Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: zukOkTFYRSpFhsnN1IY7jpvqbVcAQARYWjPTXnvChrE=
Subject key identifier: 37:2F:E7:9C:37:78:D6:E1:DD:61:44:6C:81:38:95:90:5F:79:35:BA
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 019A4DE17FE829A4F70B3FBDE7FA72DC8DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 12DD
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: OmWuwTs1WldsV2y7SjtxsJWZ6CBplEiEm55doKV9WEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7f:e8:29:a4:f7:0b:3f:bd:e7:fa:72:dc:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=372fe79c3778d6e1dd61446c813895905f7935ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:d7:1c:a9:c8:d6:3a:22:5e:e5:8f:15:78:
a1:95:a2:0a:02:43:d0:ff:88:1c:c5:e1:f9:3c:b8:
30:01:f9:83:57:06:b6:34:6f:18:79:1c:4f:29:2e:
2f:4a:89:9c:22:88:5a:ae:f1:e6:e2:9e:8f:1b:db:
a1:4c:fb:23:29:91:90:4b:37:24:7c:55:32:e5:37:
8e:e9:60:92:dd:dc:eb:b3:0b:a3:f8:bf:12:dd:a7:
4a:c4:66:4a:22:e6:d0:54:2b:65:b6:8e:8b:f6:da:
18:02:bb:b8:4e:44:75:7c:2a:de:69:69:c0:4c:63:
2e:7a:e6:c4:31:73:9f:0a:2d:53:1a:17:53:d2:79:
12:a7:d8:50:16:a1:70:22:13:e1:8e:24:ef:b9:45:
ca:00:d3:b2:8a:40:23:53:da:b1:f1:c9:34:23:f9:
c6:64:78:05:82:4b:e1:42:6b:99:69:35:69:c0:c0:
ed:c0:2d:02:b8:c2:94:f4:a5:1e:7a:b1:27:b8:80:
c1:1f:60:6c:23:60:cd:e3:3a:a6:53:9a:63:43:47:
67:e0:5f:30:21:bb:5b:f1:6d:cd:fb:63:d1:1c:77:
7e:1b:39:cf:ae:6d:01:17:91:ca:25:76:f7:f4:fe:
95:be:b0:cc:4f:e7:37:5b:c6:ca:9f:16:3e:8c:4f:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:E7:9C:37:78:D6:E1:DD:61:44:6C:81:38:95:90:5F:79:35:BA
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2e:0b:cb:21:2e:6e:c0:7c:7c:9e:e5:4b:f6:4f:a2:db:3f:
f3:02:cd:6b:76:d0:f0:9a:42:dc:b7:a9:de:d1:5f:ae:a9:b4:
ed:6e:65:1e:bb:48:fd:9c:b7:4b:01:30:0d:e6:93:7c:bb:fd:
c0:1e:53:ee:0f:be:3c:92:73:a0:48:43:21:f1:43:61:d2:f5:
79:f0:c6:b0:3e:42:57:6d:70:bd:05:36:a3:02:2a:cf:97:f9:
9b:28:58:3d:4f:67:30:13:0b:40:87:38:0b:02:fb:f2:97:88:
80:09:f0:f8:ff:95:0e:36:80:cb:45:b4:23:05:cc:ae:11:3c:
8f:e0:d3:9d:43:bb:21:38:af:cc:97:41:8c:bf:7d:4b:6e:cb:
ca:3f:2f:a0:e0:ef:a3:30:e4:fe:d0:ff:54:17:e0:30:81:f5:
09:a9:cb:07:c6:90:9f:2d:f0:9e:c2:61:5e:14:82:d3:10:59:
7b:6c:00:2d:bf:ca:50:1b:01:4f:2b:30:11:5e:18:13:7a:b9:
65:7a:32:d1:fc:d4:fa:be:d2:db:80:17:50:0d:9b:ab:f4:f0:
6e:c2:d7:54:20:ea:99:64:b6:ca:26:2e:33:6e:e3:4a:87:ff:
a1:ea:19:10:8b:25:d4:9a:60:c5:4d:50:17:ce:66:19:79:e3:
6f:a0:b3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4X/oKaT3Cz+95/py3I2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjUxMTA0MDgwMDE1WhcNMjUxMTA1MDgwMDE1WjAzMTEwLwYDVQQD
EygzNzJmZTc5YzM3NzhkNmUxZGQ2MTQ0NmM4MTM4OTU5MDVmNzkzNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkfXHKnI1joiXuWPFXihlaIKAkPQ
/4gcxeH5PLgwAfmDVwa2NG8YeRxPKS4vSomcIoharvHm4p6PG9uhTPsjKZGQSzck
fFUy5TeO6WCS3dzrswuj+L8S3adKxGZKIubQVCtlto6L9toYAru4TkR1fCreaWnA
TGMueubEMXOfCi1TGhdT0nkSp9hQFqFwIhPhjiTvuUXKANOyikAjU9qx8ck0I/nG
ZHgFgkvhQmuZaTVpwMDtwC0CuMKU9KUeerEnuIDBH2BsI2DN4zqmU5pjQ0dn4F8w
Ibtb8W3N+2PRHHd+GznPrm0BF5HKJXb39P6VvrDMT+c3W8bKnxY+jE+oFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcv55w3eNbh3WFEbIE4lZBfeTW6MB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC4LyyEu
bsB8fJ7lS/ZPots/8wLNa3bQ8JpC3Lep3tFfrqm07W5lHrtI/Zy3SwEwDeaTfLv9
wB5T7g++PJJzoEhDIfFDYdL1efDGsD5CV21wvQU2owIqz5f5myhYPU9nMBMLQIc4
CwL78peIgAnw+P+VDjaAy0W0IwXMrhE8j+DTnUO7ITivzJdBjL99S27Lyj8voODv
ozDk/tD/VBfgMIH1CanLB8aQny3wnsJhXhSC0xBZe2wALb/KUBsBTyswEV4YE3q5
ZXoy0fzU+r7S24AXUA2bq/TwbsLXVCDqmWS2yiYuM27jSof/oeoZEIsl1JpgxU1Q
F85mGXnjb6Czsw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:55 2025 by rpki-client