Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File: C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier: AD+HF501SuDPSqVY8eQgklfOe5vLjMigx78t90fl2yU=
Subject key identifier: EE:76:1C:EF:CD:CC:C6:F4:86:B3:A1:06:9A:73:53:B2:23:34:97:1C
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 019A7113064E8F2C1E33B3D11FE98D83B907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number: 0D09
Signing time: Tue 11 Nov 2025 04:01:03 +0000
Manifest this update: Tue 11 Nov 2025 04:01:03 +0000
Manifest next update: Wed 12 Nov 2025 04:01:03 +0000
Files and hashes: 1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: hf6IUvkKHIPibTO5lO5BqcIPDWkJIlAzCSQ1KK5mLLY=)
2: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (hash: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:06:4e:8f:2c:1e:33:b3:d1:1f:e9:8d:83:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Nov 11 04:01:03 2025 GMT
Not After : Nov 12 04:01:03 2025 GMT
Subject: CN=ee761cefcdccc6f486b3a1069a7353b22334971c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:b6:c8:2e:fb:f8:ef:db:de:85:43:b6:d9:
95:92:0e:53:25:cd:c7:1c:1c:03:5a:8e:6d:9f:eb:
b2:c2:64:7c:46:b0:28:4f:a1:ff:be:18:20:a2:c1:
50:77:71:dd:5f:19:b2:a3:ee:f1:fa:ca:2c:cf:45:
da:90:53:4e:6f:c0:82:ad:37:17:02:3f:65:db:1b:
af:a4:9f:18:78:fd:de:7c:43:ac:b9:34:41:11:00:
1a:00:62:c1:ba:f2:c6:83:bb:49:6f:e5:67:f6:bd:
67:8b:8d:cd:b1:cf:91:7f:33:a8:3f:60:f6:cc:18:
87:ec:ef:2b:b9:c5:ed:26:75:ed:7d:1c:77:a0:4c:
3c:5b:51:57:fa:80:33:ca:7b:15:21:55:f3:2d:b1:
53:5e:75:4f:ba:08:c7:05:61:cf:91:c7:4d:84:8c:
40:ba:d2:73:b3:38:d2:12:a7:b1:60:d0:fa:06:39:
5d:aa:84:2d:b8:3e:63:6c:b1:8d:7f:0e:e7:ce:41:
2c:60:14:3f:2d:b0:3e:e8:54:35:0b:2f:bc:88:d4:
37:e9:7d:06:0c:02:2c:af:35:88:d1:d8:e8:83:63:
4f:2c:6c:34:c4:81:9c:76:9a:39:60:fe:c7:70:a4:
31:e2:f9:c9:ef:ea:48:d5:1b:83:02:4e:3f:7c:b2:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:76:1C:EF:CD:CC:C6:F4:86:B3:A1:06:9A:73:53:B2:23:34:97:1C
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7d:d0:66:63:57:4e:f7:42:9a:2b:22:8b:c5:f9:89:ee:b3:
22:33:a9:44:22:f5:85:6c:91:93:be:68:6f:52:e5:60:b8:09:
e7:47:dd:57:a5:f7:ce:25:5c:75:1c:06:aa:ed:99:37:00:fd:
6d:83:99:41:a0:8f:9d:64:33:6f:e2:46:ef:75:77:9e:ca:de:
00:b7:da:69:1f:d9:1d:da:26:b4:a9:48:5c:9e:36:9d:b1:0e:
ba:df:2e:74:f7:6f:4d:7c:d5:b7:b0:c1:8f:21:e0:d6:34:4b:
a3:37:f7:1b:8b:3a:d1:86:f7:94:12:53:c2:e9:fd:ae:6c:35:
3a:88:be:4c:7d:15:9c:a0:2a:64:b1:ec:0f:d1:41:48:f4:2b:
41:66:4c:f8:22:da:82:ca:1b:2a:bb:02:0c:6a:ef:9e:e2:6e:
4e:1b:15:aa:be:69:11:13:70:29:ea:7b:9c:94:dd:6a:f4:fd:
06:3f:b4:14:d7:b5:cb:8d:38:d2:bd:86:8e:5f:dd:7f:15:5a:
67:f8:87:4b:44:ea:ff:9e:65:7a:10:21:36:fe:df:ec:2d:e5:
cd:d7:d7:b6:fe:c8:f3:f6:af:c1:9a:f9:84:ad:72:76:0b:f8:
63:86:53:c4:0a:9e:37:3e:76:6c:07:84:cf:db:e3:0b:23:7e:
58:1b:9b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEwZOjyweM7PRH+mNg7kHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmI3NTI5Mjg5Zjg4ZmI0YmI4N2IzOWU3YmVkYzlkOWYy
N2Q1ZmEwHhcNMjUxMTExMDQwMTAzWhcNMjUxMTEyMDQwMTAzWjAzMTEwLwYDVQQD
EyhlZTc2MWNlZmNkY2NjNmY0ODZiM2ExMDY5YTczNTNiMjIzMzQ5NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Fa2yC77+O/b3oVDttmVkg5TJc3H
HBwDWo5tn+uywmR8RrAoT6H/vhggosFQd3HdXxmyo+7x+sosz0XakFNOb8CCrTcX
Aj9l2xuvpJ8YeP3efEOsuTRBEQAaAGLBuvLGg7tJb+Vn9r1ni43Nsc+RfzOoP2D2
zBiH7O8rucXtJnXtfRx3oEw8W1FX+oAzynsVIVXzLbFTXnVPugjHBWHPkcdNhIxA
utJzszjSEqexYND6BjldqoQtuD5jbLGNfw7nzkEsYBQ/LbA+6FQ1Cy+8iNQ36X0G
DAIsrzWI0djog2NPLGw0xIGcdpo5YP7HcKQx4vnJ7+pI1RuDAk4/fLJEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO52HO/NzMb0hrOhBppzU7IjNJccMB8GA1UdIwQY
MBaAFAv7dSkon4j7S7h7Oee+3J2fJ9X6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQt
MjczZGI3ZDUzODk4LzEvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQtMjczZGI3ZDUzODk4
LzEvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX3QZmNX
TvdCmisii8X5ie6zIjOpRCL1hWyRk75ob1LlYLgJ50fdV6X3ziVcdRwGqu2ZNwD9
bYOZQaCPnWQzb+JG73V3nsreALfaaR/ZHdomtKlIXJ42nbEOut8udPdvTXzVt7DB
jyHg1jRLozf3G4s60Yb3lBJTwun9rmw1Ooi+TH0VnKAqZLHsD9FBSPQrQWZM+CLa
gsobKrsCDGrvnuJuThsVqr5pERNwKep7nJTdavT9Bj+0FNe1y4040r2Gjl/dfxVa
Z/iHS0Tq/55lehAhNv7f7C3lzdfXtv7I8/avwZr5hK1ydgv4Y4ZTxAqeNz52bAeE
z9vjCyN+WBubvQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client