Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: N26eav44Lw3rSFamJcasIBPCXega8NinVAeBhNJCywk=
Subject key identifier: 37:F8:ED:3A:1E:FA:C4:63:EB:B8:10:15:9B:3C:38:55:25:A4:4F:6C
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019A4DE1FC38268C054D13E904FC8A4E7B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 0409
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: vsCI+7nUTWx6QDp3ucwfdZt2a6p0TzYgSyM+PuT3T84=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fc:38:26:8c:05:4d:13:e9:04:fc:8a:4e:7b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=37f8ed3a1efac463ebb810159b3c385525a44f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:77:42:f4:da:ae:1a:d3:b6:78:e7:3e:93:
b4:1e:18:62:88:fe:69:08:32:99:3a:3c:0f:7c:dd:
61:8a:0c:83:f9:b9:70:9c:6f:a9:fd:75:7e:4d:99:
18:dc:b9:1f:6c:bd:90:d9:53:18:78:5d:b5:34:89:
7b:c5:d2:1b:1e:e4:77:2a:fa:a7:af:4a:b9:8b:2b:
97:7d:62:fe:60:59:4d:ea:2d:cb:8a:02:d1:3e:31:
da:aa:47:fd:da:f2:d0:76:03:f5:ed:7c:6b:68:8b:
c3:68:b9:c6:db:c0:45:5d:04:4a:75:88:b6:67:4c:
08:19:3b:2f:a6:80:05:c8:7b:db:7c:53:bc:1a:30:
1e:d7:36:a6:59:2b:77:ca:1d:cd:21:61:26:9e:7a:
58:09:31:54:ea:f7:0e:ae:84:f9:da:37:df:21:24:
b9:cb:a3:f9:03:f4:5f:60:f4:20:f5:1a:eb:dc:62:
c3:d0:6f:ff:b0:79:fa:4b:11:ae:9d:77:9e:9f:ff:
f4:11:22:0f:d0:62:34:54:5d:6f:9e:ae:93:77:82:
bb:3d:99:b0:63:d7:d5:5c:3c:17:cd:f4:2a:89:a7:
d1:a9:a9:43:bd:ef:f3:d6:6f:40:fc:f1:08:f1:a7:
fc:1d:9c:de:1d:5f:3c:2b:24:9c:1b:9e:e9:50:09:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:ED:3A:1E:FA:C4:63:EB:B8:10:15:9B:3C:38:55:25:A4:4F:6C
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:44:34:2c:fc:e6:a0:49:80:6c:4e:31:e5:dd:1b:7a:0f:11:
a6:b8:ee:f1:ea:08:1c:73:ac:93:19:6b:2b:66:ef:ee:7d:25:
50:e5:42:92:1b:82:23:d4:b5:c7:bb:cf:00:e8:ee:77:48:e3:
3c:f3:77:c9:23:a4:94:85:57:1e:a9:7d:b7:3c:39:d0:29:a2:
55:71:96:ed:22:69:76:a7:30:d2:70:08:e0:6b:8b:18:44:be:
63:60:e3:63:83:f9:50:57:5d:35:d6:01:33:cd:9b:86:6c:9d:
f8:0d:93:90:ce:ef:a4:54:0b:9d:ea:c7:e9:fb:90:2f:d3:0f:
1c:b4:7a:b0:f6:0e:97:0f:c7:36:63:24:8f:04:a3:92:f4:3c:
af:66:34:d0:f1:ec:00:c4:f6:d0:b7:be:0d:90:7d:04:85:ec:
57:42:2f:dc:a0:30:d1:15:60:89:9f:60:c9:67:ee:ba:b7:1d:
84:9e:63:c3:a8:00:45:28:60:c8:9c:d0:70:18:aa:5c:f2:68:
9f:01:63:4c:10:e8:00:57:d0:17:2f:4e:a5:5a:56:5d:e4:e4:
0a:4a:94:69:81:60:44:f9:16:f7:65:a0:b3:35:66:6d:56:9a:
16:1d:58:50:c7:c2:b4:fc:c0:64:a1:00:65:95:fa:9a:4a:0b:
e1:85:c9:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fw4JowFTRPpBPyKTnsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy
MDUzYjQwHhcNMjUxMTA0MDgwMDQ3WhcNMjUxMTA1MDgwMDQ3WjAzMTEwLwYDVQQD
EygzN2Y4ZWQzYTFlZmFjNDYzZWJiODEwMTU5YjNjMzg1NTI1YTQ0ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwd3QvTarhrTtnjnPpO0HhhiiP5p
CDKZOjwPfN1higyD+blwnG+p/XV+TZkY3LkfbL2Q2VMYeF21NIl7xdIbHuR3Kvqn
r0q5iyuXfWL+YFlN6i3LigLRPjHaqkf92vLQdgP17XxraIvDaLnG28BFXQRKdYi2
Z0wIGTsvpoAFyHvbfFO8GjAe1zamWSt3yh3NIWEmnnpYCTFU6vcOroT52jffISS5
y6P5A/RfYPQg9Rrr3GLD0G//sHn6SxGunXeen//0ESIP0GI0VF1vnq6Td4K7PZmw
Y9fVXDwXzfQqiafRqalDve/z1m9A/PEI8af8HZzeHV88KyScG57pUAmEVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf47Toe+sRj67gQFZs8OFUlpE9sMB8GA1UdIwQY
MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt
MzA2MjUzMTc0MzBkLzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk
LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0Q0LPzm
oEmAbE4x5d0beg8Rprju8eoIHHOskxlrK2bv7n0lUOVCkhuCI9S1x7vPAOjud0jj
PPN3ySOklIVXHql9tzw50CmiVXGW7SJpdqcw0nAI4GuLGES+Y2DjY4P5UFddNdYB
M82bhmyd+A2TkM7vpFQLnerH6fuQL9MPHLR6sPYOlw/HNmMkjwSjkvQ8r2Y00PHs
AMT20Le+DZB9BIXsV0Iv3KAw0RVgiZ9gyWfuurcdhJ5jw6gARShgyJzQcBiqXPJo
nwFjTBDoAFfQFy9OpVpWXeTkCkqUaYFgRPkW92WgszVmbVaaFh1YUMfCtPzAZKEA
ZZX6mkoL4YXJxg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:51 2025 by rpki-client