Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: lauM8AvrwES5/20+/+0Oj4KZLP8NnlMGr9BCrEi3C+c=
Subject key identifier: 9C:9B:59:AE:6E:6F:D2:18:79:FC:F9:F2:B2:91:C1:16:E8:9A:65:12
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 01987486FE490F3D3137547442A3329112E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 10:01:00 +0000
Manifest this update: Mon 04 Aug 2025 10:01:00 +0000
Manifest next update: Tue 05 Aug 2025 10:01:00 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: nQvNvsyV4Hd0ovgpOLOuAAdbAC+9hj5K4EAnEzOx6ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:fe:49:0f:3d:31:37:54:74:42:a3:32:91:12:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Aug 4 10:01:00 2025 GMT
Not After : Aug 5 10:01:00 2025 GMT
Subject: CN=9c9b59ae6e6fd21879fcf9f2b291c116e89a6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:0c:b1:a8:23:1b:d1:70:1d:f5:76:62:72:
11:2f:ac:af:9f:c1:28:18:32:bb:95:7a:e0:0c:c2:
98:ca:5e:09:9f:2d:b7:c6:13:36:15:67:b4:e8:d8:
e4:e2:9d:f6:e2:e2:37:8e:83:38:38:f7:c2:9e:e9:
bf:35:6a:67:f2:e9:6b:b1:30:74:25:6d:ca:28:68:
25:e1:12:e8:0f:c0:58:34:fe:f2:62:84:4f:e8:df:
78:9f:ee:e2:89:1a:15:75:6f:f4:68:e2:9a:9d:11:
d0:3e:47:26:b7:2c:e8:af:af:28:17:6b:a7:3a:4d:
7d:07:94:b8:d9:ee:12:52:1c:17:a7:34:74:1e:0f:
a2:0f:ba:19:9f:b9:30:87:74:f7:9a:69:e1:5d:5e:
dc:cd:15:8d:7f:fd:55:1c:63:26:55:c5:63:eb:de:
ac:29:9a:f9:d3:d9:a3:d0:6c:93:ff:11:c0:ff:22:
84:6b:dd:b5:70:81:24:86:c0:0e:ff:0a:08:90:f2:
ad:34:58:f7:61:cc:6f:e5:f4:7c:1f:ee:3a:25:a0:
f5:51:67:16:0b:e1:19:25:30:65:04:17:7e:ca:7b:
58:fb:20:8b:89:61:9d:e5:97:be:8e:c7:50:6c:02:
49:32:aa:74:f4:3a:8f:a1:db:3a:52:e9:62:1b:58:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:59:AE:6E:6F:D2:18:79:FC:F9:F2:B2:91:C1:16:E8:9A:65:12
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:ed:8e:be:c5:b8:01:2d:a4:41:33:23:11:41:90:7f:3a:
71:32:61:9c:f3:2c:a1:01:bd:db:a8:83:44:ca:ac:2a:21:51:
30:32:a2:35:6c:97:80:35:67:b3:bb:05:c0:90:52:19:7f:c0:
79:9a:cc:64:0d:d6:c1:47:f6:e3:2c:4e:6f:73:9b:0c:34:13:
53:25:ba:82:f6:a0:06:21:0f:86:4a:f7:68:7a:25:f5:b1:25:
ec:fd:00:10:f4:1a:ad:40:84:aa:38:ac:c1:95:47:5e:a3:6c:
0b:23:e1:01:00:ac:7f:f6:44:35:da:00:85:20:e2:da:52:0a:
7c:7a:28:2a:17:35:ba:af:e3:12:20:e0:b8:00:a5:d3:62:fb:
53:18:9c:46:70:a0:0b:33:59:b8:4f:8f:8f:69:89:cb:a2:1c:
5e:99:d8:4c:a5:4f:61:2d:30:28:88:3d:f0:6d:be:8f:0b:0a:
50:5d:7b:24:22:8c:7f:89:4b:b2:9d:bb:74:6c:ef:6b:e0:7c:
2d:55:1c:50:6a:b3:3f:97:b1:3a:b4:9b:0d:b6:ba:8a:22:d7:
72:4f:6e:53:93:c4:4a:d0:46:6a:5b:bc:82:7e:fe:d8:32:c1:
fb:6f:1f:5c:b7:2f:72:06:09:7f:66:e5:34:8f:50:9b:c8:c8:
10:35:40:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hv5JDz0xN1R0QqMykRLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDBiNjhiM2VjMTc5YjM1ZGNmZjVjNDY1ZGMyZDA0NjE5
OTI3NmUwHhcNMjUwODA0MTAwMTAwWhcNMjUwODA1MTAwMTAwWjAzMTEwLwYDVQQD
Eyg5YzliNTlhZTZlNmZkMjE4NzlmY2Y5ZjJiMjkxYzExNmU4OWE2NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqsMsagjG9FwHfV2YnIRL6yvn8Eo
GDK7lXrgDMKYyl4Jny23xhM2FWe06Njk4p324uI3joM4OPfCnum/NWpn8ulrsTB0
JW3KKGgl4RLoD8BYNP7yYoRP6N94n+7iiRoVdW/0aOKanRHQPkcmtyzor68oF2un
Ok19B5S42e4SUhwXpzR0Hg+iD7oZn7kwh3T3mmnhXV7czRWNf/1VHGMmVcVj696s
KZr509mj0GyT/xHA/yKEa921cIEkhsAO/woIkPKtNFj3Ycxv5fR8H+46JaD1UWcW
C+EZJTBlBBd+yntY+yCLiWGd5Ze+jsdQbAJJMqp09DqPods6UuliG1i4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJybWa5ub9IYefz58rKRwRbommUSMB8GA1UdIwQY
MBaAFETQtos+wXmzXc/1xGXcLQRhmSduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82NWQ2YTItYTIyYy00ZTllLWFjZGYt
OGUwYzZmZjAwYjc4LzEvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82NWQ2YTItYTIyYy00ZTllLWFjZGYtOGUwYzZmZjAwYjc4
LzEvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMntjr7F
uAEtpEEzIxFBkH86cTJhnPMsoQG926iDRMqsKiFRMDKiNWyXgDVns7sFwJBSGX/A
eZrMZA3WwUf24yxOb3ObDDQTUyW6gvagBiEPhkr3aHol9bEl7P0AEPQarUCEqjis
wZVHXqNsCyPhAQCsf/ZENdoAhSDi2lIKfHooKhc1uq/jEiDguACl02L7UxicRnCg
CzNZuE+Pj2mJy6IcXpnYTKVPYS0wKIg98G2+jwsKUF17JCKMf4lLsp27dGzva+B8
LVUcUGqzP5exOrSbDba6iiLXck9uU5PEStBGalu8gn7+2DLB+28fXLcvcgYJf2bl
NI9Qm8jIEDVAsQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:30 2025 by rpki-client