Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: a2edHGipsex8Q+QlKb4vRsMBFLkly9Xp8/MELsKGox4=
Subject key identifier: 8C:E7:C1:B6:77:78:64:83:B1:C8:A5:09:BF:D2:48:BE:67:5C:97:4F
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 0198D6CD4D09BF9E522073B46581E27D565E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: tQjkFGA4nlo64GBxUwcXvDjEtD9bgCZlP/v/Db4EtM8=)
2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4d:09:bf:9e:52:20:73:b4:65:81:e2:7d:56:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=8ce7c1b677786483b1c8a509bfd248be675c974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:9c:84:f0:4b:f4:7c:d1:77:17:2c:3e:41:
ce:dd:e7:2a:3d:79:2d:53:63:71:58:4c:01:8a:67:
c3:4a:ea:c6:24:65:9f:b1:90:81:5e:b9:55:65:ff:
6d:3b:02:bf:d5:32:8d:7c:1b:5e:42:cc:24:c2:da:
a6:71:b6:dc:d1:0f:c4:c7:51:fe:ad:af:0d:cc:ab:
84:57:ba:3a:0f:4e:c1:70:c1:9d:90:62:e7:10:8e:
2e:3c:e3:55:8d:26:48:24:93:a0:39:07:4c:89:df:
bd:90:cd:33:7a:b9:ab:34:b5:2b:2a:b9:55:43:28:
e9:ce:86:fc:1d:17:a6:a3:89:a7:11:32:dc:f4:4e:
19:df:7f:4b:e3:5b:fe:04:fc:a9:1f:5b:e9:62:6f:
40:fc:7d:42:a3:a5:ae:08:c0:f9:00:a2:9d:9e:ad:
49:ef:f9:b8:3e:8d:6b:e8:27:5a:d6:f6:f8:6c:34:
87:98:ff:ed:a7:47:74:99:2a:ab:a9:3d:d4:44:3c:
fe:27:eb:f7:dd:0a:54:67:62:ad:03:66:90:bf:ca:
8d:2e:e7:cf:b4:fb:86:8e:9e:c2:2e:24:ec:82:d9:
1f:c1:94:e7:04:09:88:e2:4a:92:d5:68:89:7b:5c:
b1:de:27:13:f6:46:4a:2b:3a:42:d8:3c:a6:1e:e5:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E7:C1:B6:77:78:64:83:B1:C8:A5:09:BF:D2:48:BE:67:5C:97:4F
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c7:90:9e:d3:fc:7c:39:7c:c5:5b:a2:35:11:f7:35:f3:f1:
d9:38:66:2d:99:d4:5b:c1:6e:59:77:cd:38:8d:7a:4a:64:e7:
8d:ee:c6:83:7e:5f:a4:27:ed:42:ae:9c:c1:15:f7:3c:6d:e6:
ce:2e:44:c3:55:d4:47:30:fe:4d:18:27:86:61:ca:9f:ed:4a:
8f:98:18:1a:6c:30:d7:d0:4f:18:97:f2:2a:63:a7:29:30:82:
04:2c:ca:99:0f:d6:5d:07:41:cd:63:f5:73:e7:db:b7:a1:b2:
36:27:5a:b0:b8:ff:eb:81:d4:2b:bf:32:71:29:00:df:ad:93:
cc:b1:98:49:d4:e6:8c:70:cd:03:53:4d:5d:1c:9a:3e:bb:fc:
6f:70:df:b0:5a:06:f5:53:5c:36:98:ba:6d:5e:0a:e3:01:e4:
ab:1c:a0:19:f8:ee:2f:4a:a3:ed:75:1f:2a:fa:7b:2c:df:34:
1f:6f:4a:c3:90:bb:51:a5:9e:c4:93:be:5a:02:b2:34:03:8d:
6a:3b:27:34:ed:96:c3:9d:91:c7:fb:ef:71:62:99:11:92:b5:
b1:70:51:48:30:9d:29:69:ef:94:54:5a:38:0e:23:13:92:e0:
5f:ee:aa:13:67:e1:34:89:8b:c2:59:b1:fa:a3:c2:b2:d8:38:
70:0a:ce:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzU0Jv55SIHO0ZYHifVZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0
ZGYzMTkwHhcNMjUwODIzMTIwMDM1WhcNMjUwODI0MTIwMDM1WjAzMTEwLwYDVQQD
Eyg4Y2U3YzFiNjc3Nzg2NDgzYjFjOGE1MDliZmQyNDhiZTY3NWM5NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYychPBL9HzRdxcsPkHO3ecqPXkt
U2NxWEwBimfDSurGJGWfsZCBXrlVZf9tOwK/1TKNfBteQswkwtqmcbbc0Q/Ex1H+
ra8NzKuEV7o6D07BcMGdkGLnEI4uPONVjSZIJJOgOQdMid+9kM0zermrNLUrKrlV
Qyjpzob8HRemo4mnETLc9E4Z339L41v+BPypH1vpYm9A/H1Co6WuCMD5AKKdnq1J
7/m4Po1r6Cda1vb4bDSHmP/tp0d0mSqrqT3URDz+J+v33QpUZ2KtA2aQv8qNLufP
tPuGjp7CLiTsgtkfwZTnBAmI4kqS1WiJe1yx3icT9kZKKzpC2DymHuXYwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIznwbZ3eGSDscilCb/SSL5nXJdPMB8GA1UdIwQY
MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt
ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx
LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8eQntP8
fDl8xVuiNRH3NfPx2ThmLZnUW8FuWXfNOI16SmTnje7Gg35fpCftQq6cwRX3PG3m
zi5Ew1XURzD+TRgnhmHKn+1Kj5gYGmww19BPGJfyKmOnKTCCBCzKmQ/WXQdBzWP1
c+fbt6GyNidasLj/64HUK78ycSkA362TzLGYSdTmjHDNA1NNXRyaPrv8b3DfsFoG
9VNcNpi6bV4K4wHkqxygGfjuL0qj7XUfKvp7LN80H29Kw5C7UaWexJO+WgKyNAON
ajsnNO2Ww52Rx/vvcWKZEZK1sXBRSDCdKWnvlFRaOA4jE5LgX+6qE2fhNImLwlmx
+qPCstg4cArOIw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:49 2025 by rpki-client