Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: 96VOIFVpTteJ1FmXpfsxao3xN+Y/Z9CygyOSmgSVADg=
Subject key identifier: 55:46:65:D0:52:3F:50:E1:43:FB:09:36:6D:8A:A5:3C:7C:8C:E2:2A
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 0198D66006BDF647AA78A8DF6C1587BCE47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: I5DttOD7tTgCR62aMhF0isaZ5xAlO1Tuu+IS0We2ibM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:06:bd:f6:47:aa:78:a8:df:6c:15:87:bc:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=554665d0523f50e143fb09366d8aa53c7c8ce22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:de:4a:ac:77:c6:e5:09:b2:85:ac:cd:ee:
f0:71:44:ff:74:4a:f3:52:83:5b:d5:c4:59:d5:55:
9a:86:33:cb:fe:9c:a8:dd:f9:56:a9:9e:51:f5:4d:
f1:83:f8:18:2c:2c:24:67:47:7a:bc:8c:6f:72:dc:
af:ee:6c:1b:12:e1:90:5b:f8:35:2d:33:6d:32:4a:
d5:a3:8c:9f:28:2a:d6:67:9e:50:9e:a3:71:1b:2a:
3e:7d:a1:51:ef:ac:7e:6b:e8:6b:92:08:28:d2:e3:
f8:d3:a1:db:3b:6f:ff:f0:05:86:78:7e:09:38:e3:
3e:9e:5d:bb:e0:cb:f2:70:4b:0c:74:c2:a1:4d:f4:
99:d9:c4:ee:70:57:c1:e6:67:8e:71:81:75:20:84:
33:e4:bb:54:56:12:da:bb:74:55:d5:30:9f:4e:5e:
90:0b:d4:d9:fb:b2:8c:7c:5d:ab:79:1e:e3:05:f3:
d9:33:bd:4d:e3:13:b4:be:26:f9:1b:5a:8b:54:30:
c6:8b:8a:db:89:94:d6:8d:6d:a9:57:97:8f:59:0a:
34:4a:00:94:4c:fd:0b:a0:85:31:1a:77:9c:8c:df:
ad:f8:ea:d1:05:cc:63:b5:2a:e1:79:a2:d2:25:cb:
aa:29:d8:f9:89:26:56:f0:41:2a:8b:84:e8:a7:d6:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:65:D0:52:3F:50:E1:43:FB:09:36:6D:8A:A5:3C:7C:8C:E2:2A
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:da:c4:51:9e:50:ef:99:ed:f8:35:0b:fb:0d:a3:a2:4f:79:
8e:58:02:d0:35:21:43:b7:08:17:d5:ef:41:db:24:0e:a8:f5:
d8:17:78:5a:bd:05:cb:d4:82:28:ac:21:4a:cf:1f:cf:af:46:
bc:c0:48:99:e3:bf:cf:85:40:fb:16:a9:44:35:80:95:04:77:
04:83:81:e8:0c:15:44:20:6e:bb:89:c4:31:ef:19:c2:a7:e3:
95:c9:7c:ad:29:6a:3f:62:74:a9:68:8f:d1:df:c4:6c:b1:95:
ee:d9:c2:23:ae:36:c2:93:32:a2:e8:4b:61:49:7e:44:53:d3:
10:46:7f:0e:c8:8d:5f:7a:9c:64:45:7a:cc:06:72:63:2d:dc:
ee:b6:5c:93:4a:04:99:b3:a2:51:bd:31:f5:e2:6f:04:05:6b:
59:57:9c:ba:55:9d:45:db:fb:af:ad:49:64:c8:52:8a:23:17:
b5:0c:77:9f:f8:67:44:9b:9d:5b:8b:6d:b1:f7:9f:83:fd:6e:
ff:07:a7:2b:2f:f7:65:34:4a:ef:e2:05:e1:61:0e:d2:6d:ba:
b8:34:4a:ff:0a:50:b8:19:15:f4:54:09:d8:25:9c:97:5a:13:
9f:73:2b:18:5a:ee:c7:36:17:1e:c3:c6:cb:62:12:64:12:f7:
7b:32:06:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAa99keqeKjfbBWHvOR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjUwODIzMTAwMTE0WhcNMjUwODI0MTAwMTE0WjAzMTEwLwYDVQQD
Eyg1NTQ2NjVkMDUyM2Y1MGUxNDNmYjA5MzY2ZDhhYTUzYzdjOGNlMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA3eSqx3xuUJsoWsze7wcUT/dErz
UoNb1cRZ1VWahjPL/pyo3flWqZ5R9U3xg/gYLCwkZ0d6vIxvctyv7mwbEuGQW/g1
LTNtMkrVo4yfKCrWZ55QnqNxGyo+faFR76x+a+hrkggo0uP406HbO2//8AWGeH4J
OOM+nl274MvycEsMdMKhTfSZ2cTucFfB5meOcYF1IIQz5LtUVhLau3RV1TCfTl6Q
C9TZ+7KMfF2reR7jBfPZM71N4xO0vib5G1qLVDDGi4rbiZTWjW2pV5ePWQo0SgCU
TP0LoIUxGnecjN+t+OrRBcxjtSrheaLSJcuqKdj5iSZW8EEqi4Top9ZxuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVGZdBSP1DhQ/sJNm2KpTx8jOIqMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtrEUZ5Q
75nt+DUL+w2jok95jlgC0DUhQ7cIF9XvQdskDqj12Bd4Wr0Fy9SCKKwhSs8fz69G
vMBImeO/z4VA+xapRDWAlQR3BIOB6AwVRCBuu4nEMe8Zwqfjlcl8rSlqP2J0qWiP
0d/EbLGV7tnCI642wpMyouhLYUl+RFPTEEZ/DsiNX3qcZEV6zAZyYy3c7rZck0oE
mbOiUb0x9eJvBAVrWVeculWdRdv7r61JZMhSiiMXtQx3n/hnRJudW4ttsfefg/1u
/wenKy/3ZTRK7+IF4WEO0m26uDRK/wpQuBkV9FQJ2CWcl1oTn3MrGFruxzYXHsPG
y2ISZBL3ezIG8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:02 2025 by rpki-client