Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: 34ffEOPDKeC/RYervMoVJ+ayypnI0U3WeGTssgxtCRU=
Subject key identifier: 70:0C:BE:8F:BE:C6:F7:BD:C6:71:34:92:3D:12:DE:D2:51:38:FE:FC
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 0198D54DC2F455A4E26D908316E838746E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 1617
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: /1WjHdlNj+AGUULBcURXQE00l/LSZAe+KmNPldHaz6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c2:f4:55:a4:e2:6d:90:83:16:e8:38:74:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=700cbe8fbec6f7bdc67134923d12ded25138fefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:9e:f3:45:84:c7:cd:c5:27:72:2a:a3:3a:
55:4e:73:72:58:f4:73:b2:8f:ff:95:6c:98:e1:93:
6b:23:9f:1a:16:19:66:95:ac:96:68:56:01:28:28:
8b:6d:71:89:e3:d3:c3:8d:8b:b1:4c:2c:e5:bd:7b:
e3:8f:09:38:52:b4:59:f5:73:cd:91:f5:f6:13:f9:
c2:41:74:fa:59:77:6f:cd:df:a2:44:6d:67:b8:03:
7d:4e:cf:06:e1:ac:76:65:40:db:7c:d7:26:15:ce:
4d:18:e9:df:bf:ed:cb:0d:61:e4:b2:a5:b5:fc:cc:
43:67:92:c4:36:d5:69:d9:6e:a1:de:27:50:d4:e5:
3d:a9:89:03:21:84:21:6c:e9:06:98:11:0a:a5:aa:
77:e4:64:8b:81:ea:1e:8e:1c:66:03:6e:7f:2c:9a:
2f:ef:1e:d1:46:c9:79:b5:af:5c:a1:84:ea:04:b9:
2a:1e:a5:83:f4:eb:81:ac:c7:84:89:ae:bd:1b:1a:
5e:07:69:4c:e4:05:e3:5b:cd:3b:75:86:dd:6d:5f:
c6:2e:86:d7:60:c9:01:02:be:94:26:da:4e:05:aa:
08:42:78:52:ed:d9:0b:11:14:e6:73:dc:dc:33:ba:
6d:3e:22:61:05:07:f2:09:f4:65:04:04:b7:fe:02:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:BE:8F:BE:C6:F7:BD:C6:71:34:92:3D:12:DE:D2:51:38:FE:FC
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ad:d3:e7:1d:6d:c6:c6:5c:93:93:79:31:28:57:e9:12:dc:
db:96:49:e7:f0:f2:bb:5e:28:72:bc:bd:19:dd:dd:59:e3:7a:
de:f5:7b:4b:e0:32:a4:ef:05:69:72:ae:2e:54:ec:b6:b2:77:
c3:4e:3c:1f:04:4d:06:bd:2d:4e:74:2c:1e:57:4d:89:90:51:
a3:ce:54:e9:f1:23:d0:46:0c:c4:0b:a7:49:b3:7b:03:48:ef:
45:a9:d7:b6:61:28:11:4b:97:71:fa:90:c2:48:60:af:32:9a:
bd:76:f3:38:16:bd:6d:1d:34:f0:74:e1:55:4c:f0:1b:5e:7f:
ca:ef:cc:6d:13:3a:e3:eb:7f:33:e7:9f:b9:bd:7a:f0:4b:a3:
47:96:60:4e:bf:8c:b9:25:1e:47:7a:e9:3e:6b:8c:d2:d9:04:
dc:dc:90:26:58:c9:b0:33:9d:d0:6d:92:1b:29:92:32:e3:4a:
ac:bf:c1:25:7c:42:95:bd:51:3f:46:d5:1b:ef:5a:22:26:aa:
ad:6e:a4:24:31:f2:17:f1:7b:69:06:b2:a1:63:a6:52:98:89:
02:81:71:cf:e4:62:0e:03:b3:1e:8d:a1:b1:2c:64:a5:ec:53:
34:5c:b0:92:49:e6:71:ae:e2:bb:dd:c9:04:dc:9a:90:d2:69:
23:b0:7a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcL0VaTibZCDFug4dG5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZGYxYjExY2FmMmI4MjQ0NTMxNzgyMTI1YWU5MzNhZTc2
OTlmNzYwHhcNMjUwODIzMDUwMTM5WhcNMjUwODI0MDUwMTM5WjAzMTEwLwYDVQQD
Eyg3MDBjYmU4ZmJlYzZmN2JkYzY3MTM0OTIzZDEyZGVkMjUxMzhmZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg2e80WEx83FJ3IqozpVTnNyWPRz
so//lWyY4ZNrI58aFhlmlayWaFYBKCiLbXGJ49PDjYuxTCzlvXvjjwk4UrRZ9XPN
kfX2E/nCQXT6WXdvzd+iRG1nuAN9Ts8G4ax2ZUDbfNcmFc5NGOnfv+3LDWHksqW1
/MxDZ5LENtVp2W6h3idQ1OU9qYkDIYQhbOkGmBEKpap35GSLgeoejhxmA25/LJov
7x7RRsl5ta9coYTqBLkqHqWD9OuBrMeEia69GxpeB2lM5AXjW807dYbdbV/GLobX
YMkBAr6UJtpOBaoIQnhS7dkLERTmc9zcM7ptPiJhBQfyCfRlBAS3/gJo2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAMvo++xve9xnE0kj0S3tJROP78MB8GA1UdIwQY
MBaAFJ/fGxHK8rgkRTF4ISWukzrnaZ92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjk4YkVjcnl1Q1JGTVhnaEphNlRPdWRwbjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84YWJlNTQtM2RjNy00NjE3LTk5MDct
NDcyZjRkYWQ3ZmRlLzEvbjk4YkVjcnl1Q1JGTVhnaEphNlRPdWRwbjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84YWJlNTQtM2RjNy00NjE3LTk5MDctNDcyZjRkYWQ3ZmRl
LzEvbjk4YkVjcnl1Q1JGTVhnaEphNlRPdWRwbjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ63T5x1t
xsZck5N5MShX6RLc25ZJ5/Dyu14ocry9Gd3dWeN63vV7S+AypO8FaXKuLlTstrJ3
w048HwRNBr0tTnQsHldNiZBRo85U6fEj0EYMxAunSbN7A0jvRanXtmEoEUuXcfqQ
wkhgrzKavXbzOBa9bR008HThVUzwG15/yu/MbRM64+t/M+efub168EujR5ZgTr+M
uSUeR3rpPmuM0tkE3NyQJljJsDOd0G2SGymSMuNKrL/BJXxClb1RP0bVG+9aIiaq
rW6kJDHyF/F7aQayoWOmUpiJAoFxz+RiDgOzHo2hsSxkpexTNFywkknmca7iu93J
BNyakNJpI7B6Bg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:31 2025 by rpki-client