Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: C7iZKfcrR90Zdm8+cWuHppUu7xjb43mehUA3jkan3dU=
Subject key identifier: 96:EF:DD:F1:DF:F9:7C:5F:A1:14:A3:AD:E2:E1:27:6F:0A:3B:EE:E1
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 019A7225EE3E172D3022BCEF98DFEF5933CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0A77
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: OH7d9vxHkT9XAgxW3yGRAzLpJLkCH9rz/OUUaXgGJRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ee:3e:17:2d:30:22:bc:ef:98:df:ef:59:33:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=96efddf1dff97c5fa114a3ade2e1276f0a3beee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:ee:3f:9d:88:b7:4a:53:5c:cb:13:44:1d:
d6:9e:fd:ab:8a:f3:5c:5b:b5:8b:c9:7a:da:2c:71:
78:6e:a3:68:5e:26:9a:55:6e:2b:c2:0d:73:7f:e1:
ed:01:12:53:e9:d9:86:16:ec:c3:26:6a:57:9a:12:
e0:07:c9:ad:20:de:2e:2e:af:54:ae:85:13:db:80:
c7:65:15:1b:af:0c:74:f2:5a:18:e5:1d:0f:47:4b:
f7:b8:dd:9d:26:52:73:81:e0:3e:1d:8d:b3:34:71:
ed:f6:c7:98:62:61:57:1e:d5:6c:42:1b:8a:ae:87:
cd:d8:ba:bf:e6:5b:3b:55:c2:e7:66:81:b7:56:76:
24:f4:f6:2f:97:1c:7c:dc:da:60:b2:b8:da:c7:64:
5c:05:16:6d:2b:c2:49:fb:fa:b7:38:00:10:f4:6e:
6b:cc:ab:ef:a1:c8:7a:45:87:c8:01:4d:6d:2a:d2:
c7:1c:d8:6c:36:51:bc:5f:6b:82:1a:dc:95:60:3e:
c6:e8:53:8d:1c:e5:f0:f6:80:d1:27:4e:7c:0b:20:
91:d1:90:3b:0b:6a:74:17:22:2c:5a:ae:db:c6:77:
31:08:1e:37:f5:ed:30:db:8b:7f:61:d4:c2:60:37:
bf:9d:f8:15:ed:52:38:f1:fd:7f:80:0e:05:85:ca:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:DD:F1:DF:F9:7C:5F:A1:14:A3:AD:E2:E1:27:6F:0A:3B:EE:E1
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:ee:18:a6:86:14:d5:69:6e:4a:ce:f3:d0:7e:3c:4b:77:
86:f0:8c:6a:fc:2e:22:be:21:3b:c3:03:32:aa:a2:ed:68:f7:
da:1a:5b:04:f3:f4:f8:bc:0d:50:d1:9b:ad:3f:fa:7d:38:a0:
e0:98:36:0f:67:b2:2d:bb:7a:ed:cd:73:a1:d7:5a:6e:9c:db:
53:92:3f:de:59:e3:c8:66:af:b1:03:83:d3:f9:ed:da:22:80:
81:20:df:0c:c9:2f:e3:b1:23:f8:79:50:ba:a6:7e:59:4e:3b:
42:70:ba:85:19:a6:ef:10:16:c9:c1:4a:30:ee:00:2d:57:10:
7a:e7:f3:f3:78:30:33:f5:32:9e:5a:94:28:fc:dd:5e:5e:72:
f5:f8:a9:4f:5a:a0:87:23:d0:69:81:39:8f:a7:6b:e3:fd:2f:
4a:75:7e:54:cc:4a:2b:de:d9:01:13:63:ff:bf:0f:fb:68:1c:
c7:28:1f:f9:0b:c1:f5:05:ff:9f:7d:9a:4a:cd:f8:1f:f1:c2:
7f:90:cc:b5:8b:f8:cc:f6:52:bb:1f:c4:c1:68:5d:ad:cd:0c:
8c:b8:1d:a0:b4:d5:dd:94:4b:69:15:42:de:f3:89:d5:ba:8b:
a5:d3:65:ae:17:45:93:34:33:ff:c7:bb:4b:49:43:27:94:34:
05:db:3a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJe4+Fy0wIrzvmN/vWTPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODAyYTg2MjFmODc4MjdmZDU5NzIzY2U2NmNiNTljMzhm
OTFmMjEwHhcNMjUxMTExMDkwMTE5WhcNMjUxMTEyMDkwMTE5WjAzMTEwLwYDVQQD
Eyg5NmVmZGRmMWRmZjk3YzVmYTExNGEzYWRlMmUxMjc2ZjBhM2JlZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf/uP52It0pTXMsTRB3Wnv2rivNc
W7WLyXraLHF4bqNoXiaaVW4rwg1zf+HtARJT6dmGFuzDJmpXmhLgB8mtIN4uLq9U
roUT24DHZRUbrwx08loY5R0PR0v3uN2dJlJzgeA+HY2zNHHt9seYYmFXHtVsQhuK
rofN2Lq/5ls7VcLnZoG3VnYk9PYvlxx83Npgsrjax2RcBRZtK8JJ+/q3OAAQ9G5r
zKvvoch6RYfIAU1tKtLHHNhsNlG8X2uCGtyVYD7G6FONHOXw9oDRJ058CyCR0ZA7
C2p0FyIsWq7bxncxCB439e0w24t/YdTCYDe/nfgV7VI48f1/gA4FhcqgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbv3fHf+XxfoRSjreLhJ28KO+7hMB8GA1UdIwQY
MBaAFAiAKoYh+Hgn/VlyPOZstZw4+R8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2Et
ZjE2Zjk5NGVjZjQzLzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2EtZjE2Zjk5NGVjZjQz
LzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3PuGKaG
FNVpbkrO89B+PEt3hvCMavwuIr4hO8MDMqqi7Wj32hpbBPP0+LwNUNGbrT/6fTig
4Jg2D2eyLbt67c1zoddabpzbU5I/3lnjyGavsQOD0/nt2iKAgSDfDMkv47Ej+HlQ
uqZ+WU47QnC6hRmm7xAWycFKMO4ALVcQeufz83gwM/UynlqUKPzdXl5y9fipT1qg
hyPQaYE5j6dr4/0vSnV+VMxKK97ZARNj/78P+2gcxygf+QvB9QX/n32aSs34H/HC
f5DMtYv4zPZSux/EwWhdrc0MjLgdoLTV3ZRLaRVC3vOJ1bqLpdNlrhdFkzQz/8e7
S0lDJ5Q0Bds6Vw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client