Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: T7eq4eNA29ppkd74nQ6TTKsjYcOvIt4X2573xxXXkiY=
Subject key identifier: D0:34:94:3D:F6:56:BD:B0:02:8A:36:17:D1:D0:68:9E:09:D0:F7:DF
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 0198D5F1BEFC1018EA6E16C1E3C7789D3150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: a/8mHSN12WUSRjMHAcVrSjJi/bOg7KSjVmCS5ooO6HI=)
2: g_HTJXlqiVwcXNQwQ-5NsdWLDwY.roa (hash: T8aREzkEhzdTgcqG/dOQatsiFG6CYLxa2kl0FfKGWAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:be:fc:10:18:ea:6e:16:c1:e3:c7:78:9d:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=d034943df656bdb0028a3617d1d0689e09d0f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:ab:3d:b2:7c:a8:df:33:f0:52:4a:90:c3:
f9:20:1b:1a:a7:fa:03:e9:f0:a9:ff:38:fd:8e:69:
00:29:cc:bd:44:ac:02:80:c5:ef:53:d0:42:5a:2f:
86:79:8a:75:42:f9:46:c6:78:53:61:5d:d6:0d:e2:
07:be:81:65:82:ce:46:85:c5:a5:cf:67:53:21:e9:
f9:d7:61:da:a2:ab:15:a8:92:96:f8:d1:ca:2c:67:
9b:2a:6c:b5:77:e8:df:c4:9a:6c:1a:d4:5c:31:cc:
5c:88:3a:56:0e:a0:78:5b:d2:bd:c7:1c:14:4d:9f:
1c:0f:3e:02:0f:d6:3b:bd:d1:de:55:72:cc:57:35:
98:0e:e6:80:c8:f1:b9:45:bc:2f:83:f8:0c:16:b7:
3d:59:16:ac:e0:6d:f1:88:2c:d1:c2:3e:05:e2:28:
bc:99:15:42:f6:77:fc:f0:cc:f2:84:8e:a8:97:32:
eb:f2:05:25:7b:49:7f:3b:7d:c5:e7:3a:2f:f4:a0:
24:f2:f4:2f:4c:d0:b3:85:ef:d6:d0:62:fe:03:bf:
98:6e:d5:15:35:9f:23:c0:c6:2b:be:3b:97:37:a8:
67:33:1b:31:b4:0c:fc:c1:04:dd:81:a6:3f:bd:45:
ed:43:6b:9f:9f:e4:c8:43:db:e8:b0:8e:eb:79:51:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:94:3D:F6:56:BD:B0:02:8A:36:17:D1:D0:68:9E:09:D0:F7:DF
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:3e:f1:b7:0b:af:43:97:37:ba:9e:24:94:73:c2:76:33:
34:ba:45:a5:1a:d9:7b:5a:42:72:ac:56:15:f0:f5:a4:43:e3:
ab:2a:dd:24:8d:f7:0e:64:ac:6c:2d:d9:ce:b3:9b:40:cc:8c:
ef:89:4c:ed:1b:87:10:7f:55:c8:ae:f6:1c:87:92:96:3a:66:
86:0c:72:70:61:63:7b:d9:4a:22:e3:10:73:60:dc:5d:71:3b:
13:a6:06:5c:12:99:04:27:b9:6f:28:f1:92:a9:85:4a:bb:45:
a7:36:27:51:c4:d8:57:c4:0f:8a:08:06:38:56:ee:91:1c:84:
05:46:98:01:1b:72:e8:dd:b8:92:1b:0d:00:e3:f7:2d:be:91:
f0:ac:5f:e4:cc:5a:cb:d6:e5:72:6d:4e:49:f2:30:45:47:55:
75:c0:34:19:6f:d7:88:3f:c5:3d:fc:ac:c8:a2:21:f2:82:53:
1e:ad:ae:fe:16:a0:9d:f8:93:14:02:01:82:13:62:e7:96:e7:
ec:67:bd:41:5b:11:53:e7:f2:a7:c8:96:00:9c:2e:de:9f:12:
cb:fe:4b:86:17:93:36:45:0d:11:c4:b3:3d:c4:76:26:61:ad:
a3:c8:ba:61:a6:ce:00:72:97:57:83:39:34:db:be:17:7d:dc:
2e:73:0d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8b78EBjqbhbB48d4nTFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MjU5MDAzMTJmZjNiZGE0ZDJmODk2ZjY0ZGY2NTY0NmZk
OWMyNTEwHhcNMjUwODIzMDgwMDQ2WhcNMjUwODI0MDgwMDQ2WjAzMTEwLwYDVQQD
EyhkMDM0OTQzZGY2NTZiZGIwMDI4YTM2MTdkMWQwNjg5ZTA5ZDBmN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSirPbJ8qN8z8FJKkMP5IBsap/oD
6fCp/zj9jmkAKcy9RKwCgMXvU9BCWi+GeYp1QvlGxnhTYV3WDeIHvoFlgs5GhcWl
z2dTIen512HaoqsVqJKW+NHKLGebKmy1d+jfxJpsGtRcMcxciDpWDqB4W9K9xxwU
TZ8cDz4CD9Y7vdHeVXLMVzWYDuaAyPG5Rbwvg/gMFrc9WRas4G3xiCzRwj4F4ii8
mRVC9nf88MzyhI6olzLr8gUle0l/O33F5zov9KAk8vQvTNCzhe/W0GL+A7+YbtUV
NZ8jwMYrvjuXN6hnMxsxtAz8wQTdgaY/vUXtQ2ufn+TIQ9vosI7reVF/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA0lD32Vr2wAoo2F9HQaJ4J0PffMB8GA1UdIwQY
MBaAFNQlkAMS/zvaTS+Jb2TfZWRv2cJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMt
Njc2YjQyODkyNWFiLzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMtNjc2YjQyODkyNWFi
LzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkw+8bcL
r0OXN7qeJJRzwnYzNLpFpRrZe1pCcqxWFfD1pEPjqyrdJI33DmSsbC3ZzrObQMyM
74lM7RuHEH9VyK72HIeSljpmhgxycGFje9lKIuMQc2DcXXE7E6YGXBKZBCe5byjx
kqmFSrtFpzYnUcTYV8QPiggGOFbukRyEBUaYARty6N24khsNAOP3Lb6R8Kxf5Mxa
y9blcm1OSfIwRUdVdcA0GW/XiD/FPfysyKIh8oJTHq2u/hagnfiTFAIBghNi55bn
7Ge9QVsRU+fyp8iWAJwu3p8Sy/5LhheTNkUNEcSzPcR2JmGto8i6YabOAHKXV4M5
NNu+F33cLnMNuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:12 2025 by rpki-client