Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: 1dzMsjM8l7TJpZjra+1ZX57KFOcP2/k5ZpKt/nzA1dM=
Subject key identifier: 9A:97:75:29:16:72:DD:5A:F2:68:00:4A:F6:58:28:3C:3A:1E:0E:61
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019A73018E81E048CC1ABB3F9C1513B01A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 13:01:12 +0000
Manifest this update: Tue 11 Nov 2025 13:01:12 +0000
Manifest next update: Wed 12 Nov 2025 13:01:12 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: hz1RbcFVypxwq/2dWhjdCT1UvNcSe3mPK6/ABPziWbc=)
2: eC50Tjr8BXSvc4oxm2DLYwTY1Zs.roa (hash: rtWUKkTDPRPsMUD0SVGxmUAo9zw5BtLbRAhLy1ejZ30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:8e:81:e0:48:cc:1a:bb:3f:9c:15:13:b0:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Nov 11 13:01:12 2025 GMT
Not After : Nov 12 13:01:12 2025 GMT
Subject: CN=9a9775291672dd5af268004af658283c3a1e0e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:6e:c6:81:6b:8b:f4:52:0b:82:cf:61:f7:
6b:9b:ae:a7:ad:49:28:9e:28:60:81:53:7f:41:5e:
2f:77:6a:11:80:fa:0a:b5:4a:75:9e:fd:5a:73:5b:
6c:5b:96:44:d7:6b:8d:eb:1a:26:b7:42:59:ca:5a:
15:d2:4e:bc:af:a8:14:be:5d:47:59:b5:18:49:41:
8b:cb:2b:9f:dc:c6:d2:3d:bb:82:5b:89:e4:d3:c7:
ed:0b:9c:3e:b3:c7:33:24:29:02:fb:66:60:7e:bd:
ff:01:3b:9a:a2:94:6d:67:a5:39:0d:f4:e3:9b:b5:
51:24:73:e8:22:53:a3:0a:e1:75:be:9e:23:05:d2:
47:9c:80:29:d8:65:90:96:5b:74:f1:05:e0:49:45:
e0:99:71:9d:e1:b7:f1:41:56:af:b8:e1:e4:72:3e:
8f:50:34:f2:f9:1d:b0:b0:7d:85:cd:12:90:15:cd:
f0:eb:dc:8a:ec:e3:9c:78:74:25:e7:25:84:9e:0a:
45:3c:14:0a:72:79:20:78:1b:67:2b:8a:cd:9f:45:
3f:1a:1b:d2:ac:ec:48:96:13:97:e5:ea:6e:4e:fc:
83:2a:71:56:20:1f:07:7d:ed:3f:cf:ab:5c:bc:52:
00:40:cc:95:a1:35:28:53:80:8a:8c:a2:1f:5a:07:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:75:29:16:72:DD:5A:F2:68:00:4A:F6:58:28:3C:3A:1E:0E:61
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:17:aa:2c:6d:8b:79:ac:01:f4:ac:45:d6:57:64:ae:cd:6e:
d3:96:45:d3:54:77:19:ac:5e:35:c8:c4:eb:49:44:49:54:bf:
92:b8:f3:4c:7d:a6:0b:08:95:5e:27:67:c6:60:ec:78:9b:e9:
a2:e7:e6:98:52:09:50:04:fe:1b:12:54:ef:a7:2e:43:31:14:
b3:35:6b:30:48:11:8f:06:b5:38:76:32:6d:32:c6:a0:ab:8c:
d0:9e:0f:39:93:a2:f3:65:6a:2f:d6:54:d0:b5:1d:72:12:1e:
f0:02:e5:7b:52:0b:e6:c9:54:e5:65:e5:b3:24:4d:44:d0:0d:
59:c8:50:dd:4f:f4:5f:13:0b:86:ef:94:d5:9d:3e:67:c5:e3:
c9:e9:7d:79:98:b8:93:0c:94:53:dd:24:07:f2:96:c4:15:32:
99:7f:4a:df:9c:b9:e2:1e:9f:0d:ee:7f:a5:43:0f:44:05:bf:
e3:54:15:6a:0b:74:4a:c5:ac:a4:2a:e6:e7:a6:91:68:ba:2e:
52:6a:a5:d1:dc:52:ff:fa:25:31:68:de:88:43:9b:16:64:6e:
9b:67:ed:a7:8f:a5:86:0b:cb:d1:a3:e3:91:c8:2e:f8:62:cc:
74:79:a2:5f:ff:ac:2e:d0:d1:29:23:77:23:30:ba:20:31:d2:
8a:cb:b2:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAY6B4EjMGrs/nBUTsBpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj
MmUwOWQwHhcNMjUxMTExMTMwMTEyWhcNMjUxMTEyMTMwMTEyWjAzMTEwLwYDVQQD
Eyg5YTk3NzUyOTE2NzJkZDVhZjI2ODAwNGFmNjU4MjgzYzNhMWUwZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4duxoFri/RSC4LPYfdrm66nrUko
nihggVN/QV4vd2oRgPoKtUp1nv1ac1tsW5ZE12uN6xomt0JZyloV0k68r6gUvl1H
WbUYSUGLyyuf3MbSPbuCW4nk08ftC5w+s8czJCkC+2Zgfr3/ATuaopRtZ6U5DfTj
m7VRJHPoIlOjCuF1vp4jBdJHnIAp2GWQllt08QXgSUXgmXGd4bfxQVavuOHkcj6P
UDTy+R2wsH2FzRKQFc3w69yK7OOceHQl5yWEngpFPBQKcnkgeBtnK4rNn0U/GhvS
rOxIlhOX5epuTvyDKnFWIB8Hfe0/z6tcvFIAQMyVoTUoU4CKjKIfWgfDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqXdSkWct1a8mgASvZYKDw6Hg5hMB8GA1UdIwQY
MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt
MmY5YjAwZmRjNWQzLzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz
LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACheqLG2L
eawB9KxF1ldkrs1u05ZF01R3GaxeNcjE60lESVS/krjzTH2mCwiVXidnxmDseJvp
oufmmFIJUAT+GxJU76cuQzEUszVrMEgRjwa1OHYybTLGoKuM0J4POZOi82VqL9ZU
0LUdchIe8ALle1IL5slU5WXlsyRNRNANWchQ3U/0XxMLhu+U1Z0+Z8Xjyel9eZi4
kwyUU90kB/KWxBUymX9K35y54h6fDe5/pUMPRAW/41QVagt0SsWspCrm56aRaLou
Umql0dxS//olMWjeiEObFmRum2ftp4+lhgvL0aPjkcgu+GLMdHmiX/+sLtDRKSN3
IzC6IDHSisuyeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:03 2025 by rpki-client