Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: Z3RLhwj71rwc0UNYpqehBzPicjVtmGlyFXJr7tpZZEc=
Subject key identifier: 27:92:F3:7A:6F:B1:2D:EC:57:D3:D2:ED:F9:2A:01:A0:3C:D6:0A:44
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019A4DE210846744063E482B24DEADEEFCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 13E8
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: OfJus/yJpL6rQ7Ti6A+lNj/F1fr1ll4++if1p+GX3EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:10:84:67:44:06:3e:48:2b:24:de:ad:ee:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=2792f37a6fb12dec57d3d2edf92a01a03cd60a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:2b:76:e1:f5:7f:ad:07:87:f8:4f:48:6c:
b3:73:0d:04:ec:6f:9d:57:47:62:78:1b:95:f9:29:
62:56:85:71:f8:65:aa:05:29:26:81:27:d6:56:10:
19:94:f1:48:63:7f:a3:3b:06:b0:59:cb:f4:26:0c:
18:a5:a6:15:5d:d6:77:af:48:ea:ab:e8:4e:9f:38:
59:42:3d:85:2a:cc:78:4e:2d:40:12:d8:76:12:e0:
9f:b4:57:3e:1d:c6:b7:d4:9c:8e:54:61:89:3a:a0:
9c:cd:9c:64:a1:1e:6e:96:77:5f:50:84:28:14:72:
a0:f4:b4:ad:cf:80:be:15:8f:12:3a:d3:df:66:32:
93:45:73:48:9b:4f:32:1a:07:3e:04:c9:04:80:8b:
19:32:37:fe:ce:72:fc:5a:63:f8:87:15:98:97:34:
5e:cf:58:c5:51:8d:df:16:e4:18:92:46:c6:0a:a5:
39:6f:ef:30:9c:58:de:7c:7d:99:00:2c:9f:26:74:
eb:c1:ac:97:6d:89:16:73:17:9c:75:92:4f:27:70:
fc:f9:e0:3b:2a:e5:b2:a4:69:34:c0:18:23:02:55:
dd:b4:93:ef:d4:ea:17:1e:1b:71:69:ae:72:da:93:
4c:87:1d:b8:a6:0a:a7:2c:ec:af:f0:7a:2f:8c:3d:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:F3:7A:6F:B1:2D:EC:57:D3:D2:ED:F9:2A:01:A0:3C:D6:0A:44
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:25:02:59:b0:1e:86:83:8d:ef:6c:bc:c1:eb:7c:95:2f:fb:
8c:1c:2c:ee:31:4c:54:59:91:6a:ff:75:73:8c:b6:d9:fb:db:
3e:2f:db:52:39:f6:70:ab:4a:fb:69:94:7d:6b:78:99:33:b0:
19:29:b4:1f:65:de:9a:92:94:63:a5:f7:c7:d3:1e:1a:12:1c:
fd:01:4d:25:39:b7:57:4c:7b:09:ce:22:18:a3:24:de:3c:42:
f2:f8:a9:b5:d9:da:96:34:e6:80:01:b0:52:21:7b:d9:5e:31:
a4:7b:37:f0:83:0d:bc:3e:44:e7:7f:19:05:7f:08:bd:97:7f:
08:53:3c:c6:ab:8b:58:ab:6a:c4:e9:33:eb:97:ae:50:6c:3a:
02:a6:31:94:7f:ae:ce:ae:18:b7:a1:ad:e4:23:6c:a7:d3:98:
02:57:f0:1b:9a:3c:38:59:20:fb:35:8e:3a:9e:e0:d6:7e:d2:
2d:8f:a4:de:59:20:85:3f:46:db:cd:0d:7e:7f:5d:42:03:4c:
d2:a0:6d:03:1f:fc:bc:67:2c:97:04:b0:c8:52:86:ee:e7:9a:
64:c4:3a:0d:f5:15:d9:3e:74:69:9f:a2:d7:fb:86:f4:e1:14:
33:83:90:0b:6b:dd:ae:21:43:38:9d:7c:15:5c:ed:31:46:9a:
90:42:b8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hCEZ0QGPkgrJN6t7vyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NGEwNTc0N2VmODhhMmViYzlmMmZhZWY2MjAxOWRjODdk
MWEyNTMwHhcNMjUxMTA0MDgwMDUyWhcNMjUxMTA1MDgwMDUyWjAzMTEwLwYDVQQD
EygyNzkyZjM3YTZmYjEyZGVjNTdkM2QyZWRmOTJhMDFhMDNjZDYwYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjwrduH1f60Hh/hPSGyzcw0E7G+d
V0dieBuV+SliVoVx+GWqBSkmgSfWVhAZlPFIY3+jOwawWcv0JgwYpaYVXdZ3r0jq
q+hOnzhZQj2FKsx4Ti1AEth2EuCftFc+Hca31JyOVGGJOqCczZxkoR5ulndfUIQo
FHKg9LStz4C+FY8SOtPfZjKTRXNIm08yGgc+BMkEgIsZMjf+znL8WmP4hxWYlzRe
z1jFUY3fFuQYkkbGCqU5b+8wnFjefH2ZACyfJnTrwayXbYkWcxecdZJPJ3D8+eA7
KuWypGk0wBgjAlXdtJPv1OoXHhtxaa5y2pNMhx24pgqnLOyv8HovjD17+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeS83pvsS3sV9PS7fkqAaA81gpEMB8GA1UdIwQY
MBaAFAhKBXR++IouvJ8vrvYgGdyH0aJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAt
M2JkM2UzZTRhNDBiLzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAtM2JkM2UzZTRhNDBi
LzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiUCWbAe
hoON72y8wet8lS/7jBws7jFMVFmRav91c4y22fvbPi/bUjn2cKtK+2mUfWt4mTOw
GSm0H2XempKUY6X3x9MeGhIc/QFNJTm3V0x7Cc4iGKMk3jxC8viptdnaljTmgAGw
UiF72V4xpHs38IMNvD5E538ZBX8IvZd/CFM8xquLWKtqxOkz65euUGw6AqYxlH+u
zq4Yt6Gt5CNsp9OYAlfwG5o8OFkg+zWOOp7g1n7SLY+k3lkghT9G280Nfn9dQgNM
0qBtAx/8vGcslwSwyFKG7ueaZMQ6DfUV2T50aZ+i1/uG9OEUM4OQC2vdriFDOJ18
FVztMUaakEK4ww==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:43 2025 by rpki-client