Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: TEIlDLWfHU/vSTKfl0qoT3x3zYybGpglYh79pljUhsk=
Subject key identifier: 1B:C2:CD:61:D0:4F:6D:59:08:03:E5:A7:2B:FF:D9:9F:66:E9:12:47
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0198917EB17C875216C9CCD9C55FA98A8D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 044C
Signing time: Sun 10 Aug 2025 01:00:55 +0000
Manifest this update: Sun 10 Aug 2025 01:00:55 +0000
Manifest next update: Mon 11 Aug 2025 01:00:55 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: VVVYWMOsShXgXk2VM2Lv6zzzXdHIcGkNsXOXS1WCKHo=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:b1:7c:87:52:16:c9:cc:d9:c5:5f:a9:8a:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Aug 10 01:00:55 2025 GMT
Not After : Aug 11 01:00:55 2025 GMT
Subject: CN=1bc2cd61d04f6d590803e5a72bffd99f66e91247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:f5:b9:9c:7b:54:bb:73:c6:15:a9:56:31:
44:14:42:30:c5:22:77:d0:c2:12:8a:fa:4f:e6:cd:
6e:4c:30:f8:30:55:eb:91:ef:52:43:1f:89:a0:e9:
9c:02:c6:88:9c:bb:54:51:e9:44:dc:17:ae:05:07:
ed:fc:22:20:fe:41:12:7c:c6:b2:58:27:bb:c3:93:
a9:22:d9:38:bf:49:c9:1c:71:af:b0:c1:1a:4b:ac:
ee:52:64:e3:f5:0e:3a:f8:f6:03:32:0f:10:de:d1:
7c:3a:7d:19:e0:05:12:08:48:09:06:e4:b6:29:01:
85:01:ba:d5:33:84:85:69:cf:e9:b6:2c:8e:83:3f:
a0:e7:87:c9:d8:59:c5:96:60:73:4a:f8:95:e6:0a:
31:7f:46:ca:e6:fe:cc:e5:fe:6a:80:67:d7:1d:3c:
22:f6:52:bf:25:f5:2b:db:cd:94:53:8f:3a:86:08:
60:85:8b:77:fb:7e:01:5b:71:72:fe:81:3d:6f:c4:
d0:09:e3:b0:11:0b:58:8d:0b:ae:67:10:ea:78:06:
a9:5c:fa:75:20:00:7e:b0:be:4d:7f:e6:89:36:5a:
51:47:73:db:e1:e2:ba:3f:34:57:cb:e7:9c:97:37:
76:c7:8a:ed:1a:34:6f:e1:5a:80:8f:68:f6:b2:98:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:CD:61:D0:4F:6D:59:08:03:E5:A7:2B:FF:D9:9F:66:E9:12:47
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8f:5b:1b:87:95:c6:23:ba:49:10:40:88:8e:a2:35:93:aa:
5a:6e:a6:d9:46:d2:08:41:11:21:bd:bb:f4:d3:f1:42:b0:3f:
f9:0b:71:d1:b4:d1:29:42:12:d0:0d:e9:2a:f7:e3:70:35:1c:
b7:5b:f7:e1:8b:64:bb:a3:fb:2c:b4:71:84:e6:8a:1a:cb:16:
6e:7b:b9:ad:76:b3:ac:e4:99:f0:19:33:f4:33:5b:ef:b7:ce:
6b:55:5f:fe:f2:d6:a7:e8:cc:39:43:8b:40:ac:12:e9:9e:4b:
63:c3:d1:fb:d0:27:3a:91:c7:ab:db:ce:c7:32:9e:9a:cd:47:
cd:b3:92:fe:8a:f1:8e:4e:9f:f8:48:39:64:6a:48:9b:df:53:
08:dc:d2:41:c8:da:e3:8d:fa:58:2a:f4:f8:09:54:c2:80:a0:
57:f2:ed:49:98:83:f6:27:c7:5e:32:d6:a5:c5:b1:34:5c:70:
c2:7e:d4:e4:3b:98:72:9b:61:05:4c:3d:b5:5c:62:95:c9:22:
03:9d:cf:72:46:00:5f:b7:f8:7e:38:21:95:76:57:d7:ad:b6:
2e:7d:8a:b0:f5:c7:0f:72:00:2a:c1:91:80:6f:ad:dc:e1:13:
55:f3:cb:40:39:f8:98:91:2e:5b:22:35:de:56:9d:7c:d7:49:
82:40:ea:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRfrF8h1IWyczZxV+pio1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjUwODEwMDEwMDU1WhcNMjUwODExMDEwMDU1WjAzMTEwLwYDVQQD
EygxYmMyY2Q2MWQwNGY2ZDU5MDgwM2U1YTcyYmZmZDk5ZjY2ZTkxMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pr1uZx7VLtzxhWpVjFEFEIwxSJ3
0MISivpP5s1uTDD4MFXrke9SQx+JoOmcAsaInLtUUelE3BeuBQft/CIg/kESfMay
WCe7w5OpItk4v0nJHHGvsMEaS6zuUmTj9Q46+PYDMg8Q3tF8On0Z4AUSCEgJBuS2
KQGFAbrVM4SFac/ptiyOgz+g54fJ2FnFlmBzSviV5goxf0bK5v7M5f5qgGfXHTwi
9lK/JfUr282UU486hghghYt3+34BW3Fy/oE9b8TQCeOwEQtYjQuuZxDqeAapXPp1
IAB+sL5Nf+aJNlpRR3Pb4eK6PzRXy+eclzd2x4rtGjRv4VqAj2j2sphWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvCzWHQT21ZCAPlpyv/2Z9m6RJHMB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACI9bG4eV
xiO6SRBAiI6iNZOqWm6m2UbSCEERIb279NPxQrA/+Qtx0bTRKUIS0A3pKvfjcDUc
t1v34Ytku6P7LLRxhOaKGssWbnu5rXazrOSZ8Bkz9DNb77fOa1Vf/vLWp+jMOUOL
QKwS6Z5LY8PR+9AnOpHHq9vOxzKems1HzbOS/orxjk6f+Eg5ZGpIm99TCNzSQcja
4436WCr0+AlUwoCgV/LtSZiD9ifHXjLWpcWxNFxwwn7U5DuYcpthBUw9tVxilcki
A53PckYAX7f4fjghlXZX1622Ln2KsPXHD3IAKsGRgG+t3OETVfPLQDn4mJEuWyI1
3ladfNdJgkDqqg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:50:33 2025 by rpki-client