Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: g9kHHrIzc9EGfDkRP6KJFYOjKVHlYNRzXqwlF1r+ViM=
Subject key identifier: A1:D0:00:9C:3C:21:90:D8:43:D7:F2:82:A2:DC:4D:96:41:0F:07:D0
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019A7293A653BCC1502BDDAB41DBC9F7F306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 13FB
Signing time: Tue 11 Nov 2025 11:01:10 +0000
Manifest this update: Tue 11 Nov 2025 11:01:10 +0000
Manifest next update: Wed 12 Nov 2025 11:01:10 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: fk+tdCdUEQNpEkx4Nf4n4dx1ZOXgMurqZCJLb9NNHlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a6:53:bc:c1:50:2b:dd:ab:41:db:c9:f7:f3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Nov 11 11:01:10 2025 GMT
Not After : Nov 12 11:01:10 2025 GMT
Subject: CN=a1d0009c3c2190d843d7f282a2dc4d96410f07d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:6b:28:ed:29:c0:e8:b1:bf:0e:24:a3:4a:
01:b3:03:54:b3:6b:a0:84:30:a0:c9:f0:7b:c0:f7:
ad:c3:9d:2e:4e:9d:75:2b:b2:5d:46:70:7f:70:7c:
c8:16:f0:62:99:c2:a7:09:da:2d:09:ca:6a:b7:2c:
c8:4b:5d:73:1f:4e:b8:fb:77:c0:f9:ed:b0:42:73:
d5:4b:80:0c:a0:22:1a:6b:87:a6:29:70:61:ed:fd:
d6:e8:e7:80:99:bc:eb:ef:9c:21:52:c1:0e:f7:f2:
f6:22:a1:f4:af:fb:eb:6b:e2:c6:f6:8a:53:38:4c:
24:68:f9:09:e9:d0:e1:9d:31:a0:72:13:04:5d:64:
44:df:64:ed:28:62:0f:40:e1:e9:89:07:2c:c0:f7:
93:13:65:38:cd:41:ab:c2:df:1b:16:42:e2:b9:f8:
ee:9d:37:26:7a:ce:af:49:63:d4:ca:19:ce:ad:8d:
92:21:76:f1:2d:b9:11:62:f2:64:26:d2:a6:06:be:
89:06:b6:a7:ae:b2:2a:13:1f:73:72:6a:54:8e:9e:
c1:bd:ae:0d:3b:a1:71:f7:ee:05:5e:60:cf:5d:20:
5b:17:d4:9a:91:6d:cf:82:9e:76:74:b9:a4:e4:12:
aa:dd:1b:48:3c:43:46:c2:46:fa:41:4e:74:fe:04:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D0:00:9C:3C:21:90:D8:43:D7:F2:82:A2:DC:4D:96:41:0F:07:D0
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b8:97:c5:8a:23:b6:38:d6:26:36:19:c4:d3:31:ed:f7:7a:
30:4d:1c:17:b5:78:74:82:04:da:1d:41:b5:85:64:2c:5b:0b:
db:81:a9:eb:5d:f5:f2:60:d1:b5:43:b8:66:31:5b:09:b9:22:
05:b2:53:0c:8e:df:2a:86:86:01:c0:17:32:32:1d:c6:b6:fe:
71:bb:4f:89:f2:52:0a:68:8b:1b:b2:31:3c:7a:b1:34:26:f4:
7e:93:4b:c1:d1:7b:31:04:0a:d7:8e:a2:ee:cc:e8:31:1c:6f:
75:63:ba:45:7e:a5:bb:38:74:bd:51:dc:30:56:d0:12:9a:3b:
4c:20:31:2b:4b:8a:c8:1b:2e:a8:1b:b5:10:e2:27:95:a1:06:
f5:7f:90:76:8c:69:73:69:d4:63:76:53:c1:38:be:4f:25:6e:
ac:55:d6:52:4b:79:38:04:04:b1:80:20:9f:ce:cb:6e:be:a6:
b9:d2:7d:6e:cd:dd:04:3e:ce:c2:fb:26:e0:de:ff:20:7c:5f:
9c:f9:4f:ae:73:0d:ca:a3:ec:9b:c3:8b:46:cf:88:e3:fd:1e:
df:4c:c4:dc:97:c0:ce:35:3d:90:b5:9d:f0:f4:3a:07:0a:66:
d4:3b:8a:99:5a:d3:da:31:be:55:c8:ba:21:55:f9:3d:99:35:
e2:ef:0e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6ZTvMFQK92rQdvJ9/MGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NGEwNTc0N2VmODhhMmViYzlmMmZhZWY2MjAxOWRjODdk
MWEyNTMwHhcNMjUxMTExMTEwMTEwWhcNMjUxMTEyMTEwMTEwWjAzMTEwLwYDVQQD
EyhhMWQwMDA5YzNjMjE5MGQ4NDNkN2YyODJhMmRjNGQ5NjQxMGYwN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIxrKO0pwOixvw4ko0oBswNUs2ug
hDCgyfB7wPetw50uTp11K7JdRnB/cHzIFvBimcKnCdotCcpqtyzIS11zH064+3fA
+e2wQnPVS4AMoCIaa4emKXBh7f3W6OeAmbzr75whUsEO9/L2IqH0r/vra+LG9opT
OEwkaPkJ6dDhnTGgchMEXWRE32TtKGIPQOHpiQcswPeTE2U4zUGrwt8bFkLiufju
nTcmes6vSWPUyhnOrY2SIXbxLbkRYvJkJtKmBr6JBranrrIqEx9zcmpUjp7Bva4N
O6Fx9+4FXmDPXSBbF9SakW3Pgp52dLmk5BKq3RtIPENGwkb6QU50/gQvqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHQAJw8IZDYQ9fygqLcTZZBDwfQMB8GA1UdIwQY
MBaAFAhKBXR++IouvJ8vrvYgGdyH0aJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAt
M2JkM2UzZTRhNDBiLzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAtM2JkM2UzZTRhNDBi
LzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLiXxYoj
tjjWJjYZxNMx7fd6ME0cF7V4dIIE2h1BtYVkLFsL24Gp61318mDRtUO4ZjFbCbki
BbJTDI7fKoaGAcAXMjIdxrb+cbtPifJSCmiLG7IxPHqxNCb0fpNLwdF7MQQK146i
7szoMRxvdWO6RX6luzh0vVHcMFbQEpo7TCAxK0uKyBsuqBu1EOInlaEG9X+Qdoxp
c2nUY3ZTwTi+TyVurFXWUkt5OAQEsYAgn87Lbr6mudJ9bs3dBD7Owvsm4N7/IHxf
nPlPrnMNyqPsm8OLRs+I4/0e30zE3JfAzjU9kLWd8PQ6Bwpm1DuKmVrT2jG+Vci6
IVX5PZk14u8Oqw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:22 2025 by rpki-client