Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: y+I+x4jnLWpq2UGylRo/lnmr6xqnX4uWcfAz0iAvkR4=
Subject key identifier: 39:87:AF:4C:D9:95:E9:A4:EF:59:6B:0C:61:4B:E0:09:D4:2F:22:10
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019A4C6182B2E791A7C116C2DAC273054A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0D4B
Signing time: Tue 04 Nov 2025 01:00:50 +0000
Manifest this update: Tue 04 Nov 2025 01:00:50 +0000
Manifest next update: Wed 05 Nov 2025 01:00:50 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: MTIPh2gaW+PQywEOX7SOwudM6knyCAw5JO+td56fauw=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:82:b2:e7:91:a7:c1:16:c2:da:c2:73:05:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Nov 4 01:00:50 2025 GMT
Not After : Nov 5 01:00:50 2025 GMT
Subject: CN=3987af4cd995e9a4ef596b0c614be009d42f2210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f6:d9:0f:46:10:4f:a6:3b:fa:e7:21:dd:9c:
01:aa:6f:13:3d:dc:9d:1f:58:a6:87:ce:6c:e5:d2:
dd:60:01:17:b2:77:64:99:3a:70:fa:13:b7:33:a8:
ea:00:85:b4:8e:26:2f:7c:fb:62:58:91:e8:c5:5d:
30:62:4c:f4:38:f2:5c:d0:c6:14:eb:06:02:ac:8a:
03:13:14:a3:2c:ac:8d:f8:2b:60:e3:ae:ee:b1:01:
35:da:4c:05:5e:0d:6f:1f:ff:bb:da:0a:ff:5d:c4:
cf:0a:83:df:02:a1:ea:e7:c9:73:33:b4:0d:e5:a5:
20:2b:59:99:d4:c2:e8:da:64:d6:7b:f9:3a:6a:9a:
9a:f2:c6:ae:27:0f:e6:ae:b7:3d:7f:64:d6:6d:a8:
7e:2f:f7:ea:0b:c9:5e:9c:da:c2:5b:21:e6:aa:63:
89:51:f5:4d:15:a4:5b:0b:3f:da:bc:90:69:37:3c:
f5:72:31:5b:8c:07:e8:32:3d:a7:c5:d6:96:d4:17:
37:fa:5e:e4:ab:7b:e8:91:40:ed:8a:ca:b6:5b:72:
c2:c1:79:1e:d2:c4:45:67:06:fa:32:35:4c:6b:3f:
af:66:da:4d:b0:7a:a0:0a:59:3b:1d:d6:79:57:94:
ab:e8:91:8b:df:3d:d2:89:e5:ee:46:ae:0d:80:fc:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:AF:4C:D9:95:E9:A4:EF:59:6B:0C:61:4B:E0:09:D4:2F:22:10
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:3f:03:de:87:1d:cf:4f:7e:f0:bb:5f:02:68:ea:71:85:
dd:59:02:0c:83:5d:eb:22:f6:38:08:d1:e0:1a:60:b1:10:23:
36:ea:86:c7:c8:d3:f1:cb:19:9b:0f:91:6b:44:46:f7:66:a6:
b3:3d:d2:57:91:b9:73:0d:e3:8a:59:72:10:6c:13:f5:b6:d9:
94:94:28:ba:21:76:4c:7b:77:17:6a:98:d8:97:dd:18:bd:9f:
fd:9f:34:fe:6c:f3:8d:f4:25:cf:2c:38:d5:dc:55:44:48:6c:
e2:c9:59:48:7d:81:d2:9f:0b:3c:5e:8e:33:d9:02:79:9b:cd:
e4:75:d8:30:a4:06:5e:24:20:36:77:93:32:bf:7c:2a:6a:fd:
c7:f4:06:7f:cd:a7:be:ab:01:f1:f2:64:65:c4:71:ca:8a:f8:
a3:c9:17:5d:a6:f7:6c:1b:12:b3:b1:2a:96:af:0d:91:28:fb:
c2:64:8b:38:a9:8d:f0:b8:05:26:a7:7a:78:6c:0e:b6:ea:5f:
60:e1:0d:70:83:64:e7:7b:19:82:33:7c:c2:81:1a:94:f0:4b:
42:d9:f8:39:5d:31:e3:2c:77:94:65:00:8f:b2:57:87:1c:0e:
db:19:7f:38:ef:74:39:23:c3:7b:bc:e6:06:44:35:90:5f:fb:
c3:91:5b:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYYKy55GnwRbC2sJzBUpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi
ZDZmMDYwHhcNMjUxMTA0MDEwMDUwWhcNMjUxMTA1MDEwMDUwWjAzMTEwLwYDVQQD
EygzOTg3YWY0Y2Q5OTVlOWE0ZWY1OTZiMGM2MTRiZTAwOWQ0MmYyMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/bZD0YQT6Y7+uch3ZwBqm8TPdyd
H1imh85s5dLdYAEXsndkmTpw+hO3M6jqAIW0jiYvfPtiWJHoxV0wYkz0OPJc0MYU
6wYCrIoDExSjLKyN+Ctg467usQE12kwFXg1vH/+72gr/XcTPCoPfAqHq58lzM7QN
5aUgK1mZ1MLo2mTWe/k6apqa8sauJw/mrrc9f2TWbah+L/fqC8lenNrCWyHmqmOJ
UfVNFaRbCz/avJBpNzz1cjFbjAfoMj2nxdaW1Bc3+l7kq3vokUDtisq2W3LCwXke
0sRFZwb6MjVMaz+vZtpNsHqgClk7HdZ5V5Sr6JGL3z3SieXuRq4NgPwViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmHr0zZlemk71lrDGFL4AnULyIQMB8GA1UdIwQY
MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt
NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2
LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUI/A96H
Hc9PfvC7XwJo6nGF3VkCDINd6yL2OAjR4BpgsRAjNuqGx8jT8csZmw+Ra0RG92am
sz3SV5G5cw3jillyEGwT9bbZlJQouiF2THt3F2qY2JfdGL2f/Z80/mzzjfQlzyw4
1dxVREhs4slZSH2B0p8LPF6OM9kCeZvN5HXYMKQGXiQgNneTMr98Kmr9x/QGf82n
vqsB8fJkZcRxyor4o8kXXab3bBsSs7Eqlq8NkSj7wmSLOKmN8LgFJqd6eGwOtupf
YOENcINk53sZgjN8woEalPBLQtn4OV0x4yx3lGUAj7JXhxwO2xl/OO90OSPDe7zm
BkQ1kF/7w5FbkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:48 2025 by rpki-client