Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
File: aluKc4anCgzU9gC-dYHe-JRHOkE.mft (raw, json)
Hash identifier: zrrkPRpit40wp3i4okD98sJyHNVPT48NXCmpNH5U154=
Subject key identifier: 7D:36:C0:6E:12:94:E0:7B:67:DA:A9:05:3A:C3:DC:23:38:B3:F3:A9
Authority key identifier: 6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
Certificate issuer: /CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Certificate serial: 019A706E69332DDA8005C8B0CC1700AECEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
Manifest number: 083D
Signing time: Tue 11 Nov 2025 01:01:15 +0000
Manifest this update: Tue 11 Nov 2025 01:01:15 +0000
Manifest next update: Wed 12 Nov 2025 01:01:15 +0000
Files and hashes: 1: aluKc4anCgzU9gC-dYHe-JRHOkE.crl (hash: ef5Z9sNfD2+xC5w5ie8Njvh80x+SeeCn8x4VgEBNfck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:69:33:2d:da:80:05:c8:b0:cc:17:00:ae:ce:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Validity
Not Before: Nov 11 01:01:15 2025 GMT
Not After : Nov 12 01:01:15 2025 GMT
Subject: CN=7d36c06e1294e07b67daa9053ac3dc2338b3f3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:94:a9:58:eb:ae:a1:0b:84:8f:2a:f0:b3:
87:13:ea:de:23:e8:57:73:80:c2:8e:c3:29:47:39:
f1:14:bf:57:c5:d4:96:f6:50:06:29:c4:e0:26:1d:
b3:6d:cd:db:59:b7:b1:6f:1b:ea:14:77:15:74:72:
f8:15:69:aa:18:4e:2d:b0:af:c1:b9:f6:e8:56:76:
cd:5a:41:8a:f2:ba:9a:a2:8e:e3:b6:54:f6:7d:41:
de:be:ae:a2:5f:06:56:39:af:35:e6:8f:a7:4f:84:
a8:8c:f7:c0:0c:7f:5d:73:40:d7:f4:95:6f:4b:dc:
9d:a3:97:50:1a:36:5a:a3:d4:35:1b:30:7d:fe:b7:
0c:cd:d5:f9:c7:58:75:62:08:fa:0a:b2:ae:dc:40:
a6:b8:c1:dc:67:33:a8:25:37:a0:92:e9:ef:2f:e8:
3f:4d:25:d0:7a:f3:21:3a:ef:f7:42:94:dc:d0:cc:
2b:9b:de:9f:02:57:c3:7c:8a:66:80:a5:a5:68:01:
5e:b1:20:fe:84:ef:78:f5:ff:2e:51:11:ee:f7:c6:
83:d8:1b:28:6f:b6:60:89:35:4e:64:3d:b9:c5:65:
7c:be:84:93:a3:4f:be:87:24:e0:c7:46:07:59:cd:
dc:1d:59:51:a9:76:bc:91:cb:28:5b:38:51:4a:54:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:C0:6E:12:94:E0:7B:67:DA:A9:05:3A:C3:DC:23:38:B3:F3:A9
X509v3 Authority Key Identifier:
keyid:6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:89:73:9a:0e:66:51:c0:63:56:f7:8b:c5:ad:19:78:ca:50:
77:90:c0:e9:4a:cf:0e:f2:4a:da:05:20:71:50:3b:cf:02:0c:
d0:ca:53:2c:0f:24:e9:42:77:b5:7e:6b:9b:ba:43:83:c9:aa:
91:06:50:67:17:2d:88:aa:8b:37:26:6f:42:ca:49:f2:ce:86:
b3:c0:08:c8:4c:01:8d:88:d1:c7:99:45:d7:b7:c4:ad:d1:06:
48:52:8d:dd:5f:83:75:ee:23:c0:ef:e3:29:c3:29:ea:a2:4d:
13:cf:94:cc:9d:41:f5:a2:25:b9:fe:e8:56:25:93:2d:ab:ab:
70:be:32:0a:5b:cb:fb:5f:27:6b:52:aa:36:86:3d:1a:e2:07:
1c:ac:e7:7d:2e:6c:4e:70:82:29:5a:ce:fd:43:2a:08:8f:17:
8d:93:d1:15:8a:17:fd:c3:ef:73:41:f4:1a:35:8a:fd:23:e3:
a9:90:4b:ad:ca:5b:55:8b:c7:67:e5:4c:39:28:10:a2:80:ed:
41:aa:42:a7:ea:26:03:89:fc:c9:6a:31:3f:d3:a5:3c:f2:ba:
86:c1:cb:fd:11:87:7d:ab:7f:6d:f7:29:16:25:39:6b:6f:8f:
4d:81:ef:72:93:5c:fa:0e:40:91:bc:86:3c:b8:73:3a:38:76:
db:02:18:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbmkzLdqABciwzBcArs6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNWI4YTczODZhNzBhMGNkNGY2MDBiZTc1ODFkZWY4OTQ0
NzNhNDEwHhcNMjUxMTExMDEwMTE1WhcNMjUxMTEyMDEwMTE1WjAzMTEwLwYDVQQD
Eyg3ZDM2YzA2ZTEyOTRlMDdiNjdkYWE5MDUzYWMzZGMyMzM4YjNmM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHKUqVjrrqELhI8q8LOHE+reI+hX
c4DCjsMpRznxFL9XxdSW9lAGKcTgJh2zbc3bWbexbxvqFHcVdHL4FWmqGE4tsK/B
ufboVnbNWkGK8rqaoo7jtlT2fUHevq6iXwZWOa815o+nT4SojPfADH9dc0DX9JVv
S9ydo5dQGjZao9Q1GzB9/rcMzdX5x1h1Ygj6CrKu3ECmuMHcZzOoJTegkunvL+g/
TSXQevMhOu/3QpTc0Mwrm96fAlfDfIpmgKWlaAFesSD+hO949f8uURHu98aD2Bso
b7ZgiTVOZD25xWV8voSTo0++hyTgx0YHWc3cHVlRqXa8kcsoWzhRSlQhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH02wG4SlOB7Z9qpBTrD3CM4s/OpMB8GA1UdIwQY
MBaAFGpbinOGpwoM1PYAvnWB3viURzpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWx1S2M0YW5DZ3pVOWdDLWRZSGUtSlJIT2tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84NTRjMjEtNWUxYS00NTFkLWFlYTEt
ZmNhMDc0MWE1ODZlLzEvYWx1S2M0YW5DZ3pVOWdDLWRZSGUtSlJIT2tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS84NTRjMjEtNWUxYS00NTFkLWFlYTEtZmNhMDc0MWE1ODZl
LzEvYWx1S2M0YW5DZ3pVOWdDLWRZSGUtSlJIT2tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIlzmg5m
UcBjVveLxa0ZeMpQd5DA6UrPDvJK2gUgcVA7zwIM0MpTLA8k6UJ3tX5rm7pDg8mq
kQZQZxctiKqLNyZvQspJ8s6Gs8AIyEwBjYjRx5lF17fErdEGSFKN3V+Dde4jwO/j
KcMp6qJNE8+UzJ1B9aIluf7oViWTLaurcL4yClvL+18na1KqNoY9GuIHHKznfS5s
TnCCKVrO/UMqCI8XjZPRFYoX/cPvc0H0GjWK/SPjqZBLrcpbVYvHZ+VMOSgQooDt
QapCp+omA4n8yWoxP9OlPPK6hsHL/RGHfat/bfcpFiU5a2+PTYHvcpNc+g5AkbyG
PLhzOjh22wIY/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:36 2025 by rpki-client