Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
File: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft (raw, json)
Hash identifier: zn3WvF11AG0T/JFW1nXLlzG1l5LU24jdr0dDuoMruvQ=
Subject key identifier: 28:34:80:F6:AD:B0:9D:97:AE:E5:E4:3E:BF:65:29:F1:1D:A1:84:1A
Authority key identifier: D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
Certificate issuer: /CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Certificate serial: 019A70A507EAC9136B7D8A2C65E4903D16AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
Manifest number: CA
Signing time: Tue 11 Nov 2025 02:00:54 +0000
Manifest this update: Tue 11 Nov 2025 02:00:54 +0000
Manifest next update: Wed 12 Nov 2025 02:00:54 +0000
Files and hashes: 1: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl (hash: qUM369rb6suOd+vNzKW7Y7g77w4UHRkWRZJYkv9zgA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:07:ea:c9:13:6b:7d:8a:2c:65:e4:90:3d:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Validity
Not Before: Nov 11 02:00:54 2025 GMT
Not After : Nov 12 02:00:54 2025 GMT
Subject: CN=283480f6adb09d97aee5e43ebf6529f11da1841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:74:c2:fe:5a:3d:fe:ec:2c:20:49:06:2d:
b7:4d:ac:01:30:d5:78:4a:c1:8d:3d:47:43:e8:da:
20:29:eb:0c:ab:df:62:27:38:47:c7:72:4d:dd:76:
11:e8:52:af:12:fd:2b:89:30:53:bf:19:cf:13:be:
86:97:85:8a:00:9a:0c:fc:1f:4d:fc:08:5c:12:ae:
f5:b9:6a:d9:35:06:50:3b:d6:7e:8e:18:9f:6d:77:
05:6d:b8:ca:54:86:4c:f5:7e:a8:58:66:a7:c8:ce:
23:1b:76:71:7b:0f:6c:86:fb:48:2e:9f:16:07:a8:
a5:86:52:b1:ac:8b:fe:de:f0:f9:87:88:69:8e:20:
67:25:85:a3:3a:fb:04:10:2e:56:da:82:fe:3e:1f:
5f:4e:84:cf:d1:1a:30:c8:6e:84:60:13:ee:d4:a7:
14:ff:32:cf:b4:89:b8:25:c3:79:82:5c:bf:ed:0e:
7b:eb:9f:4e:d5:ac:bd:ee:ae:15:ce:e8:31:07:18:
58:96:81:9b:d6:70:1e:7f:cf:6e:9f:86:a3:6b:74:
27:1d:9a:d0:ff:a7:36:eb:d3:b0:fc:52:07:f6:5d:
bd:4b:81:cb:d2:10:82:2a:48:03:71:80:3b:84:c5:
ef:69:b3:70:c2:a3:e5:56:e3:4f:71:0e:53:5f:5e:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:80:F6:AD:B0:9D:97:AE:E5:E4:3E:BF:65:29:F1:1D:A1:84:1A
X509v3 Authority Key Identifier:
keyid:D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:63:3e:8a:54:c7:43:4d:98:c6:37:46:57:a4:de:c1:44:d1:
b7:fb:d8:81:9a:e2:aa:24:fb:9e:9a:80:83:d2:74:93:71:d1:
5e:40:ef:34:9e:bb:61:cc:5e:c3:33:06:22:29:9c:55:12:1b:
0b:0c:c4:f4:43:81:e4:71:61:e2:b5:01:12:50:44:06:aa:fb:
a7:74:f4:c6:2b:58:d9:55:ad:8c:f2:53:a1:96:c4:e8:2b:17:
bb:bb:29:f6:7c:60:53:fb:8c:5f:37:0d:78:1c:48:ed:9b:0e:
6f:9b:a7:a8:5d:a7:40:00:04:b5:c9:9c:56:e7:b4:29:d7:61:
45:0a:3c:53:26:3d:df:0f:98:d7:73:53:70:98:5b:b4:9c:d0:
e1:df:85:b0:2f:26:22:be:ac:ab:5d:f8:ce:0e:05:99:cc:4a:
f5:70:e9:38:1b:77:21:66:ab:73:2c:60:a3:db:34:76:8d:eb:
27:8c:11:77:67:6a:65:14:ac:32:f6:16:53:43:1a:92:75:fc:
a1:96:c2:dc:bc:96:d2:dc:b2:c1:b2:34:9f:8d:fc:3a:40:c9:
e7:9b:36:39:0d:8e:c2:84:86:60:f7:57:c3:1f:bf:df:f0:2a:
cb:72:f2:e3:e6:98:c7:db:91:6f:97:7a:9c:1a:8a:ff:45:71:
c2:da:5f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQfqyRNrfYosZeSQPRauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGYwYzJiMmFkMTlmOGMwNmI0ZTEyNDkxZDYxMjk4NjQ0
NzFjYTgwHhcNMjUxMTExMDIwMDU0WhcNMjUxMTEyMDIwMDU0WjAzMTEwLwYDVQQD
EygyODM0ODBmNmFkYjA5ZDk3YWVlNWU0M2ViZjY1MjlmMTFkYTE4NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC50wv5aPf7sLCBJBi23TawBMNV4
SsGNPUdD6NogKesMq99iJzhHx3JN3XYR6FKvEv0riTBTvxnPE76Gl4WKAJoM/B9N
/AhcEq71uWrZNQZQO9Z+jhifbXcFbbjKVIZM9X6oWGanyM4jG3Zxew9shvtILp8W
B6ilhlKxrIv+3vD5h4hpjiBnJYWjOvsEEC5W2oL+Ph9fToTP0RowyG6EYBPu1KcU
/zLPtIm4JcN5gly/7Q57659O1ay97q4VzugxBxhYloGb1nAef89un4aja3QnHZrQ
/6c269Ow/FIH9l29S4HL0hCCKkgDcYA7hMXvabNwwqPlVuNPcQ5TX17TTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg0gPatsJ2XruXkPr9lKfEdoYQaMB8GA1UdIwQY
MBaAFNSPDCsq0Z+MBrThJJHWEphkRxyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAt
OTM2MTk2NzRhNDJlLzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAtOTM2MTk2NzRhNDJl
LzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGM+ilTH
Q02YxjdGV6TewUTRt/vYgZriqiT7npqAg9J0k3HRXkDvNJ67YcxewzMGIimcVRIb
CwzE9EOB5HFh4rUBElBEBqr7p3T0xitY2VWtjPJToZbE6CsXu7sp9nxgU/uMXzcN
eBxI7ZsOb5unqF2nQAAEtcmcVue0KddhRQo8UyY93w+Y13NTcJhbtJzQ4d+FsC8m
Ir6sq134zg4FmcxK9XDpOBt3IWarcyxgo9s0do3rJ4wRd2dqZRSsMvYWU0MaknX8
oZbC3LyW0tyywbI0n438OkDJ55s2OQ2OwoSGYPdXwx+/3/Aqy3Ly4+aYx9uRb5d6
nBqK/0VxwtpfEg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:36:03 2025 by rpki-client