Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: 3fGJeCg4P6RAW3FnaqizPbdX+aou/+b2fDZhRJVjRS8=
Subject key identifier: E9:84:4C:91:C7:5A:61:2F:72:CD:FB:A9:EA:75:DC:D4:2E:37:75:2E
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019A71B7E072404000CD0F4A78B9C29C6821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: D7m1ETeqTFnAhWu3IaxVYpNUw5GH99v1k0C+v7Ly4Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e0:72:40:40:00:cd:0f:4a:78:b9:c2:9c:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=e9844c91c75a612f72cdfba9ea75dcd42e37752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:7e:7f:41:1a:6a:0f:a9:78:1c:96:82:f6:
e6:6b:cc:88:7f:2d:e2:80:04:62:9c:16:dd:b1:18:
ec:36:5d:4e:cf:3f:34:06:e4:55:fa:6e:10:f0:4a:
48:f1:2c:20:e7:4a:4e:da:1d:c8:e8:d9:96:c6:30:
43:e7:39:ef:51:ae:a5:4b:fd:27:2b:09:f8:2e:e0:
8f:d2:29:b5:ba:4c:30:36:07:41:28:b2:ea:83:c1:
1c:36:e4:47:05:00:2d:aa:b7:56:b1:a5:2f:93:ac:
ab:9f:73:90:85:05:ea:f6:f3:f2:39:83:44:8e:28:
79:86:71:21:2e:15:04:1e:56:d7:c5:82:a6:1f:e3:
53:5f:d2:75:5b:a6:f6:93:2e:c3:af:5f:c7:57:25:
1e:57:87:a2:1d:43:62:f3:be:d4:ff:c2:7d:6f:8f:
1e:f6:a4:d8:ab:5c:b6:0b:ff:70:46:48:7a:f4:3c:
8a:17:8f:e3:dc:9b:1e:b2:85:07:68:3a:e9:8c:7d:
78:7d:4c:0b:ec:1f:45:03:6f:16:fd:2c:61:39:fa:
ca:e2:74:7c:7e:5e:ae:fd:bc:de:02:1f:e4:11:4b:
68:30:42:2b:25:98:a8:74:c6:8f:87:0f:e7:a5:f4:
86:1d:9a:7b:50:6c:7f:7e:b6:3f:e1:d0:44:36:36:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:4C:91:C7:5A:61:2F:72:CD:FB:A9:EA:75:DC:D4:2E:37:75:2E
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:61:67:91:6c:f2:bd:e3:88:2d:7b:04:e5:05:bb:1e:08:09:
28:fd:b6:00:13:0b:64:fc:67:74:24:64:e1:be:df:07:54:51:
9e:37:91:60:48:36:d2:07:45:63:61:56:02:9d:c6:3f:e4:cb:
f8:d5:7b:1a:3e:99:1c:f7:71:51:8e:e3:22:6d:4e:e4:81:1e:
a5:38:4e:ef:46:a3:e0:7e:5d:90:38:e2:df:e3:f6:64:5b:f6:
f5:11:22:d2:f0:2d:95:05:54:3a:25:a8:08:76:0d:97:70:93:
cd:ff:20:b7:c3:51:8f:ef:4f:9a:d1:93:5c:be:8d:db:14:2d:
56:4b:35:34:0b:76:ed:81:54:3f:ab:bc:0a:9d:12:a1:bc:e1:
fe:61:34:14:df:24:ee:be:b7:64:74:06:30:a1:7b:b4:b2:1d:
3b:68:d2:33:a9:b7:67:41:80:47:cf:22:a4:f1:be:b3:27:de:
27:f4:8f:a1:d3:11:cf:49:b7:ea:4a:c5:c4:bb:03:fe:8f:5a:
5d:aa:42:1a:ec:4a:89:5c:c1:a1:66:53:79:bb:d5:2d:60:23:
b1:b0:25:b2:25:6c:8b:56:d0:f0:31:a5:a8:1d:ef:44:85:2b:
0c:ef:95:d2:f7:f4:f7:43:af:c8:d7:df:08:b5:c7:47:4c:c1:
59:c2:1e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+ByQEAAzQ9KeLnCnGghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2Y2YjUzZjk4OGI1NzczMjBlZjI4OTMzODBhNWVhODI0
YjZhZTQwHhcNMjUxMTExMDcwMTA3WhcNMjUxMTEyMDcwMTA3WjAzMTEwLwYDVQQD
EyhlOTg0NGM5MWM3NWE2MTJmNzJjZGZiYTllYTc1ZGNkNDJlMzc3NTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6J+f0Eaag+peByWgvbma8yIfy3i
gARinBbdsRjsNl1Ozz80BuRV+m4Q8EpI8Swg50pO2h3I6NmWxjBD5znvUa6lS/0n
Kwn4LuCP0im1ukwwNgdBKLLqg8EcNuRHBQAtqrdWsaUvk6yrn3OQhQXq9vPyOYNE
jih5hnEhLhUEHlbXxYKmH+NTX9J1W6b2ky7Dr1/HVyUeV4eiHUNi877U/8J9b48e
9qTYq1y2C/9wRkh69DyKF4/j3JsesoUHaDrpjH14fUwL7B9FA28W/SxhOfrK4nR8
fl6u/bzeAh/kEUtoMEIrJZiodMaPhw/npfSGHZp7UGx/frY/4dBENjb3XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmETJHHWmEvcs37qep13NQuN3UuMB8GA1UdIwQY
MBaAFOt/a1P5iLV3Mg7yiTOApeqCS2rkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjIt
MDJmMzAxM2Q5MWE5LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjItMDJmMzAxM2Q5MWE5
LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGFnkWzy
veOILXsE5QW7HggJKP22ABMLZPxndCRk4b7fB1RRnjeRYEg20gdFY2FWAp3GP+TL
+NV7Gj6ZHPdxUY7jIm1O5IEepThO70aj4H5dkDji3+P2ZFv29REi0vAtlQVUOiWo
CHYNl3CTzf8gt8NRj+9PmtGTXL6N2xQtVks1NAt27YFUP6u8Cp0Sobzh/mE0FN8k
7r63ZHQGMKF7tLIdO2jSM6m3Z0GAR88ipPG+syfeJ/SPodMRz0m36krFxLsD/o9a
XapCGuxKiVzBoWZTebvVLWAjsbAlsiVsi1bQ8DGlqB3vRIUrDO+V0vf090OvyNff
CLXHR0zBWcIeOg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:29 2025 by rpki-client