Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier: LAqZ0X6eKFZCU2QnI1o65e/H/TVaUl0hX3rj9+LyA1k=
Subject key identifier: 12:E8:BE:C2:4F:7B:D6:BE:D2:8F:1A:23:D5:50:15:75:EC:7C:42:90
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 019A4EF434DC421AA2871E828B6FDB011D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number: 045C
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: cXRaKVgGlkYP9jXIfgV8jnYQrdfrGI63fbWHnrMZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:34:dc:42:1a:a2:87:1e:82:8b:6f:db:01:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=12e8bec24f7bd6bed28f1a23d5501575ec7c4290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:f2:fb:65:81:d4:16:93:82:a6:4d:cf:f8:
30:a0:9c:6f:cc:e4:87:44:51:9d:bb:a0:4a:e7:39:
94:f6:46:9f:6f:d4:cb:0d:a2:bf:84:bd:73:1d:89:
ce:a7:f9:75:6f:a2:72:01:ae:7a:d7:80:1a:7f:48:
35:fb:86:e7:dc:0f:c0:49:af:d1:b4:bd:a7:3d:d5:
b3:b6:ab:9c:84:84:bc:cc:71:04:36:10:9b:c3:1b:
54:13:68:53:6e:fc:1d:5b:7c:e3:9e:65:77:33:ee:
e7:ca:a1:be:01:72:52:a3:4f:a4:1f:f8:fd:a5:44:
87:4e:35:ab:3e:0c:fc:8e:18:be:8e:22:34:ad:01:
9e:96:af:2c:5c:e9:37:75:6b:87:28:f8:67:be:58:
4d:5e:62:02:ea:79:08:b3:64:a2:69:59:9a:a3:5d:
58:79:19:f5:16:97:50:33:ef:3c:c3:7f:fa:01:3e:
92:9a:fe:bc:12:0e:25:c1:8e:55:f7:42:9e:91:2b:
9b:3b:b4:29:db:24:25:c7:13:53:a1:5d:0e:65:d3:
da:ab:96:93:ed:c3:f0:e0:ca:69:90:72:9b:4b:fd:
79:b1:55:99:9f:d9:fc:80:37:d7:03:47:86:6e:8d:
71:b5:7f:e3:89:02:1a:b1:8e:46:b6:9f:f7:94:42:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:BE:C2:4F:7B:D6:BE:D2:8F:1A:23:D5:50:15:75:EC:7C:42:90
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:30:a9:89:6e:3c:f7:d3:28:99:d7:3d:7e:4b:6a:03:a7:ca:
81:c0:65:fb:af:47:14:b6:db:0b:8c:4c:da:ed:da:e7:06:7d:
2d:95:e1:40:a0:f7:96:83:19:ae:67:46:db:33:39:96:84:35:
77:99:fd:ac:41:ac:2f:5f:21:07:72:76:dd:ed:7d:f6:ac:c4:
e1:82:f9:33:05:86:23:56:ff:62:a3:c9:8e:67:4c:ea:b3:90:
60:04:42:4e:1b:8a:21:31:3f:f4:77:96:52:0c:ee:58:e5:ce:
04:ee:68:79:27:8b:47:1d:43:c7:5f:55:50:0a:4b:f5:f6:f7:
61:ce:7f:59:19:a0:93:6b:f6:ae:68:26:14:5f:e5:84:0a:12:
2b:46:9b:f0:f3:0d:72:5b:fb:8f:a3:2c:5f:d9:14:83:39:69:
69:5c:b3:74:27:69:01:63:be:87:9c:1a:53:02:e9:b5:40:91:
00:39:45:b1:1d:ec:98:b3:8d:b1:ff:7c:2f:5c:0a:18:a6:78:
43:b1:7b:c1:30:f2:3d:16:3b:e1:81:65:e6:be:7e:f4:a7:3a:
5c:22:f8:da:54:cb:e2:8e:12:2a:83:a6:ac:2f:89:f4:23:06:
41:60:98:fd:1a:b3:b9:c2:10:ef:d7:b6:16:5f:a3:dd:f5:fb:
8f:6a:1e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DTcQhqihx6Ci2/bAR01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjAyZTY0NWY3MmNkNzBhYTgxNDNiNzNiY2MwZGRkOTNi
ZmU5MWEwHhcNMjUxMTA0MTMwMDE4WhcNMjUxMTA1MTMwMDE4WjAzMTEwLwYDVQQD
EygxMmU4YmVjMjRmN2JkNmJlZDI4ZjFhMjNkNTUwMTU3NWVjN2M0MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq3y+2WB1BaTgqZNz/gwoJxvzOSH
RFGdu6BK5zmU9kafb9TLDaK/hL1zHYnOp/l1b6JyAa5614Aaf0g1+4bn3A/ASa/R
tL2nPdWztquchIS8zHEENhCbwxtUE2hTbvwdW3zjnmV3M+7nyqG+AXJSo0+kH/j9
pUSHTjWrPgz8jhi+jiI0rQGelq8sXOk3dWuHKPhnvlhNXmIC6nkIs2SiaVmao11Y
eRn1FpdQM+88w3/6AT6Smv68Eg4lwY5V90KekSubO7Qp2yQlxxNToV0OZdPaq5aT
7cPw4MppkHKbS/15sVWZn9n8gDfXA0eGbo1xtX/jiQIasY5Gtp/3lELmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLovsJPe9a+0o8aI9VQFXXsfEKQMB8GA1UdIwQY
MBaAFHIgLmRfcs1wqoFDtzvMDd2Tv+kaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lBdVpGOXl6WENxZ1VPM084d04zWk9fNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTExMjctZjk5Yy00YWVhLWIyZmEt
NDBjYzE2ZjJhZmE0LzEvY2lBdVpGOXl6WENxZ1VPM084d04zWk9fNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZTExMjctZjk5Yy00YWVhLWIyZmEtNDBjYzE2ZjJhZmE0
LzEvY2lBdVpGOXl6WENxZ1VPM084d04zWk9fNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDCpiW48
99Momdc9fktqA6fKgcBl+69HFLbbC4xM2u3a5wZ9LZXhQKD3loMZrmdG2zM5loQ1
d5n9rEGsL18hB3J23e199qzE4YL5MwWGI1b/YqPJjmdM6rOQYARCThuKITE/9HeW
UgzuWOXOBO5oeSeLRx1Dx19VUApL9fb3Yc5/WRmgk2v2rmgmFF/lhAoSK0ab8PMN
clv7j6MsX9kUgzlpaVyzdCdpAWO+h5waUwLptUCRADlFsR3smLONsf98L1wKGKZ4
Q7F7wTDyPRY74YFl5r5+9Kc6XCL42lTL4o4SKoOmrC+J9CMGQWCY/RqzucIQ79e2
Fl+j3fX7j2oeaA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:08 2025 by rpki-client