Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: 1xdRbo4trHc3Z3JuEovncVo371oV/uhT+jbXmv/1BKo=
Subject key identifier: DC:FD:BE:92:DD:B1:2D:6C:F1:7B:FC:99:12:FC:48:98:F9:F5:07:49
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 019A4E1889BA43DA65854AE828B183FE44EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: WCsIEUc5pnx149Vh/KZIA6V4jNd1AQ8j3jLhNTTLAVQ=)
2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:89:ba:43:da:65:85:4a:e8:28:b1:83:fe:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=dcfdbe92ddb12d6cf17bfc9912fc4898f9f50749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:94:26:e0:25:05:c5:ec:ae:cc:27:15:a1:
08:a8:fc:45:5b:26:e6:14:0b:5a:a8:23:50:77:ca:
5f:f8:00:56:dc:aa:07:d0:68:20:e0:14:76:41:84:
ef:4f:56:9d:02:56:de:12:2f:8b:e5:08:33:2b:2a:
8b:d7:74:94:27:89:0d:cb:2b:b1:3a:9b:4a:31:35:
38:68:4b:d7:00:29:e5:e9:be:a4:c5:98:86:9f:c9:
5c:76:ad:1b:f3:2b:0b:6b:ef:09:cd:53:69:f6:ad:
ee:8a:e7:a2:9c:7c:16:87:27:f8:4d:9f:ad:78:3b:
36:fa:2e:9a:86:0a:7d:51:a0:11:8d:7c:cf:0c:aa:
9d:77:6d:dd:4d:6d:ee:60:4f:70:ff:76:40:27:44:
ac:f2:07:05:38:b2:f5:84:52:ed:ae:27:12:c1:02:
8d:c9:59:5e:48:81:0b:d9:1a:9a:97:db:c6:97:df:
59:d4:b7:c9:bc:90:78:67:4b:58:bc:2c:d0:65:96:
79:80:af:61:2c:dd:1d:3c:06:34:a9:6b:74:b9:b1:
1f:d7:4f:c4:63:62:68:25:da:19:da:3a:32:0b:ba:
20:78:d7:96:6e:d2:4a:39:83:88:18:8f:94:a4:36:
c3:fd:a7:9e:af:5d:b0:c1:76:05:86:3e:75:f8:58:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:BE:92:DD:B1:2D:6C:F1:7B:FC:99:12:FC:48:98:F9:F5:07:49
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:c4:bb:71:02:b7:e0:0a:c1:a9:6e:71:4f:48:80:ac:ef:
6f:d1:8a:e0:6a:af:04:4b:b1:f8:95:3c:73:bf:60:7c:28:5f:
5b:04:c9:30:3d:d8:9f:88:ee:0f:ba:9f:ee:c0:fb:33:9d:e3:
8d:21:b5:39:e7:85:f9:8d:f6:63:f8:5c:1f:78:ca:d3:7f:3e:
5e:70:d2:1e:0a:00:b1:ea:69:5f:43:8b:b1:2e:fd:f4:dc:b9:
63:62:e2:93:bd:77:2e:1f:a3:6f:db:d3:5d:67:80:1f:b9:bb:
34:ce:70:57:3a:ed:df:71:91:4b:bf:2b:04:ed:77:88:c7:3f:
32:af:db:69:6e:00:a5:92:d0:1b:cd:8f:9b:f4:ad:6f:15:d3:
b6:51:f6:07:a7:28:32:74:84:74:68:e7:5e:f4:ca:f8:30:9d:
af:47:06:01:87:b6:1c:b3:a6:06:53:ae:2f:b2:e3:fd:d9:ff:
50:2b:e8:2b:00:03:aa:31:fd:a8:bc:7a:1b:5d:17:27:e2:b9:
c9:99:57:ad:77:d6:9c:0e:dd:1b:57:f7:38:63:13:5f:5c:86:
26:dc:a3:c0:6e:48:44:92:cd:dc:00:68:db:a4:6f:bb:be:a8:
6c:b8:f7:25:db:b1:a3:bb:d3:99:2c:24:e2:b6:dc:61:e8:3f:
8a:02:6b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGIm6Q9plhUroKLGD/kTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTEyYTM4NzZmZjdiZDAwZDlkOWViYjk3MmFiMWU2MjFl
YTFlOGQwHhcNMjUxMTA0MDkwMDIyWhcNMjUxMTA1MDkwMDIyWjAzMTEwLwYDVQQD
EyhkY2ZkYmU5MmRkYjEyZDZjZjE3YmZjOTkxMmZjNDg5OGY5ZjUwNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4+UJuAlBcXsrswnFaEIqPxFWybm
FAtaqCNQd8pf+ABW3KoH0Ggg4BR2QYTvT1adAlbeEi+L5QgzKyqL13SUJ4kNyyux
OptKMTU4aEvXACnl6b6kxZiGn8lcdq0b8ysLa+8JzVNp9q3uiueinHwWhyf4TZ+t
eDs2+i6ahgp9UaARjXzPDKqdd23dTW3uYE9w/3ZAJ0Ss8gcFOLL1hFLtricSwQKN
yVleSIEL2Rqal9vGl99Z1LfJvJB4Z0tYvCzQZZZ5gK9hLN0dPAY0qWt0ubEf10/E
Y2JoJdoZ2joyC7ogeNeWbtJKOYOIGI+UpDbD/aeer12wwXYFhj51+Fg3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz9vpLdsS1s8Xv8mRL8SJj59QdJMB8GA1UdIwQY
MBaAFHLhKjh2/3vQDZ2eu5cqseYh6h6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQt
NDU1MjdlOGU0NGQyLzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZmFhMjQtZjA4Ni00YjQ4LWIxYmQtNDU1MjdlOGU0NGQy
LzEvY3VFcU9IYl9lOUFOblo2N2x5cXg1aUhxSG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQvEu3EC
t+AKwalucU9IgKzvb9GK4GqvBEux+JU8c79gfChfWwTJMD3Yn4juD7qf7sD7M53j
jSG1OeeF+Y32Y/hcH3jK038+XnDSHgoAseppX0OLsS799Ny5Y2Lik713Lh+jb9vT
XWeAH7m7NM5wVzrt33GRS78rBO13iMc/Mq/baW4ApZLQG82Pm/StbxXTtlH2B6co
MnSEdGjnXvTK+DCdr0cGAYe2HLOmBlOuL7Lj/dn/UCvoKwADqjH9qLx6G10XJ+K5
yZlXrXfWnA7dG1f3OGMTX1yGJtyjwG5IRJLN3ABo26Rvu76obLj3Jduxo7vTmSwk
4rbcYeg/igJrMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:32 2025 by rpki-client