Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: LkKhpb1M7VPtRtGj7Du3MOZcapPY6Jt75TFGK6eWGFk=
Subject key identifier: 38:C1:56:60:E4:7F:D5:F5:3C:81:CF:CE:51:2D:94:77:4B:60:83:D1
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 0198D705A16C45377ECF48EC7A8FCAA170D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:06 +0000
Manifest this update: Sat 23 Aug 2025 13:02:06 +0000
Manifest next update: Sun 24 Aug 2025 13:02:06 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: u2FxodYks2aQ2vv11CyN9yBDA+3df3GZqdX9ys76g5A=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a1:6c:45:37:7e:cf:48:ec:7a:8f:ca:a1:70:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Aug 23 13:02:06 2025 GMT
Not After : Aug 24 13:02:06 2025 GMT
Subject: CN=38c15660e47fd5f53c81cfce512d94774b6083d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:42:b3:32:66:e0:9f:a2:45:e1:02:6a:14:
aa:f4:b8:34:42:e1:9f:d7:ca:7d:64:03:81:5f:b7:
63:57:73:61:f6:50:ee:10:e4:c9:cf:41:05:1f:a4:
f5:be:00:00:f0:7d:27:b3:09:c6:ef:dc:69:a8:e0:
66:24:ce:0a:8c:44:32:32:84:11:c4:95:e3:ef:af:
e9:6b:3a:a3:6a:d8:85:4a:a9:fa:cf:07:4b:06:6a:
f6:d7:38:1f:d6:94:45:2d:3e:0f:b6:56:c5:2b:0a:
3e:ab:1c:f2:94:2e:fe:72:17:c5:c1:ae:91:36:e9:
48:64:06:d2:3f:06:2b:d3:d9:e0:e0:19:ae:c4:97:
31:b8:e0:c5:53:5b:85:ea:a1:6d:fe:e8:a0:9d:62:
2f:61:8a:6e:93:a7:da:05:ff:71:88:85:fe:9e:8f:
ce:f6:f6:1b:db:49:a7:b9:61:9b:c2:fe:f6:ca:be:
a6:bd:b7:04:8d:e7:d0:1f:fe:71:75:99:e9:14:e4:
ce:d0:51:83:da:e2:2d:80:b4:cd:74:0b:8d:eb:04:
e3:ca:e9:42:26:3e:12:fe:53:26:1d:53:3e:45:2e:
64:69:da:d5:82:3f:2d:98:68:ca:73:80:ca:79:59:
4c:54:60:46:1e:07:2e:81:17:52:fe:26:00:ae:45:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:56:60:E4:7F:D5:F5:3C:81:CF:CE:51:2D:94:77:4B:60:83:D1
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:55:96:20:a5:22:89:12:b3:18:27:7e:61:1f:f3:2b:bc:8e:
05:02:87:55:af:c8:5a:ff:86:05:eb:15:91:a7:a3:f9:46:6e:
58:2f:44:a3:f5:9f:52:80:46:aa:3c:51:40:89:c5:98:4a:53:
5a:8c:be:a2:56:d5:b1:fd:68:ff:04:dc:56:b6:d0:3e:ba:2c:
7d:b8:a6:88:49:98:fe:25:40:26:96:3d:f3:56:2f:36:1c:1c:
43:73:4f:95:5e:d1:6c:fc:a2:29:24:51:90:1c:2c:75:d6:1a:
c7:f0:60:10:ee:04:8e:5b:71:54:64:a1:70:62:dc:91:1d:63:
ec:33:8d:70:80:e2:f9:98:91:8b:eb:e8:eb:55:66:3a:7a:a6:
aa:39:4c:51:5b:3b:20:32:23:ac:4d:65:4e:a1:d9:81:78:cb:
34:fb:4f:83:40:92:cf:1d:fa:a2:ac:ff:e0:e6:72:71:1d:92:
15:13:0f:b4:cd:c2:c1:58:0b:65:f4:13:1a:e6:a1:e3:be:95:
12:45:bc:e7:91:36:ea:b7:21:b9:53:1f:d5:77:6b:dd:2b:33:
51:3c:9d:7c:a1:b1:1c:a8:88:e6:fb:1a:53:5e:8f:14:77:e2:
b3:9e:3f:a3:50:8a:02:db:38:63:cd:4f:80:b1:6c:f0:12:4b:
d1:ac:8d:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBaFsRTd+z0jseo/KoXDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0
NTE1ZTkwHhcNMjUwODIzMTMwMjA2WhcNMjUwODI0MTMwMjA2WjAzMTEwLwYDVQQD
EygzOGMxNTY2MGU0N2ZkNWY1M2M4MWNmY2U1MTJkOTQ3NzRiNjA4M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv9CszJm4J+iReECahSq9Lg0QuGf
18p9ZAOBX7djV3Nh9lDuEOTJz0EFH6T1vgAA8H0nswnG79xpqOBmJM4KjEQyMoQR
xJXj76/pazqjatiFSqn6zwdLBmr21zgf1pRFLT4PtlbFKwo+qxzylC7+chfFwa6R
NulIZAbSPwYr09ng4BmuxJcxuODFU1uF6qFt/uignWIvYYpuk6faBf9xiIX+no/O
9vYb20mnuWGbwv72yr6mvbcEjefQH/5xdZnpFOTO0FGD2uItgLTNdAuN6wTjyulC
Jj4S/lMmHVM+RS5kadrVgj8tmGjKc4DKeVlMVGBGHgcugRdS/iYArkVoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjBVmDkf9X1PIHPzlEtlHdLYIPRMB8GA1UdIwQY
MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt
YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5
LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVWWIKUi
iRKzGCd+YR/zK7yOBQKHVa/IWv+GBesVkaej+UZuWC9Eo/WfUoBGqjxRQInFmEpT
Woy+olbVsf1o/wTcVrbQProsfbimiEmY/iVAJpY981YvNhwcQ3NPlV7RbPyiKSRR
kBwsddYax/BgEO4EjltxVGShcGLckR1j7DONcIDi+ZiRi+vo61VmOnqmqjlMUVs7
IDIjrE1lTqHZgXjLNPtPg0CSzx36oqz/4OZycR2SFRMPtM3CwVgLZfQTGuah476V
EkW855E26rchuVMf1Xdr3SszUTydfKGxHKiI5vsaU16PFHfis54/o1CKAts4Y81P
gLFs8BJL0ayNZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:38 2025 by rpki-client