Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: j9iDRTYMbCncLLygAZaHQ4cyIDmh74JYH8aTQOgdUy4=
Subject key identifier: 1C:0F:CF:6F:D3:AE:1B:E9:F2:0C:62:A2:2A:59:1D:3A:80:AF:1E:A6
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019A51BEECCCBEDEF84EA2B3C4ECBDBA1CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 04BD
Signing time: Wed 05 Nov 2025 02:00:58 +0000
Manifest this update: Wed 05 Nov 2025 02:00:58 +0000
Manifest next update: Thu 06 Nov 2025 02:00:58 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: XJzz6w5RPCZckcaO4n8hf+eInNyIzyI4a+SIMsO3ULU=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:ec:cc:be:de:f8:4e:a2:b3:c4:ec:bd:ba:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Nov 5 02:00:58 2025 GMT
Not After : Nov 6 02:00:58 2025 GMT
Subject: CN=1c0fcf6fd3ae1be9f20c62a22a591d3a80af1ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:69:d8:cd:87:4c:d9:93:9c:7e:3e:f8:e4:
9a:c2:25:b9:05:67:c0:f5:e6:92:26:0d:ff:9b:6b:
fe:eb:e5:c1:0c:71:d8:96:55:c8:ec:47:f1:84:3d:
11:4c:55:df:d7:8f:df:f7:ff:19:d2:09:ee:ec:38:
a6:a8:f2:b0:50:68:2b:11:4b:32:65:29:e4:ba:a3:
af:6a:59:19:6c:9a:70:61:8a:40:fc:b8:f8:a4:45:
a4:d3:87:75:50:d5:40:f9:f4:7a:93:c3:81:a9:3d:
4a:b1:5f:36:ae:98:37:f2:48:57:7c:33:18:b0:64:
94:4b:74:bb:b1:b0:d8:7a:a2:b0:d7:61:19:2e:45:
ac:ba:c5:a0:71:04:a4:06:00:95:4d:8d:f6:31:8d:
45:2c:92:a3:f1:09:49:0e:b2:68:6a:a0:07:fd:c1:
68:07:fc:e0:31:0b:8d:05:54:01:48:f6:7a:b4:9e:
53:a0:75:40:54:4a:a7:63:a4:80:8c:ef:9e:1f:6a:
bc:b9:fd:d6:14:0f:7e:87:ce:58:10:2f:df:f9:3c:
98:08:61:cb:be:4b:70:8d:b3:b6:b9:df:89:5f:6f:
6e:01:9f:0a:92:40:8b:cc:e0:6f:55:a8:35:09:cc:
b9:f6:28:d3:dc:c9:2c:bb:88:c5:3a:a0:47:12:87:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:CF:6F:D3:AE:1B:E9:F2:0C:62:A2:2A:59:1D:3A:80:AF:1E:A6
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:f3:a0:24:47:65:42:0e:8c:c6:d3:e3:43:35:eb:2b:83:
b7:e5:6e:80:27:1b:42:09:fa:4b:96:39:8e:5a:1c:cc:03:19:
13:2e:3e:99:5e:88:1b:e4:5a:fc:0b:49:e2:33:a8:b8:e1:51:
d5:44:37:1e:6b:77:a3:3b:78:69:36:12:70:a5:26:06:45:b5:
e9:11:b8:8e:64:11:57:ce:14:3c:77:a0:45:e0:b3:f6:a2:32:
af:a1:87:58:23:61:32:f5:1e:89:fc:cd:4b:45:63:a9:c6:17:
45:5e:92:8d:6e:84:25:ee:23:b4:58:28:59:dd:66:30:8a:26:
30:a1:a6:de:6d:91:7f:99:b7:1e:89:8d:c9:a7:61:5e:24:f1:
46:c4:9d:0d:90:6a:55:eb:88:2a:28:24:cb:92:08:25:3b:74:
cf:de:70:ba:43:9f:31:b0:00:e9:35:92:b8:cd:4b:ba:5a:3a:
80:cd:cc:a8:9b:cc:f5:68:32:57:f2:b4:15:c0:26:f9:27:64:
21:1d:b3:84:57:2c:4a:de:df:78:6c:32:0a:29:b1:b9:ee:a5:
7b:40:dc:78:96:f3:69:78:61:2e:56:32:94:0a:21:ee:9a:f3:
6b:f0:8c:aa:1e:14:aa:74:88:c5:69:82:2d:60:be:15:53:51:
aa:6f:1a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvuzMvt74TqKzxOy9uhzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjUxMTA1MDIwMDU4WhcNMjUxMTA2MDIwMDU4WjAzMTEwLwYDVQQD
EygxYzBmY2Y2ZmQzYWUxYmU5ZjIwYzYyYTIyYTU5MWQzYTgwYWYxZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o1p2M2HTNmTnH4++OSawiW5BWfA
9eaSJg3/m2v+6+XBDHHYllXI7EfxhD0RTFXf14/f9/8Z0gnu7DimqPKwUGgrEUsy
ZSnkuqOvalkZbJpwYYpA/Lj4pEWk04d1UNVA+fR6k8OBqT1KsV82rpg38khXfDMY
sGSUS3S7sbDYeqKw12EZLkWsusWgcQSkBgCVTY32MY1FLJKj8QlJDrJoaqAH/cFo
B/zgMQuNBVQBSPZ6tJ5ToHVAVEqnY6SAjO+eH2q8uf3WFA9+h85YEC/f+TyYCGHL
vktwjbO2ud+JX29uAZ8KkkCLzOBvVag1Ccy59ijT3Mksu4jFOqBHEodaLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwPz2/Trhvp8gxioipZHTqArx6mMB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMPzoCRH
ZUIOjMbT40M16yuDt+VugCcbQgn6S5Y5jloczAMZEy4+mV6IG+Ra/AtJ4jOouOFR
1UQ3Hmt3ozt4aTYScKUmBkW16RG4jmQRV84UPHegReCz9qIyr6GHWCNhMvUeifzN
S0VjqcYXRV6SjW6EJe4jtFgoWd1mMIomMKGm3m2Rf5m3HomNyadhXiTxRsSdDZBq
VeuIKigky5IIJTt0z95wukOfMbAA6TWSuM1Lulo6gM3MqJvM9WgyV/K0FcAm+Sdk
IR2zhFcsSt7feGwyCimxue6le0DceJbzaXhhLlYylAoh7prza/CMqh4UqnSIxWmC
LWC+FVNRqm8aoA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:21:17 2025 by rpki-client