Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier: bZbq+bnvZ4qFFwBVQ/+YkTRzlLCa7yap5Xt/YvD5lB4=
Subject key identifier: 79:C0:56:4D:F7:DE:2D:7C:E1:B2:9C:CF:90:6E:1F:49:13:81:00:90
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial: 019A1F1A7EF940F93F9D35AD3BA6FA799FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number: 0768
Signing time: Sun 26 Oct 2025 06:00:21 +0000
Manifest this update: Sun 26 Oct 2025 06:00:21 +0000
Manifest next update: Mon 27 Oct 2025 06:00:21 +0000
Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: JQEFdwH3rNIc2SsmbzDSyPRN3l7BdNB6J+egBpUkeng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:7e:f9:40:f9:3f:9d:35:ad:3b:a6:fa:79:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Validity
Not Before: Oct 26 06:00:21 2025 GMT
Not After : Oct 27 06:00:21 2025 GMT
Subject: CN=79c0564df7de2d7ce1b29ccf906e1f4913810090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:ee:e6:ef:a4:df:8f:9b:60:d9:01:0e:1b:
4f:96:2b:28:cc:66:b5:25:c9:ed:f4:69:e8:57:d4:
8f:70:92:24:63:a4:55:2c:7c:27:87:ab:b1:23:87:
54:81:4e:da:4c:1f:32:59:3f:9d:fc:dd:4e:6e:01:
22:bc:15:26:70:7f:52:a1:cf:e3:dc:6a:c0:91:de:
f7:39:d3:70:19:46:c2:98:8d:0a:62:98:2a:a3:d8:
cf:a1:c4:25:43:2f:26:25:3e:de:c3:7d:bf:d8:61:
5c:14:01:e1:eb:dd:bd:c7:d6:58:3e:9f:db:39:42:
30:43:c0:0d:35:2b:31:8b:ae:0b:d3:f6:64:79:14:
50:1f:46:1b:f9:9c:8b:33:5d:c7:ad:93:98:f4:a9:
57:c4:a6:1b:53:51:cc:a4:d9:b6:d8:40:ac:b5:cd:
88:7c:48:5b:07:32:27:f6:7e:90:fd:09:61:f8:a8:
f8:85:40:87:43:c9:c9:d6:ca:f8:47:8d:e3:74:f7:
28:2a:84:41:94:05:b4:80:08:3f:b6:45:98:0b:aa:
37:d3:c5:de:aa:bd:41:fc:7a:a5:55:f1:0a:81:e3:
83:c8:95:9b:7a:78:ad:5a:e6:6c:15:02:b3:4e:af:
8b:96:18:c6:bd:29:5d:56:37:2a:2a:1c:39:6f:27:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C0:56:4D:F7:DE:2D:7C:E1:B2:9C:CF:90:6E:1F:49:13:81:00:90
X509v3 Authority Key Identifier:
keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:34:b6:42:8e:f5:29:cb:93:c9:de:7d:f6:a3:c0:2d:be:
4d:74:0b:f1:ff:36:15:79:e1:1c:a2:46:37:14:09:13:33:94:
0d:c4:4a:59:d8:6e:14:c7:d2:73:db:bf:1b:5c:e3:ea:92:7e:
0a:0a:42:31:d4:d2:33:a8:ad:ef:9f:ae:bf:a8:e7:26:30:ac:
f7:7a:a8:8a:ee:70:1b:83:ac:fe:92:ab:ce:8b:41:3a:c1:91:
c2:df:61:e4:4d:95:9e:0e:12:db:4a:64:fa:7d:c8:0a:c5:5c:
41:3f:62:0c:28:d7:c4:f5:1f:c9:62:a9:f7:34:3d:11:57:89:
a0:cb:ae:c6:bf:8c:15:0b:4e:5a:29:03:33:c1:43:76:e0:0e:
e2:4e:fe:a7:ef:2b:a3:80:1a:17:9e:cd:85:ee:0d:cf:d1:3c:
c5:9c:3a:d6:1f:2f:b2:ee:a9:81:78:ed:71:e9:0a:a1:0f:d2:
b4:41:05:50:58:6d:5b:61:68:4b:c8:15:11:e6:02:66:14:cc:
dc:e5:22:45:9a:3b:d1:be:87:38:2a:85:9c:1f:2b:b3:86:a1:
c7:f8:5d:5b:c4:0d:26:8f:d0:28:21:45:cb:47:19:3b:9c:0b:
69:1e:a5:9f:6e:99:88:8b:0e:e9:07:c1:3d:a9:16:00:f6:2b:
ac:2e:51:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofGn75QPk/nTWtO6b6eZ+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTJiNzI4OGM1NTllMWVkNGEzOTA1N2UwYWUwYzJiZWM0
MmRhYTIwHhcNMjUxMDI2MDYwMDIxWhcNMjUxMDI3MDYwMDIxWjAzMTEwLwYDVQQD
Eyg3OWMwNTY0ZGY3ZGUyZDdjZTFiMjljY2Y5MDZlMWY0OTEzODEwMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2vu5u+k34+bYNkBDhtPlisozGa1
Jcnt9GnoV9SPcJIkY6RVLHwnh6uxI4dUgU7aTB8yWT+d/N1ObgEivBUmcH9Soc/j
3GrAkd73OdNwGUbCmI0KYpgqo9jPocQlQy8mJT7ew32/2GFcFAHh6929x9ZYPp/b
OUIwQ8ANNSsxi64L0/ZkeRRQH0Yb+ZyLM13HrZOY9KlXxKYbU1HMpNm22ECstc2I
fEhbBzIn9n6Q/Qlh+Kj4hUCHQ8nJ1sr4R43jdPcoKoRBlAW0gAg/tkWYC6o308Xe
qr1B/HqlVfEKgeODyJWbenitWuZsFQKzTq+LlhjGvSldVjcqKhw5bycpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnAVk333i184bKcz5BuH0kTgQCQMB8GA1UdIwQY
MBaAFHEStyiMVZ4e1KOQV+CuDCvsQtqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmIt
MTU2ZjNjZmJjMTYxLzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmItMTU2ZjNjZmJjMTYx
LzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhc0tkKO
9SnLk8neffajwC2+TXQL8f82FXnhHKJGNxQJEzOUDcRKWdhuFMfSc9u/G1zj6pJ+
CgpCMdTSM6it75+uv6jnJjCs93qoiu5wG4Os/pKrzotBOsGRwt9h5E2Vng4S20pk
+n3ICsVcQT9iDCjXxPUfyWKp9zQ9EVeJoMuuxr+MFQtOWikDM8FDduAO4k7+p+8r
o4AaF57Nhe4Nz9E8xZw61h8vsu6pgXjtcekKoQ/StEEFUFhtW2FoS8gVEeYCZhTM
3OUiRZo70b6HOCqFnB8rs4ahx/hdW8QNJo/QKCFFy0cZO5wLaR6ln26ZiIsO6QfB
PakWAPYrrC5RqQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 11:10:31 2025 by rpki-client