Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: NovJNbpQsiDee2PVkF+TccGC24i2lc+d+idpBovK7wY=
Subject key identifier: 97:1F:AF:CB:BA:A2:CE:0C:A6:EF:B3:EE:33:94:DF:58:80:12:8D:F9
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0198D516249AED1BEF86BB62599A934C7C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 1410
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: EHPlPwh0XhrZNq34pyRNkmAlmtC9C/j3a78tLxbfBns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:24:9a:ed:1b:ef:86:bb:62:59:9a:93:4c:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=971fafcbbaa2ce0ca6efb3ee3394df5880128df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:be:d6:32:be:75:3d:5e:41:cc:95:88:ef:
da:d6:3b:19:8c:65:fa:7e:de:b8:c9:15:ce:59:e9:
44:fa:ce:96:70:b1:8c:c9:ca:4a:78:46:c6:60:96:
41:28:61:b2:d8:cb:10:bd:23:79:df:74:46:45:40:
e0:3d:d2:3a:54:fe:7c:e5:08:34:d8:b7:36:b1:04:
21:2e:ee:c1:c2:84:58:4f:46:40:31:97:aa:01:05:
f0:7c:59:b1:d5:46:68:01:5f:f6:04:6b:42:44:a8:
5d:f8:6e:73:42:ec:95:50:5d:a0:b0:89:1c:87:fc:
a6:96:4f:20:3b:f9:4b:96:d7:3a:4c:da:79:7d:0f:
73:95:55:c2:b0:9e:20:ba:a1:0f:3a:17:91:32:0c:
15:f7:1c:a5:1c:8c:f8:25:a9:1b:7a:30:1b:75:21:
24:e4:9c:7e:5f:dc:00:e9:00:b8:99:3d:2b:50:9d:
ad:1e:da:ae:51:a0:5c:d3:97:81:15:5e:e4:fc:6f:
c0:68:31:ab:ee:dc:d5:d6:05:6e:61:1a:a9:77:1d:
d2:ee:36:d3:ca:cd:6b:24:a6:2a:6e:4d:36:0e:de:
6e:fd:77:36:61:74:3d:e0:76:48:ce:18:bb:0a:44:
67:56:40:79:80:3e:5e:d0:3e:08:9c:5e:98:3e:e3:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:AF:CB:BA:A2:CE:0C:A6:EF:B3:EE:33:94:DF:58:80:12:8D:F9
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:22:1b:ba:11:21:fe:14:2a:f7:34:6f:43:7d:c4:a9:10:
db:14:c2:92:0a:de:b1:81:10:6a:19:96:05:ca:4a:18:04:ee:
c3:c1:93:19:2d:2e:b6:f8:0a:61:f1:96:31:ab:3d:c7:ef:81:
41:71:dc:d7:2e:55:58:e2:8e:a2:ca:bf:c6:f0:a4:81:76:96:
c5:ba:30:f5:66:76:4f:99:6b:cb:7b:28:a7:bc:a4:3d:25:90:
84:67:58:65:ce:ff:d1:88:69:a6:6d:62:e8:e7:75:20:a2:26:
eb:57:67:a3:ab:4b:d6:7b:4d:23:c6:f9:05:a5:9b:9c:d8:c2:
68:54:51:ac:12:dc:67:e6:bc:ed:af:38:65:ac:83:3b:19:9d:
26:d0:f5:ce:0f:77:06:75:5f:29:5c:22:f5:80:f5:04:d8:a8:
fc:ef:71:a2:24:42:45:29:fe:d4:84:0f:d2:1e:2e:86:42:8a:
93:b6:cd:42:f1:9c:74:c8:76:38:fe:d5:2f:f9:2d:49:db:69:
1d:4e:38:a2:94:ed:ac:7f:af:b7:92:ef:5f:a7:fd:4c:71:33:
44:4a:2e:5e:43:38:84:96:4c:9c:3b:f5:42:40:94:b2:9e:16:
fd:ec:1c:13:41:61:ac:49:50:69:49:ad:b9:75:e1:54:71:d0:
00:96:87:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiSa7RvvhrtiWZqTTHx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYmQ3ZGRjZTRmZDcwM2JjM2ZiY2FmYzFiNWQ1NzdlMWE3
NTc1NzUwHhcNMjUwODIzMDQwMDU0WhcNMjUwODI0MDQwMDU0WjAzMTEwLwYDVQQD
Eyg5NzFmYWZjYmJhYTJjZTBjYTZlZmIzZWUzMzk0ZGY1ODgwMTI4ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6++1jK+dT1eQcyViO/a1jsZjGX6
ft64yRXOWelE+s6WcLGMycpKeEbGYJZBKGGy2MsQvSN533RGRUDgPdI6VP585Qg0
2Lc2sQQhLu7BwoRYT0ZAMZeqAQXwfFmx1UZoAV/2BGtCRKhd+G5zQuyVUF2gsIkc
h/ymlk8gO/lLltc6TNp5fQ9zlVXCsJ4guqEPOheRMgwV9xylHIz4JakbejAbdSEk
5Jx+X9wA6QC4mT0rUJ2tHtquUaBc05eBFV7k/G/AaDGr7tzV1gVuYRqpdx3S7jbT
ys1rJKYqbk02Dt5u/Xc2YXQ94HZIzhi7CkRnVkB5gD5e0D4InF6YPuMp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcfr8u6os4Mpu+z7jOU31iAEo35MB8GA1UdIwQY
MBaAFAq9fdzk/XA7w/vK/BtdV34adXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDIt
N2QzNDhjY2ExZDIwLzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDItN2QzNDhjY2ExZDIw
LzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT58iG7oR
If4UKvc0b0N9xKkQ2xTCkgresYEQahmWBcpKGATuw8GTGS0utvgKYfGWMas9x++B
QXHc1y5VWOKOosq/xvCkgXaWxbow9WZ2T5lry3sop7ykPSWQhGdYZc7/0Yhppm1i
6Od1IKIm61dno6tL1ntNI8b5BaWbnNjCaFRRrBLcZ+a87a84ZayDOxmdJtD1zg93
BnVfKVwi9YD1BNio/O9xoiRCRSn+1IQP0h4uhkKKk7bNQvGcdMh2OP7VL/ktSdtp
HU44opTtrH+vt5LvX6f9THEzREouXkM4hJZMnDv1QkCUsp4W/ewcE0FhrElQaUmt
uXXhVHHQAJaHNg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:07 2025 by rpki-client