1b:e8:6b:d7:3e:af:
f3:ef:49:8e:23:2f:26:24:2e:a3:24:ab:c6:f8:5b:1e:6f:7e:
3a:ab:75:b8:af:14:26:60:92:be:06:24:e8:f0:1f:77:b0:72:
a7:9b:7a:61:2f:9d:e1:b8:83:60:30:01:0c:41:a5:dc:02:88:
9d:c8:0c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhshpvf0aSEsI6MVClR6gBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjUwOTA3MDEwMjI0WhcNMjUwOTA4MDEwMjI0WjAzMTEwLwYDVQQD
Eyg4NGUzZTA0Y2I1YmRiZTI5YzNlYzBhMTQzYWE5ZWIxN2UwMjQwNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs7RNLuQgybZscfEhgRPj2f0WoDd
1ylq4qaDccmErL8UfPe3yLxjXmDcCBFVK2f5TLjVeaTP6JmUFgI7DlYewzKKmSUA
/ORsd8tpg1Dgl2rzYwJlrSaUPvJPCfVloso3OiPfC1eagl8m9hRlI2J2ONoigaGA
2ZltAg3aC7qq7kGFL3n8Kk06rmwjTRQ+Xf4Hbqfjk4BxAz8/vvz1wkAvYdfBRAUe
XgHKSx/H2Xg7ipJ61lfkIfdThTQRQe2yeKM0+kpka2uD3IBt07UDII45zDU5eODU
OOVkBXUZHD9oXPtojnks48SBtkojM+dwfHT05VLodUmaI7wCPIAXoMQeqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITj4Ey1vb4pw+wKFDqp6xfgJAcTMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZWjb1T3
cYc9H/koVxWECNkA+ZEtlmBJbkco4dEuZuwP1vCC78o2wcgvAnQ2R+ciEHJDDeAz
hAdjPTyF+SeG1Y9LnKWTv6woNmpfr1c0rW7e0UUMxJvpkViWT3TKGaatHnuqc0eH
0pJHfhoYhneLubWlMmYSAX4Y7Wc/NMJad5vsKZq2vQo1psjL8xJLq77/DerwvxNO
O7SDr70PwbHsqEzG18+PxM9EDkd3RiIkSOYG8Soe3A4s7H1aMSAqbX2IG+hr1z6v
8+9JjiMvJiQuoySrxvhbHm9+Oqt1uK8UJmCSvgYk6PAfd7Byp5t6YS+d4biDYDAB
DEGl3AKIncgMmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:11 2025 by rpki-client