Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: 9PhmTt0gXt0TdXD2mnuZXZsMqvUXOapnnVV/m2IY4sA=
Subject key identifier: A8:09:F0:90:1E:AC:76:1C:8C:02:01:EB:2B:04:94:1C:8E:39:6B:74
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 019A500743BA41F084DB82FAF2E35E600309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 18:00:44 +0000
Manifest this update: Tue 04 Nov 2025 18:00:44 +0000
Manifest next update: Wed 05 Nov 2025 18:00:44 +0000
Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: epyefaX8/wUIVUKVDypZQok8L4hk19QZhSQFUqK4noI=)
2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:43:ba:41:f0:84:db:82:fa:f2:e3:5e:60:03:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Nov 4 18:00:44 2025 GMT
Not After : Nov 5 18:00:44 2025 GMT
Subject: CN=a809f0901eac761c8c0201eb2b04941c8e396b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:ca:ea:29:e1:8b:eb:b9:1e:f3:7b:3a:88:
8f:e8:b1:25:ad:cc:51:44:39:0c:2e:dc:f9:7a:32:
6f:d2:ae:ae:c0:6c:0e:bc:49:5a:ff:73:a2:bb:98:
bb:31:8f:e2:12:53:08:b7:4c:3a:71:27:ee:87:ff:
e8:28:3b:6b:21:24:03:95:a4:60:6c:41:ad:e3:c5:
d6:dc:77:fe:00:d3:ba:7f:4e:06:3f:00:e3:32:3a:
10:64:43:ba:f5:a3:c7:a2:48:19:e4:99:f7:d6:15:
bf:22:15:4b:2f:f3:be:85:36:68:19:eb:56:c6:0d:
c0:a1:a9:41:32:a6:1f:8d:6a:a3:3f:53:5e:ed:75:
6c:58:13:91:36:28:cd:7e:e3:81:bd:dd:f5:4c:29:
57:fd:92:b2:f8:96:4a:d2:7b:2d:c3:7b:a3:2f:a9:
f5:ef:01:8a:15:e2:62:e1:98:53:f5:ef:09:46:12:
35:1d:eb:5f:ae:f6:1a:83:63:d6:b0:b9:bc:04:27:
88:24:59:f9:5d:c6:42:42:80:73:e6:ec:0a:3c:f2:
12:5a:03:32:11:6e:9c:87:a0:04:9a:8c:05:da:4a:
ae:e2:6f:e2:22:d2:dc:90:b9:a6:f3:80:7c:22:d6:
82:e4:ad:5d:ee:01:f6:69:6c:68:fa:4e:f6:18:4a:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:F0:90:1E:AC:76:1C:8C:02:01:EB:2B:04:94:1C:8E:39:6B:74
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:46:a8:54:64:68:48:34:fa:b7:95:ec:8f:53:b0:a0:7b:
01:ad:bc:43:a8:d9:5b:d2:5c:f3:9b:57:5b:bc:94:16:1b:a5:
b8:6e:85:5f:a0:65:f6:55:27:e1:87:81:4f:60:15:54:36:c3:
85:da:aa:a1:94:c3:80:d2:2e:2c:c5:4d:28:35:49:89:c8:92:
90:e6:6b:f8:19:fc:6a:99:59:07:e3:0c:b8:04:2b:20:22:38:
0a:f8:0f:0b:e0:26:25:e4:b6:23:5b:da:82:a9:66:85:b9:01:
03:d9:51:d6:87:fd:36:42:cc:f1:e0:52:a0:53:4f:9b:7e:af:
46:73:76:06:e9:ad:da:fc:80:08:0e:d6:a9:9d:2e:71:be:88:
41:67:63:3f:69:7a:5d:95:d8:94:e3:32:5f:85:28:22:63:7a:
85:27:0e:a3:81:96:0d:27:aa:64:fb:03:0d:af:d7:da:b6:68:
b4:24:4f:d1:65:8a:fd:21:3e:98:b9:c3:4a:05:63:69:0f:ca:
59:d8:19:4a:b5:cb:50:a9:9f:a3:a4:d1:3a:93:69:00:46:dd:
72:61:15:7f:4f:fc:00:0c:74:4e:83:5f:ed:95:12:05:db:69:
d8:d5:34:91:3a:cb:49:e2:98:c8:a0:02:71:c0:43:6a:c8:1e:
b6:d2:41:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB0O6QfCE24L68uNeYAMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk
ZDNkOTIwHhcNMjUxMTA0MTgwMDQ0WhcNMjUxMTA1MTgwMDQ0WjAzMTEwLwYDVQQD
EyhhODA5ZjA5MDFlYWM3NjFjOGMwMjAxZWIyYjA0OTQxYzhlMzk2Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGDK6inhi+u5HvN7OoiP6LElrcxR
RDkMLtz5ejJv0q6uwGwOvEla/3Oiu5i7MY/iElMIt0w6cSfuh//oKDtrISQDlaRg
bEGt48XW3Hf+ANO6f04GPwDjMjoQZEO69aPHokgZ5Jn31hW/IhVLL/O+hTZoGetW
xg3AoalBMqYfjWqjP1Ne7XVsWBORNijNfuOBvd31TClX/ZKy+JZK0nstw3ujL6n1
7wGKFeJi4ZhT9e8JRhI1HetfrvYag2PWsLm8BCeIJFn5XcZCQoBz5uwKPPISWgMy
EW6ch6AEmowF2kqu4m/iItLckLmm84B8ItaC5K1d7gH2aWxo+k72GErT4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgJ8JAerHYcjAIB6ysElByOOWt0MB8GA1UdIwQY
MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt
YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2
LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAABGqFRk
aEg0+reV7I9TsKB7Aa28Q6jZW9Jc85tXW7yUFhuluG6FX6Bl9lUn4YeBT2AVVDbD
hdqqoZTDgNIuLMVNKDVJiciSkOZr+Bn8aplZB+MMuAQrICI4CvgPC+AmJeS2I1va
gqlmhbkBA9lR1of9NkLM8eBSoFNPm36vRnN2Bumt2vyACA7WqZ0ucb6IQWdjP2l6
XZXYlOMyX4UoImN6hScOo4GWDSeqZPsDDa/X2rZotCRP0WWK/SE+mLnDSgVjaQ/K
WdgZSrXLUKmfo6TROpNpAEbdcmEVf0/8AAx0ToNf7ZUSBdtp2NU0kTrLSeKYyKAC
ccBDasgettJB0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:55 2025 by rpki-client