Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: y0GK5yWEIddbd7aA0su8ZzTYf46E66BvFcXRWszrMzE=
Subject key identifier: 92:A2:88:AD:E0:4E:C1:FE:3E:27:5A:29:8D:89:DE:12:54:C5:E2:D4
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 0198D4E09F372F808EA1E8761046E24EF85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: S1knyK70gMA9S8qehygqad6I4cyZAP/yeoDJNdPEda8=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9f:37:2f:80:8e:a1:e8:76:10:46:e2:4e:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=92a288ade04ec1fe3e275a298d89de1254c5e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:e8:6a:16:26:32:8a:69:99:fb:b4:a6:3f:
7a:61:ab:60:33:b9:9f:0f:21:79:77:54:b2:bc:cf:
a6:0f:5c:fe:ac:ac:ea:c1:15:9f:02:21:bc:a7:3e:
b5:1d:b4:db:71:82:48:dd:ed:5f:ae:32:a8:4f:c6:
2d:4d:e8:41:56:98:e3:84:0b:22:07:ab:ed:29:6c:
af:ce:3c:5c:49:e4:f5:82:19:4a:1e:c8:53:b6:2e:
e6:bf:71:cf:ed:69:f4:16:86:fc:11:7a:6f:0c:fa:
51:73:35:87:c0:55:26:62:1d:f0:a6:16:97:d4:b5:
55:43:72:ad:96:e7:a7:34:42:a2:a8:05:1e:aa:74:
b5:ed:4c:d4:0e:88:1b:00:8d:95:75:20:f3:cd:64:
f7:5f:06:4a:97:bf:16:61:34:4e:88:62:50:11:32:
97:1c:72:8c:ce:47:bb:54:4c:5c:7a:84:7f:dc:5b:
84:71:07:83:8a:3d:a4:b7:15:c0:24:60:63:68:df:
b4:1f:ad:63:ab:74:26:bd:8a:04:82:31:63:59:4f:
e6:e2:d5:de:a8:8e:ee:33:db:a4:02:97:f4:aa:cc:
ac:00:ee:a9:79:cc:1d:d1:3f:c4:18:d3:33:3c:2a:
dc:76:0f:54:0d:a7:f1:20:2b:c0:d7:a0:4e:08:2d:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:88:AD:E0:4E:C1:FE:3E:27:5A:29:8D:89:DE:12:54:C5:E2:D4
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:be:10:ed:68:c1:82:1a:d7:2e:1d:30:68:4a:f8:07:85:62:
c1:23:11:15:c1:ae:7d:ff:da:e0:a6:1c:b0:d4:a6:83:c1:6f:
72:29:8f:7b:72:de:c7:e3:80:9f:d1:52:09:a5:8c:bb:a6:8a:
6b:44:c8:89:54:f1:1e:ef:0a:f8:a3:38:9b:69:78:60:b5:e8:
b5:b8:31:93:fc:2b:c7:ec:e9:2e:9e:e8:5a:46:7a:5b:e2:5e:
93:66:69:82:d6:8f:ee:63:53:ba:95:9d:1d:98:e4:62:ba:39:
27:84:24:6e:1b:60:ba:be:88:36:d4:a3:91:33:b8:e2:6c:f8:
e2:91:1b:f6:e9:db:54:a3:df:b9:99:5c:e6:fa:a1:f0:5b:5e:
7d:eb:06:06:89:e9:85:3c:6e:6a:30:d7:9d:8a:c7:fc:0c:6f:
4c:ed:77:b6:bc:8f:59:a6:a9:b9:ea:33:20:bb:a7:6f:75:a6:
30:83:19:4c:85:27:10:a5:cb:ca:de:47:46:ee:3a:d6:bd:07:
ba:b6:47:c6:c0:00:fb:42:a5:03:60:a1:ef:58:be:c3:d8:33:
0b:e8:cf:67:f2:8c:7b:f2:d9:b4:ce:7a:0e:79:68:2c:63:83:
b7:41:22:1b:85:61:f6:ed:f3:57:09:c6:05:b9:2b:0a:50:24:
1e:02:19:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4J83L4COoeh2EEbiTvheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0
Mzg5ODAwHhcNMjUwODIzMDMwMjI3WhcNMjUwODI0MDMwMjI3WjAzMTEwLwYDVQQD
Eyg5MmEyODhhZGUwNGVjMWZlM2UyNzVhMjk4ZDg5ZGUxMjU0YzVlMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIPoahYmMoppmfu0pj96YatgM7mf
DyF5d1SyvM+mD1z+rKzqwRWfAiG8pz61HbTbcYJI3e1frjKoT8YtTehBVpjjhAsi
B6vtKWyvzjxcSeT1ghlKHshTti7mv3HP7Wn0Fob8EXpvDPpRczWHwFUmYh3wphaX
1LVVQ3KtluenNEKiqAUeqnS17UzUDogbAI2VdSDzzWT3XwZKl78WYTROiGJQETKX
HHKMzke7VExceoR/3FuEcQeDij2ktxXAJGBjaN+0H61jq3QmvYoEgjFjWU/m4tXe
qI7uM9ukApf0qsysAO6pecwd0T/EGNMzPCrcdg9UDafxICvA16BOCC2iGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKiiK3gTsH+PidaKY2J3hJUxeLUMB8GA1UdIwQY
MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt
NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0
LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr4Q7WjB
ghrXLh0waEr4B4ViwSMRFcGuff/a4KYcsNSmg8FvcimPe3Lex+OAn9FSCaWMu6aK
a0TIiVTxHu8K+KM4m2l4YLXotbgxk/wrx+zpLp7oWkZ6W+Jek2ZpgtaP7mNTupWd
HZjkYro5J4Qkbhtgur6INtSjkTO44mz44pEb9unbVKPfuZlc5vqh8FtefesGBonp
hTxuajDXnYrH/AxvTO13tryPWaapueozILunb3WmMIMZTIUnEKXLyt5HRu461r0H
urZHxsAA+0KlA2Ch71i+w9gzC+jPZ/KMe/LZtM56DnloLGODt0EiG4Vh9u3zVwnG
BbkrClAkHgIZ9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:42 2025 by rpki-client