Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: /8RHy2OVkc+6rccbLuQ9Bc1MRi1bbHN0sRmmMJcEEj4=
Subject key identifier: A0:50:56:9C:A4:B2:DF:B8:98:23:FE:68:60:7F:A2:8B:D9:64:AE:1D
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019A53ACCAE57985EEA8B65213A89B00CF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 11:00:24 +0000
Manifest this update: Wed 05 Nov 2025 11:00:24 +0000
Manifest next update: Thu 06 Nov 2025 11:00:24 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: 763bM43ZnLcFYR+oYa3X/MRpCEMdwbaT39kQDz9HQXI=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:ca:e5:79:85:ee:a8:b6:52:13:a8:9b:00:cf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Nov 5 11:00:24 2025 GMT
Not After : Nov 6 11:00:24 2025 GMT
Subject: CN=a050569ca4b2dfb89823fe68607fa28bd964ae1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:6d:46:13:05:3c:68:4e:b3:6f:61:29:cb:
7f:59:0c:c9:c5:3c:4c:34:04:8c:0b:17:3a:10:06:
ea:4f:8c:1f:86:51:62:79:2e:ca:da:58:96:e2:18:
26:4c:76:3d:c1:40:b6:d0:41:65:a5:ea:b8:8c:ad:
04:66:d6:58:6c:1d:46:6c:51:0f:12:32:f6:8f:cd:
a5:a5:6b:5c:5a:d9:1a:7c:fa:ee:07:12:53:8b:41:
d6:b7:b4:06:a9:5e:9e:c1:60:e3:33:4e:b0:e7:e0:
98:00:0f:61:27:c2:32:0f:32:65:0a:c4:3f:c2:a6:
8a:30:a9:da:ef:be:45:6b:50:a3:88:63:52:60:a5:
09:91:32:96:dc:7c:c4:4f:cc:af:50:82:5f:3d:97:
9f:b5:b0:d1:f5:38:b2:00:6b:64:c4:e7:35:90:cf:
25:a0:71:d6:c1:78:82:61:a1:31:c7:26:6d:12:2e:
9a:71:97:46:9d:e0:78:51:64:85:61:3b:06:39:3b:
af:ef:27:04:c8:09:85:d7:74:45:95:97:74:5f:fc:
39:2b:c5:c7:ea:3d:51:66:5a:2f:1c:8c:6a:9b:1c:
44:8f:81:45:e8:5a:72:77:cb:b4:9e:de:9f:5e:ca:
0f:c3:79:15:c7:91:bb:8b:a0:84:98:d6:4b:20:15:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:50:56:9C:A4:B2:DF:B8:98:23:FE:68:60:7F:A2:8B:D9:64:AE:1D
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d9:4d:27:dc:c2:52:f2:61:69:20:3c:71:dd:dd:41:c9:09:
6f:eb:2b:2d:3d:26:42:90:ed:60:c2:ee:57:95:f9:23:e4:56:
4b:f9:77:1c:c2:ed:bd:d5:53:1f:f6:cd:56:1d:26:ee:9d:b3:
5a:f7:f8:08:85:0a:d1:83:0b:19:8c:af:99:1e:7e:38:84:a8:
a2:a0:b9:39:51:8d:c0:c5:6f:31:7b:5f:ba:1c:a4:c0:d0:bc:
ca:af:f1:2c:2f:28:0a:71:f3:bc:26:ed:f6:85:ed:42:55:27:
f6:f1:e6:20:83:7a:32:70:9e:81:e4:1f:91:70:6d:5b:3c:b8:
a6:0f:47:bf:c1:94:7f:f7:4a:3b:72:03:9e:80:71:ca:a7:d7:
b0:93:17:bc:45:ec:7b:a5:00:3c:ec:c8:db:7b:67:f6:9e:4a:
f1:10:6f:72:55:7f:23:42:c2:d8:86:0d:fd:fd:20:7a:08:4d:
8b:2e:21:96:bd:0a:9f:03:be:39:7f:10:a4:cf:29:08:66:bd:
b2:34:16:9e:d3:2a:2e:0e:d3:1a:43:eb:95:3b:9d:7c:fb:dc:
70:55:39:2d:0e:59:86:ab:41:ab:c1:d0:6c:fc:3b:8f:75:80:
76:64:3e:52:4f:47:de:98:92:4b:38:25:ec:05:26:ed:d5:97:
79:be:65:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpTrMrleYXuqLZSE6ibAM97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjUxMTA1MTEwMDI0WhcNMjUxMTA2MTEwMDI0WjAzMTEwLwYDVQQD
EyhhMDUwNTY5Y2E0YjJkZmI4OTgyM2ZlNjg2MDdmYTI4YmQ5NjRhZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcxtRhMFPGhOs29hKct/WQzJxTxM
NASMCxc6EAbqT4wfhlFieS7K2liW4hgmTHY9wUC20EFlpeq4jK0EZtZYbB1GbFEP
EjL2j82lpWtcWtkafPruBxJTi0HWt7QGqV6ewWDjM06w5+CYAA9hJ8IyDzJlCsQ/
wqaKMKna775Fa1CjiGNSYKUJkTKW3HzET8yvUIJfPZeftbDR9TiyAGtkxOc1kM8l
oHHWwXiCYaExxyZtEi6acZdGneB4UWSFYTsGOTuv7ycEyAmF13RFlZd0X/w5K8XH
6j1RZlovHIxqmxxEj4FF6Fpyd8u0nt6fXsoPw3kVx5G7i6CEmNZLIBWy3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKBQVpykst+4mCP+aGB/oovZZK4dMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAytlN
J9zCUvJhaSA8cd3dQckJb+srLT0mQpDtYMLuV5X5I+RWS/l3HMLtvdVTH/bNVh0m
7p2zWvf4CIUK0YMLGYyvmR5+OISooqC5OVGNwMVvMXtfuhykwNC8yq/xLC8oCnHz
vCbt9oXtQlUn9vHmIIN6MnCegeQfkXBtWzy4pg9Hv8GUf/dKO3IDnoBxyqfXsJMX
vEXse6UAPOzI23tn9p5K8RBvclV/I0LC2IYN/f0geghNiy4hlr0KnwO+OX8QpM8p
CGa9sjQWntMqLg7TGkPrlTudfPvccFU5LQ5ZhqtBq8HQbPw7j3WAdmQ+Uk9H3piS
Szgl7AUm7dWXeb5lpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:16 2025 by rpki-client