Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: ns71UzJhdzwWZzYadU2ossM42apgl8H1w9CKu257oOg=
Subject key identifier: 27:D7:91:BD:B9:88:7E:A6:80:FB:16:C5:24:F6:FA:49:1D:09:0F:B0
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019A4F9913AEBAE7C9D1B6728F8861BB004B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 101B
Signing time: Tue 04 Nov 2025 16:00:23 +0000
Manifest this update: Tue 04 Nov 2025 16:00:23 +0000
Manifest next update: Wed 05 Nov 2025 16:00:23 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: hA8Gxeok99AxPJCEJPnnyAj2gJXUC92f4RwaXc8aS1w=)
2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:13:ae:ba:e7:c9:d1:b6:72:8f:88:61:bb:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Nov 4 16:00:23 2025 GMT
Not After : Nov 5 16:00:23 2025 GMT
Subject: CN=27d791bdb9887ea680fb16c524f6fa491d090fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:01:80:09:1a:c0:d3:25:d4:50:86:5f:5e:
87:3a:54:59:86:02:28:9f:4e:28:99:6d:1f:fe:98:
fa:99:da:8d:25:09:c8:51:21:41:81:11:c0:a2:0f:
25:7c:41:0a:c5:c0:55:3c:28:17:91:73:23:bb:04:
23:e3:7e:78:b3:6a:c7:98:4c:8e:dc:43:e9:f1:d6:
87:77:b3:dc:dc:20:eb:bc:11:f3:fe:4d:2e:2e:2d:
f6:c2:a6:5f:f5:fe:4d:5c:b1:b9:00:0d:06:ac:4f:
48:0e:11:ae:5a:ec:ea:d1:6a:af:38:3b:d8:67:1c:
99:a3:9c:a7:e9:72:6a:11:b3:46:30:b4:20:60:1b:
11:0f:c1:41:75:cb:c8:1c:bf:76:b6:5b:84:54:e3:
f1:24:f3:d6:a9:01:27:cb:f3:a6:4a:95:9b:ee:3b:
9f:93:de:e1:81:cf:05:ae:5a:fe:64:03:e3:78:87:
93:0b:14:b0:57:43:c3:ca:93:0d:fb:37:ed:8a:d5:
ac:cd:d2:2f:c4:0b:69:13:29:50:d1:40:15:85:e4:
88:e3:b9:2b:ad:3e:9d:a8:e3:98:c4:8f:a0:f5:6c:
a9:ac:23:e5:e9:fa:d5:4a:c6:ca:5d:da:1e:2d:f5:
be:bf:0d:c0:35:fb:3f:be:29:a1:84:80:53:d8:ad:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:91:BD:B9:88:7E:A6:80:FB:16:C5:24:F6:FA:49:1D:09:0F:B0
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e9:ab:ac:0c:8a:0a:f5:94:79:14:ae:b9:af:9d:b2:53:55:
7c:c7:cc:9a:e5:52:e5:07:84:f2:c0:1a:0d:41:f3:fc:6c:b3:
2a:b8:af:c8:f3:ff:61:bc:2e:5a:01:38:a5:64:8d:10:16:90:
2c:bd:ad:be:35:85:3d:a5:f9:bd:40:7b:93:0f:3d:39:8b:2f:
64:b6:2d:98:db:94:fb:9f:c9:f5:c7:b9:a1:54:8c:cd:60:41:
4b:cd:48:32:af:0e:10:fa:e3:ac:5a:3d:f5:84:1e:3b:76:90:
4e:68:ed:bb:e9:54:df:2f:c7:bf:23:25:6e:65:20:21:fc:eb:
ce:3d:c0:77:c3:79:43:e3:01:2e:a4:63:b3:ce:4a:7d:01:d5:
0f:eb:d7:89:19:03:25:b8:eb:ad:0c:c2:3a:b2:86:46:d8:ab:
9a:15:0f:0f:f2:e7:75:6f:2b:ab:4f:73:5a:10:ad:ee:32:2b:
c9:09:47:f5:1b:5c:04:15:d4:6b:0c:ba:b5:8f:80:61:9b:3d:
19:be:7b:53:7f:0a:fc:c9:19:d3:7c:0d:93:e6:72:e6:2a:23:
95:61:30:d4:b1:c0:4c:25:76:67:f0:f6:8f:44:82:26:1a:ed:
27:5b:80:e7:f7:60:28:b9:4d:6c:c5:ca:c4:18:6b:91:2d:6d:
2c:a5:89:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmROuuufJ0bZyj4hhuwBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1
ZjlmYTYwHhcNMjUxMTA0MTYwMDIzWhcNMjUxMTA1MTYwMDIzWjAzMTEwLwYDVQQD
EygyN2Q3OTFiZGI5ODg3ZWE2ODBmYjE2YzUyNGY2ZmE0OTFkMDkwZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ4BgAkawNMl1FCGX16HOlRZhgIo
n04omW0f/pj6mdqNJQnIUSFBgRHAog8lfEEKxcBVPCgXkXMjuwQj4354s2rHmEyO
3EPp8daHd7Pc3CDrvBHz/k0uLi32wqZf9f5NXLG5AA0GrE9IDhGuWuzq0WqvODvY
ZxyZo5yn6XJqEbNGMLQgYBsRD8FBdcvIHL92tluEVOPxJPPWqQEny/OmSpWb7juf
k97hgc8Frlr+ZAPjeIeTCxSwV0PDypMN+zftitWszdIvxAtpEylQ0UAVheSI47kr
rT6dqOOYxI+g9WyprCPl6frVSsbKXdoeLfW+vw3ANfs/vimhhIBT2K37ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfXkb25iH6mgPsWxST2+kkdCQ+wMB8GA1UdIwQY
MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt
ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi
LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+mrrAyK
CvWUeRSuua+dslNVfMfMmuVS5QeE8sAaDUHz/GyzKrivyPP/YbwuWgE4pWSNEBaQ
LL2tvjWFPaX5vUB7kw89OYsvZLYtmNuU+5/J9ce5oVSMzWBBS81IMq8OEPrjrFo9
9YQeO3aQTmjtu+lU3y/HvyMlbmUgIfzrzj3Ad8N5Q+MBLqRjs85KfQHVD+vXiRkD
JbjrrQzCOrKGRtirmhUPD/LndW8rq09zWhCt7jIryQlH9RtcBBXUawy6tY+AYZs9
Gb57U38K/MkZ03wNk+Zy5iojlWEw1LHATCV2Z/D2j0SCJhrtJ1uA5/dgKLlNbMXK
xBhrkS1tLKWJ6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:44 2025 by rpki-client