
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: BhHwygAQIeGCs8QsgqwrI/GCOJ88wTsXsNJwF2kZHGs=
Subject key identifier: 14:55:5D:AA:1A:C2:C6:C7:13:D1:56:E0:5C:57:27:80:31:00:2C:A6
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 0198820BCCE597871C85BE6E9F55F96528C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 057A
Signing time: Thu 07 Aug 2025 01:01:08 +0000
Manifest this update: Thu 07 Aug 2025 01:01:08 +0000
Manifest next update: Fri 08 Aug 2025 01:01:08 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: xwcgo7EKMlmsCnasngxg/BNqyetgSEZHAAayT6VOHSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:cc:e5:97:87:1c:85:be:6e:9f:55:f9:65:28:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Aug 7 01:01:08 2025 GMT
Not After : Aug 8 01:01:08 2025 GMT
Subject: CN=14555daa1ac2c6c713d156e05c57278031002ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:59:73:74:fc:de:6d:c2:9a:0f:14:c6:82:
4b:08:a8:a5:30:b8:3e:84:90:46:27:db:00:ad:c9:
02:67:9c:99:02:6e:a1:9c:0e:c6:c3:ab:45:8e:89:
84:ed:28:4e:fe:9e:f4:40:5b:28:62:25:ce:c1:80:
9f:ae:eb:9b:d3:28:0e:13:1b:a5:bb:4b:4d:2c:1a:
13:a9:ce:87:83:8c:5e:62:3d:08:35:96:34:3d:5e:
7f:a2:f3:66:97:41:00:e6:2b:51:85:09:dc:16:06:
89:ca:b2:90:3a:cc:fc:35:0b:49:a9:15:5b:f3:e8:
f8:0b:c8:02:8d:71:da:f4:11:b2:b6:e5:47:51:eb:
cb:0a:c9:f4:ce:6c:2f:a0:ee:f2:24:68:8b:fe:82:
72:a3:ad:da:1b:3a:b3:cc:ef:3b:6f:63:d9:87:46:
cf:3b:a8:31:3b:e7:30:4f:42:4c:c2:8d:3f:14:bd:
ab:61:31:d1:2c:1c:af:90:74:69:64:4c:cd:c1:c9:
5b:d6:26:48:34:b2:94:ae:4a:4f:73:ad:69:7c:1a:
6a:54:b9:37:fd:d6:19:a6:e9:68:c2:5f:13:b6:c0:
5a:1c:aa:1c:f6:fa:c6:3a:6d:45:d2:d0:af:ec:72:
2a:3e:31:b2:0d:06:ce:c4:12:80:18:68:49:b2:06:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:5D:AA:1A:C2:C6:C7:13:D1:56:E0:5C:57:27:80:31:00:2C:A6
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:14:c8:8b:29:56:40:ce:ba:35:1b:f8:d3:07:fe:04:80:0d:
bc:57:20:63:e0:8a:9a:68:11:96:b6:6f:ae:0d:2f:69:73:a3:
8a:ca:b0:3d:4b:11:0e:5d:06:e3:24:9a:02:15:1a:1d:ac:fd:
42:12:2f:72:9c:c5:e7:cd:6e:74:44:eb:dc:be:08:8b:2e:21:
0d:f9:c1:28:38:38:94:3c:e9:90:75:db:f0:50:62:55:9c:ea:
98:b0:ed:62:bf:69:87:5a:bf:69:5d:ea:e9:57:39:84:90:a9:
95:1e:c5:0b:03:6e:68:4b:62:19:c6:56:a3:91:2a:16:a3:86:
08:22:97:89:6b:6b:b6:ee:56:c9:3d:fa:a4:fc:d0:04:4e:a9:
6b:e1:22:d7:60:ad:22:a1:0e:ea:d6:5a:a6:f2:c3:bb:88:e6:
b9:c1:e5:ad:d1:0b:12:d9:20:4a:5f:2d:43:3b:cc:9a:71:da:
e7:c4:ee:9e:f9:1e:88:26:4e:e3:d6:59:d5:1c:48:5b:92:ff:
7d:39:12:fa:da:18:c3:7a:fc:69:18:d4:e5:8d:d4:5f:a5:3a:
d5:76:a0:14:0a:45:44:34:02:a7:ed:f3:38:64:29:fa:54:35:
d7:80:01:2a:39:2e:58:e4:3b:cc:2e:8c:bc:94:69:32:e9:8e:
d8:b0:89:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC8zll4cchb5un1X5ZSjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzNjZGFjYzFlMjhmMDIxM2RmYjI4ZjNkZmQ4YjljYmRk
M2M2MmUwHhcNMjUwODA3MDEwMTA4WhcNMjUwODA4MDEwMTA4WjAzMTEwLwYDVQQD
EygxNDU1NWRhYTFhYzJjNmM3MTNkMTU2ZTA1YzU3Mjc4MDMxMDAyY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkxZc3T83m3Cmg8UxoJLCKilMLg+
hJBGJ9sArckCZ5yZAm6hnA7Gw6tFjomE7ShO/p70QFsoYiXOwYCfruub0ygOExul
u0tNLBoTqc6Hg4xeYj0INZY0PV5/ovNml0EA5itRhQncFgaJyrKQOsz8NQtJqRVb
8+j4C8gCjXHa9BGytuVHUevLCsn0zmwvoO7yJGiL/oJyo63aGzqzzO87b2PZh0bP
O6gxO+cwT0JMwo0/FL2rYTHRLByvkHRpZEzNwclb1iZINLKUrkpPc61pfBpqVLk3
/dYZpulowl8TtsBaHKoc9vrGOm1F0tCv7HIqPjGyDQbOxBKAGGhJsgYm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRVXaoawsbHE9FW4FxXJ4AxACymMB8GA1UdIwQY
MBaAFHJzzazB4o8CE9+yjz39i5y908YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjIt
YzBhMjViMTA5MDJhLzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjItYzBhMjViMTA5MDJh
LzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhTIiylW
QM66NRv40wf+BIANvFcgY+CKmmgRlrZvrg0vaXOjisqwPUsRDl0G4ySaAhUaHaz9
QhIvcpzF581udETr3L4Iiy4hDfnBKDg4lDzpkHXb8FBiVZzqmLDtYr9ph1q/aV3q
6Vc5hJCplR7FCwNuaEtiGcZWo5EqFqOGCCKXiWtrtu5WyT36pPzQBE6pa+Ei12Ct
IqEO6tZapvLDu4jmucHlrdELEtkgSl8tQzvMmnHa58TunvkeiCZO49ZZ1RxIW5L/
fTkS+toYw3r8aRjU5Y3UX6U61XagFApFRDQCp+3zOGQp+lQ114ABKjkuWOQ7zC6M
vJRpMumO2LCJAw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:23 2025 by rpki-client