Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: qA+NcMViz+cPdm1rVWTdBvlWl0gwdHiFBDeSWPvSin0=
Subject key identifier: CF:AB:29:85:E1:0A:7C:CA:C1:95:D1:55:B0:F7:DD:B7:EB:38:F1:82
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 0198D4E058EF1F03A6311A91BBC606B7933C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: wzJP3xpvEXQXRWANptiqO0R3jLsYj0JghhSGjYGqIsI=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:58:ef:1f:03:a6:31:1a:91:bb:c6:06:b7:93:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=cfab2985e10a7ccac195d155b0f7ddb7eb38f182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:3f:13:07:0f:43:ee:cb:a9:9e:a7:55:60:
b7:44:b1:1c:55:25:03:d7:bf:12:ef:d2:47:d6:15:
11:14:18:38:12:0d:91:83:e7:8f:7d:8b:23:e8:5b:
be:94:55:9e:6d:e8:62:db:25:64:27:ff:20:d5:e3:
e8:c5:86:c5:a4:9e:4a:13:18:1b:a6:25:39:af:26:
6b:6c:99:6a:d0:6e:9d:49:cc:8c:a1:9b:5e:82:c6:
f4:f0:aa:10:e6:48:0c:b0:bf:fc:dc:6c:97:1c:44:
10:db:b3:48:d9:d3:4e:34:06:4d:c1:44:23:16:05:
75:9a:33:a1:2a:e2:a7:9b:b9:5b:bc:4b:42:60:c6:
53:2a:b9:2f:6c:7e:78:0b:62:da:b1:9e:89:d6:07:
53:7d:88:b1:cb:16:5b:e5:af:c2:13:32:f8:b8:d3:
c9:1a:32:20:da:c8:45:0b:e2:ba:bd:ab:c2:3e:41:
6c:bf:42:75:ac:b0:f7:65:7c:4b:8b:9a:c4:e6:0e:
ad:32:5b:8c:fd:e0:f0:45:11:c5:43:ca:00:3d:bf:
35:5c:0b:9d:e9:b7:cc:8a:df:04:4d:f8:a3:5a:c5:
53:fe:f3:0a:f9:5c:2c:83:8f:75:23:ae:f2:bf:7e:
91:42:ea:ce:c3:82:62:e3:c8:00:6e:66:87:20:8e:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:29:85:E1:0A:7C:CA:C1:95:D1:55:B0:F7:DD:B7:EB:38:F1:82
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:3d:59:4a:c8:29:90:58:5d:26:1a:87:b6:db:fc:f9:9d:
64:ed:85:78:99:5d:42:4e:d4:91:c9:ff:fb:a2:a1:99:f7:ee:
6e:c3:91:31:2b:01:04:46:b0:05:d4:12:d5:f7:e7:72:e0:ac:
b3:a6:48:a5:31:6e:16:4f:0d:f5:6c:18:ed:1e:9e:3a:b0:e6:
41:67:14:89:88:4d:56:3c:b2:9e:25:ad:fd:07:3a:cf:eb:4f:
ce:67:8b:7c:cd:fb:f9:35:6d:f9:5d:6e:b6:46:a7:77:c7:1f:
23:2d:f3:89:74:ad:86:e2:b7:61:28:70:20:74:89:b2:21:bd:
3b:90:ef:ca:7c:cb:f6:89:18:15:12:d0:b0:1c:4c:05:b7:12:
a1:2b:f3:71:62:47:d6:ef:dc:48:56:1b:11:53:2e:cc:2a:45:
aa:58:a3:08:07:35:68:5b:07:62:5c:2e:2e:4c:34:ad:f6:43:
67:ce:e7:85:69:e1:a4:0a:e0:67:d1:63:a5:84:99:fe:23:13:
ef:90:93:fe:00:f0:25:8a:fd:a7:06:44:e4:22:9d:32:03:ef:
a5:2b:12:90:db:4a:46:6c:30:7c:c4:38:71:3a:8e:9c:9e:12:
76:33:09:1e:0c:ad:9a:dc:0c:8a:16:9b:27:61:9e:8d:69:b9:
c5:f4:5d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FjvHwOmMRqRu8YGt5M8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw
YTZjYjYwHhcNMjUwODIzMDMwMjA5WhcNMjUwODI0MDMwMjA5WjAzMTEwLwYDVQQD
EyhjZmFiMjk4NWUxMGE3Y2NhYzE5NWQxNTViMGY3ZGRiN2ViMzhmMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q8/EwcPQ+7LqZ6nVWC3RLEcVSUD
178S79JH1hURFBg4Eg2Rg+ePfYsj6Fu+lFWebehi2yVkJ/8g1ePoxYbFpJ5KExgb
piU5ryZrbJlq0G6dScyMoZtegsb08KoQ5kgMsL/83GyXHEQQ27NI2dNONAZNwUQj
FgV1mjOhKuKnm7lbvEtCYMZTKrkvbH54C2LasZ6J1gdTfYixyxZb5a/CEzL4uNPJ
GjIg2shFC+K6vavCPkFsv0J1rLD3ZXxLi5rE5g6tMluM/eDwRRHFQ8oAPb81XAud
6bfMit8ETfijWsVT/vMK+Vwsg491I67yv36RQurOw4Ji48gAbmaHII4RnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+rKYXhCnzKwZXRVbD33bfrOPGCMB8GA1UdIwQY
MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt
NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz
LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcE9WUrI
KZBYXSYah7bb/PmdZO2FeJldQk7Ukcn/+6KhmffubsORMSsBBEawBdQS1ffncuCs
s6ZIpTFuFk8N9WwY7R6eOrDmQWcUiYhNVjyyniWt/Qc6z+tPzmeLfM37+TVt+V1u
tkand8cfIy3ziXSthuK3YShwIHSJsiG9O5DvynzL9okYFRLQsBxMBbcSoSvzcWJH
1u/cSFYbEVMuzCpFqlijCAc1aFsHYlwuLkw0rfZDZ87nhWnhpArgZ9FjpYSZ/iMT
75CT/gDwJYr9pwZE5CKdMgPvpSsSkNtKRmwwfMQ4cTqOnJ4SdjMJHgytmtwMihab
J2GejWm5xfRdkA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:30 2025 by rpki-client