Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: m/vuI+9i5Up12+v6+eW1H2jdgn/KkMXExlQ7NtZppK0=
Subject key identifier: 34:70:39:38:A2:57:71:2D:12:35:FA:8A:24:EA:9C:8A:10:8F:D6:97
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0198D4E071B4C105F0A1F3114807AF0BF0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: nH7AEyNFhJN5Z78RLR6Dj1mZgVywnA8AtJVKXCBRF0A=)
2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=)
4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)
7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:71:b4:c1:05:f0:a1:f3:11:48:07:af:0b:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=34703938a257712d1235fa8a24ea9c8a108fd697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1e:ee:b1:68:ca:e7:de:d2:67:b4:32:60:db:
a0:79:f5:4f:63:19:32:e8:48:a4:5f:e4:f9:8c:f5:
ab:5c:97:7d:9c:3a:c6:a3:b3:00:94:46:30:88:f3:
7f:1b:a5:54:87:5e:da:ea:f4:43:5f:83:47:a9:45:
6e:15:4c:69:9b:c6:ab:09:50:9e:8f:d3:df:4b:d3:
aa:03:80:eb:74:7a:06:43:cd:60:9f:c8:90:a5:25:
1b:32:0d:f3:9a:c2:ba:f3:93:ce:33:b9:84:0f:45:
23:4c:8f:33:d6:c0:2f:74:b5:05:36:84:39:3f:ac:
e5:a3:f3:d6:71:55:23:5e:e3:7e:9f:63:58:2d:f3:
ce:6a:d1:d2:23:2c:f0:ea:77:28:c5:34:81:d9:8b:
a3:65:54:d1:71:d5:20:f6:e9:46:d0:a1:90:66:21:
55:05:0d:87:8c:79:2c:d1:5b:52:44:33:47:a3:96:
8f:87:c8:da:de:a8:02:a2:52:ed:21:30:e8:92:44:
7c:2b:d9:4f:5f:a7:ee:a2:7a:93:df:a6:86:d9:41:
c5:aa:bb:d2:26:49:3e:0c:ba:d2:bc:d8:27:1f:bd:
12:38:4c:97:42:48:67:60:7a:b9:f5:e8:07:f6:7c:
f5:3b:ee:cb:7b:21:21:e2:22:b9:e7:87:b1:20:8b:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:39:38:A2:57:71:2D:12:35:FA:8A:24:EA:9C:8A:10:8F:D6:97
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bc:9b:6d:cb:7a:c2:d8:1e:1b:7d:3d:a9:97:27:ba:ab:96:
21:fe:e2:f7:f6:8b:01:fc:9a:bb:85:cd:70:b0:ef:76:89:0d:
88:8a:f6:61:71:24:da:01:5c:46:b1:87:ee:b0:7c:81:a9:f1:
6c:39:f9:15:24:bb:c4:f5:78:ef:e7:02:c5:f2:d3:d8:0b:4a:
97:e5:3d:8d:54:32:67:01:22:22:fc:51:b0:40:86:e7:88:fe:
10:0f:6e:7b:c8:7e:d6:f5:12:59:c0:7b:22:1c:d5:43:aa:03:
a4:47:bb:4f:29:95:3d:01:2e:2b:33:19:53:3a:93:43:11:f6:
e6:5a:80:f7:9b:6e:81:07:5c:77:64:d3:9a:69:f9:07:2a:1d:
10:3d:12:b2:d5:92:a0:53:40:1b:88:70:a3:a9:74:3a:8c:0f:
99:84:4e:11:c2:b4:62:53:ca:42:4a:b3:eb:49:e1:43:ee:ff:
f4:b8:df:7e:fb:48:ef:2f:7b:53:f3:53:88:b4:bb:ef:e3:59:
b3:e0:f1:c2:45:36:8a:43:1d:aa:ef:4b:69:ab:61:d9:13:98:
97:74:10:52:2c:d7:f0:7c:0e:9e:df:f6:6f:bc:e9:79:f9:7a:
d7:f8:14:7a:3f:dd:25:a3:33:98:e4:97:3d:55:0b:97:67:27:
70:a7:40:1a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjU4HG0wQXwofMRSAevC/DLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1
MGQ4MTMwHhcNMjUwODIzMDMwMjE1WhcNMjUwODI0MDMwMjE1WjAzMTEwLwYDVQQD
EygzNDcwMzkzOGEyNTc3MTJkMTIzNWZhOGEyNGVhOWM4YTEwOGZkNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x7usWjK597SZ7QyYNugefVPYxky
6EikX+T5jPWrXJd9nDrGo7MAlEYwiPN/G6VUh17a6vRDX4NHqUVuFUxpm8arCVCe
j9PfS9OqA4DrdHoGQ81gn8iQpSUbMg3zmsK685POM7mED0UjTI8z1sAvdLUFNoQ5
P6zlo/PWcVUjXuN+n2NYLfPOatHSIyzw6ncoxTSB2YujZVTRcdUg9ulG0KGQZiFV
BQ2HjHks0VtSRDNHo5aPh8ja3qgColLtITDokkR8K9lPX6fuonqT36aG2UHFqrvS
Jkk+DLrSvNgnH70SOEyXQkhnYHq59egH9nz1O+7LeyEh4iK554exIIssPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDRwOTiiV3EtEjX6iiTqnIoQj9aXMB8GA1UdIwQY
MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0
LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx
ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLyb
bct6wtgeG309qZcnuquWIf7i9/aLAfyau4XNcLDvdokNiIr2YXEk2gFcRrGH7rB8
ganxbDn5FSS7xPV47+cCxfLT2AtKl+U9jVQyZwEiIvxRsECG54j+EA9ue8h+1vUS
WcB7IhzVQ6oDpEe7TymVPQEuKzMZUzqTQxH25lqA95tugQdcd2TTmmn5ByodED0S
stWSoFNAG4hwo6l0OowPmYROEcK0YlPKQkqz60nhQ+7/9LjffvtI7y97U/NTiLS7
7+NZs+DxwkU2ikMdqu9Laath2ROYl3QQUizX8HwOnt/2b7zpefl61/gUej/dJaMz
mOSXPVULl2cncKdAGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:19 2025 by rpki-client