Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: nwQDMTaedWDGTAUfFbN1wBxpSHIkVqlBenS4E/+F6R4=
Subject key identifier: 68:32:AD:61:2A:AC:2A:22:2E:95:32:F6:C0:17:79:54:83:7F:97:A1
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0198D4A80DCF56D4ACC52A6B57CE84C23F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:40 +0000
Manifest this update: Sat 23 Aug 2025 02:00:40 +0000
Manifest next update: Sun 24 Aug 2025 02:00:40 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: iLNL3rh4afZLklFiHMUbuv4axPdSdXtp9KN30yLTUjM=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0d:cf:56:d4:ac:c5:2a:6b:57:ce:84:c2:3f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Aug 23 02:00:40 2025 GMT
Not After : Aug 24 02:00:40 2025 GMT
Subject: CN=6832ad612aac2a222e9532f6c0177954837f97a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:a8:b5:cf:a1:9b:ff:99:6b:2f:da:c9:03:
d9:75:0a:29:f1:c8:30:ca:47:c4:79:7e:c3:d2:92:
28:10:77:e5:f8:51:80:97:62:3b:47:ed:00:ff:fb:
1d:c5:11:94:64:68:b0:90:ba:78:5b:cc:46:84:49:
60:69:29:d7:e3:aa:40:df:a8:a5:ec:c2:a7:c2:58:
1c:c5:bb:c9:75:38:75:79:d1:c0:22:b4:1d:24:80:
d9:dd:bb:27:03:2b:9f:b8:ef:74:4d:d7:57:0b:d7:
f1:e5:86:cd:f5:98:52:e9:0d:11:fc:a4:73:8d:43:
a1:4b:0a:a3:5b:f1:44:ad:bb:af:d0:b9:46:5a:bf:
e6:34:2b:7f:f4:de:79:df:68:2d:44:42:8e:cd:5c:
48:d0:99:34:b9:e2:d2:20:78:e3:1d:66:54:3c:cd:
82:c1:8e:bb:82:d0:54:85:97:f3:23:09:9b:76:b4:
21:40:36:02:5e:52:be:20:8c:b9:17:d9:1f:3c:d2:
d0:da:58:7f:db:9c:9e:1c:a4:52:67:39:c3:a3:49:
c8:37:42:b8:38:24:03:8c:41:21:e8:93:6a:58:7d:
6f:1a:41:a6:1d:06:ff:89:fe:d8:13:38:79:5c:5a:
a1:c8:15:e2:38:48:fd:b5:08:e0:17:ae:a3:eb:f4:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:AD:61:2A:AC:2A:22:2E:95:32:F6:C0:17:79:54:83:7F:97:A1
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:33:83:e8:5b:c7:06:20:8c:5a:ae:5a:f8:1b:61:1b:8a:
35:d7:40:0d:90:9f:7a:46:a5:3f:fc:4e:7c:85:00:7d:a2:00:
43:c1:e4:46:d8:57:05:ae:ed:13:67:4e:79:8b:8c:ba:2c:10:
d0:46:4b:56:48:27:55:dc:e0:4d:a8:9c:52:7a:04:d8:c1:e0:
50:da:6b:d3:ec:a1:70:a6:de:4a:27:a0:02:95:67:24:b8:d8:
89:32:8a:c1:9e:17:f8:ff:2c:66:7e:93:80:56:fe:61:41:02:
e0:31:78:fb:14:49:c1:ab:9d:ca:2a:f8:ab:08:99:a0:46:24:
d8:cc:23:d1:de:e4:6a:a9:c5:3d:c9:e1:0b:48:18:af:27:9d:
96:65:e9:a7:b3:26:d0:b7:28:eb:69:c3:3b:89:0d:a9:79:9f:
9f:cc:88:96:cc:c8:ce:d8:04:f3:34:47:c0:44:6a:c7:34:e5:
d3:20:a7:6f:51:35:95:0a:b3:03:1b:90:42:6b:e4:50:db:a8:
89:7a:ca:f2:9d:5f:95:57:f3:c3:22:81:f5:b8:4d:bd:7e:74:
01:7a:cf:41:48:05:1c:41:37:de:f8:65:e8:32:a6:0d:87:dd:
0b:6c:19:5f:3f:3f:c5:e5:9e:8c:0f:e9:32:1e:bd:63:9a:5b:
e4:ee:14:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqA3PVtSsxSprV86Ewj9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTIyMjY1NjdkYTcyZGQ4Njg4M2NhZGQ1ZjNkZTZmZmQ1
YjM1NzMwHhcNMjUwODIzMDIwMDQwWhcNMjUwODI0MDIwMDQwWjAzMTEwLwYDVQQD
Eyg2ODMyYWQ2MTJhYWMyYTIyMmU5NTMyZjZjMDE3Nzk1NDgzN2Y5N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j2otc+hm/+Zay/ayQPZdQop8cgw
ykfEeX7D0pIoEHfl+FGAl2I7R+0A//sdxRGUZGiwkLp4W8xGhElgaSnX46pA36il
7MKnwlgcxbvJdTh1edHAIrQdJIDZ3bsnAyufuO90TddXC9fx5YbN9ZhS6Q0R/KRz
jUOhSwqjW/FErbuv0LlGWr/mNCt/9N5532gtREKOzVxI0Jk0ueLSIHjjHWZUPM2C
wY67gtBUhZfzIwmbdrQhQDYCXlK+IIy5F9kfPNLQ2lh/25yeHKRSZznDo0nIN0K4
OCQDjEEh6JNqWH1vGkGmHQb/if7YEzh5XFqhyBXiOEj9tQjgF66j6/TvNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgyrWEqrCoiLpUy9sAXeVSDf5ehMB8GA1UdIwQY
MBaAFHKSImVn2nLdhog8rdXz3m/9WzVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2Qt
MDM5ZGU3ODRkOTQxLzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2QtMDM5ZGU3ODRkOTQx
LzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN94zg+hb
xwYgjFquWvgbYRuKNddADZCfekalP/xOfIUAfaIAQ8HkRthXBa7tE2dOeYuMuiwQ
0EZLVkgnVdzgTaicUnoE2MHgUNpr0+yhcKbeSiegApVnJLjYiTKKwZ4X+P8sZn6T
gFb+YUEC4DF4+xRJwaudyir4qwiZoEYk2Mwj0d7kaqnFPcnhC0gYryedlmXpp7Mm
0Lco62nDO4kNqXmfn8yIlszIztgE8zRHwERqxzTl0yCnb1E1lQqzAxuQQmvkUNuo
iXrK8p1flVfzwyKB9bhNvX50AXrPQUgFHEE33vhl6DKmDYfdC2wZXz8/xeWejA/p
Mh69Y5pb5O4UuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:56 2025 by rpki-client