Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: B9iIwCI5Lr0wMxUxdn6BAm3X6FGDq1kp4gw1ZTPu+jA=
Subject key identifier: 4F:85:4D:14:88:80:4B:91:D1:6A:3A:59:20:F6:79:E7:CB:B1:3A:0F
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019A4E4F8F55C377C6349DBA1F1829B13DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 128C
Signing time: Tue 04 Nov 2025 10:00:28 +0000
Manifest this update: Tue 04 Nov 2025 10:00:28 +0000
Manifest next update: Wed 05 Nov 2025 10:00:28 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: LY8j6K28fxbRB+EhYrlLoyxKR4X1OmAl9OU6UEMYkBg=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8f:55:c3:77:c6:34:9d:ba:1f:18:29:b1:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Nov 4 10:00:28 2025 GMT
Not After : Nov 5 10:00:28 2025 GMT
Subject: CN=4f854d1488804b91d16a3a5920f679e7cbb13a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:20:19:d2:09:9c:53:65:6c:5f:62:bc:50:
03:7c:ff:6e:c5:86:e2:e0:ae:dc:b5:d4:d1:cf:99:
18:e4:32:18:a9:2e:9c:74:44:5b:90:f3:45:90:41:
93:cb:fd:bd:4a:58:0a:4d:ed:f6:ea:ba:41:34:86:
89:4f:25:c4:a7:ee:b9:50:ef:18:84:33:8e:f2:3f:
8d:35:2e:da:16:22:dd:33:08:a2:18:77:3b:78:7d:
3b:cb:70:30:f2:fb:d1:24:c8:b4:a5:96:ec:08:38:
58:0d:b5:c9:d1:03:d2:e3:ff:a1:1a:19:8c:f9:9d:
6e:58:96:37:d9:58:4f:7f:df:82:18:55:76:92:89:
86:27:2d:0f:2f:76:95:f5:49:55:dc:b1:d2:18:3f:
de:fd:ed:5e:db:3e:79:ca:29:4e:32:71:20:3e:68:
69:5f:78:af:14:43:b3:2a:8a:34:4a:b1:b5:18:84:
8f:0c:3a:6f:57:6d:2b:c9:d5:a6:38:f1:77:06:9e:
09:e9:c7:ed:11:04:1e:40:e0:7b:fa:1a:a4:48:0f:
8e:4a:fd:75:50:f1:3d:8b:9c:be:87:48:74:2f:89:
0a:9e:ac:b5:ea:f9:f4:a1:23:53:05:f9:ef:3a:1c:
c9:fc:71:e7:0f:a0:fb:12:5c:8b:f6:f5:c9:24:22:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:4D:14:88:80:4B:91:D1:6A:3A:59:20:F6:79:E7:CB:B1:3A:0F
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:80:ba:d1:a8:08:b5:2f:d5:de:c1:38:4d:42:a6:7d:ff:3a:
da:ef:b0:4b:09:5e:8b:5d:1a:91:e9:87:df:b6:b9:95:3e:d9:
c8:c6:8c:c8:a1:da:ac:2a:09:62:9b:ea:03:e1:3a:d9:5e:c0:
74:95:d7:42:c9:88:7c:3e:84:f1:6f:79:5e:2c:6b:29:60:70:
60:91:f0:72:29:2d:f1:3b:19:23:ca:71:ca:a4:2e:44:c4:76:
22:a0:88:f8:18:fe:d2:3b:9f:d5:11:38:e7:39:c0:49:7d:fa:
ee:33:be:d2:7c:8a:72:9b:ff:42:ec:3f:06:f6:4c:ed:5a:fa:
e1:c7:40:15:30:5c:f4:c0:cc:5d:c0:03:0b:f7:b5:b7:e4:81:
f7:dc:b7:aa:b3:ad:3c:78:82:8f:be:d5:7d:24:a7:d1:7f:bb:
a4:ee:1d:1f:8b:d9:88:8a:95:90:f4:69:12:00:08:61:a6:b3:
57:7d:05:5a:3b:56:f3:98:67:92:d8:c0:a6:cb:0b:55:85:60:
90:47:e3:56:d5:1b:f0:13:00:8f:05:af:ce:e0:43:10:31:a5:
27:be:b7:41:e0:15:40:a4:b3:5e:75:fa:13:b0:44:34:c1:ca:
ec:3f:1f:04:6c:77:3a:87:45:cd:8b:d0:90:f3:59:38:78:2e:
25:00:5a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT49Vw3fGNJ26HxgpsT3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjUxMTA0MTAwMDI4WhcNMjUxMTA1MTAwMDI4WjAzMTEwLwYDVQQD
Eyg0Zjg1NGQxNDg4ODA0YjkxZDE2YTNhNTkyMGY2NzllN2NiYjEzYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIAgGdIJnFNlbF9ivFADfP9uxYbi
4K7ctdTRz5kY5DIYqS6cdERbkPNFkEGTy/29SlgKTe326rpBNIaJTyXEp+65UO8Y
hDOO8j+NNS7aFiLdMwiiGHc7eH07y3Aw8vvRJMi0pZbsCDhYDbXJ0QPS4/+hGhmM
+Z1uWJY32VhPf9+CGFV2komGJy0PL3aV9UlV3LHSGD/e/e1e2z55yilOMnEgPmhp
X3ivFEOzKoo0SrG1GISPDDpvV20rydWmOPF3Bp4J6cftEQQeQOB7+hqkSA+OSv11
UPE9i5y+h0h0L4kKnqy16vn0oSNTBfnvOhzJ/HHnD6D7ElyL9vXJJCLDSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+FTRSIgEuR0Wo6WSD2eefLsToPMB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4C60agI
tS/V3sE4TUKmff862u+wSwlei10akemH37a5lT7ZyMaMyKHarCoJYpvqA+E62V7A
dJXXQsmIfD6E8W95XixrKWBwYJHwcikt8TsZI8pxyqQuRMR2IqCI+Bj+0juf1RE4
5znASX367jO+0nyKcpv/Quw/BvZM7Vr64cdAFTBc9MDMXcADC/e1t+SB99y3qrOt
PHiCj77VfSSn0X+7pO4dH4vZiIqVkPRpEgAIYaazV30FWjtW85hnktjApssLVYVg
kEfjVtUb8BMAjwWvzuBDEDGlJ763QeAVQKSzXnX6E7BENMHK7D8fBGx3OodFzYvQ
kPNZOHguJQBaJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:37 2025 by rpki-client