Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: fxCi3jiuXLOAE0ch5iKCYXh33dubGcpbuFDvQRVvzTs=
Subject key identifier: EF:72:20:46:DB:5B:C2:F4:28:A5:2B:4B:2E:89:8F:1C:2C:B6:B4:B2
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019A722655C699253A9E5DD0775E47DCD04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 1009
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: RX6xnqseqVFwopFKJ5Pqdc08mG1bEf4q5uZ+0VqihNA=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:55:c6:99:25:3a:9e:5d:d0:77:5e:47:dc:d0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=ef722046db5bc2f428a52b4b2e898f1c2cb6b4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:92:2f:43:c2:2f:e4:19:0d:ad:96:fa:ba:
c7:28:9e:9a:f0:0d:91:c0:7f:f9:78:fb:b6:3f:cc:
e2:70:95:1a:21:b7:1a:c4:8a:39:e5:6e:db:65:dc:
38:a9:5f:ae:22:9f:5f:e1:9e:7d:a4:60:c7:e3:fb:
23:cc:5a:69:f2:c0:45:92:7d:aa:bc:02:1d:1b:7b:
ef:d2:01:62:d1:f3:3d:eb:b6:8b:5d:44:7c:61:2e:
1e:56:90:74:aa:0b:83:a6:81:9e:56:2c:c2:e8:10:
d6:50:dd:fe:1b:73:59:9e:7c:dc:0e:e2:90:f1:f9:
a4:f1:c9:ef:ea:cc:09:e9:cc:3a:15:2a:60:a1:b7:
4a:ba:60:d6:2f:91:e4:b0:28:3a:a5:a2:3a:5a:b4:
5b:c1:cb:75:f7:f0:82:94:2b:a1:e1:3c:60:24:6e:
2a:bb:f2:42:61:96:f9:10:7e:3b:d8:ea:4b:9e:88:
78:96:5d:41:87:d4:fe:1a:d0:d9:45:61:54:45:d5:
a7:b8:17:a9:f0:34:70:95:29:91:51:43:ca:17:21:
fe:ca:07:98:e1:a4:b0:57:1d:45:c2:2c:ff:d4:d8:
37:53:72:75:74:89:42:1f:76:e7:a8:65:23:5e:bd:
47:b7:37:7a:11:92:0d:17:19:c6:52:04:9e:27:1d:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:72:20:46:DB:5B:C2:F4:28:A5:2B:4B:2E:89:8F:1C:2C:B6:B4:B2
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:c6:e1:a5:bb:3f:82:d4:99:33:fc:29:1d:91:a3:b1:fb:
01:ca:88:2c:1c:b3:2c:83:18:08:f9:eb:cc:0d:16:92:22:2c:
64:c8:5b:ba:91:10:33:f6:ba:d7:4e:75:8e:a6:8e:9d:1b:22:
31:bb:79:57:42:3f:8b:84:32:21:06:36:1c:4d:5f:c1:80:09:
ba:d5:aa:80:01:b8:c4:f6:ea:9d:a2:f8:a1:1a:81:68:27:b2:
71:a7:10:fe:59:ab:1f:c4:36:aa:ba:10:a5:3f:07:9e:b1:d6:
6c:ac:0f:e8:72:6b:57:80:ae:58:14:e0:ee:96:12:50:f0:dc:
f8:62:7f:a0:32:38:b9:dd:75:68:fd:42:ce:71:e2:12:36:18:
b7:d5:04:85:a9:5e:d2:a9:94:e8:78:96:0c:e8:7c:de:5f:a7:
b4:9f:b7:04:b5:d7:87:1f:be:4c:49:44:b9:ac:e8:cb:65:a4:
6e:fe:e3:fc:a9:07:7d:c1:b0:db:b2:84:e1:c1:d4:5b:d6:ba:
f5:e1:3b:59:ee:a9:1e:3d:49:3f:d3:27:b5:15:13:c1:db:c4:
f9:37:b9:24:60:6a:d8:0a:9b:a4:e1:a9:d9:c5:90:3a:4b:fb:
89:f7:ab:8b:5e:cf:97:2b:fc:1a:a4:99:2d:de:87:be:14:e6:
b5:a9:5f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlXGmSU6nl3Qd15H3NBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx
ODBmNTMwHhcNMjUxMTExMDkwMTQ2WhcNMjUxMTEyMDkwMTQ2WjAzMTEwLwYDVQQD
EyhlZjcyMjA0NmRiNWJjMmY0MjhhNTJiNGIyZTg5OGYxYzJjYjZiNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzGSL0PCL+QZDa2W+rrHKJ6a8A2R
wH/5ePu2P8zicJUaIbcaxIo55W7bZdw4qV+uIp9f4Z59pGDH4/sjzFpp8sBFkn2q
vAIdG3vv0gFi0fM967aLXUR8YS4eVpB0qguDpoGeVizC6BDWUN3+G3NZnnzcDuKQ
8fmk8cnv6swJ6cw6FSpgobdKumDWL5HksCg6paI6WrRbwct19/CClCuh4TxgJG4q
u/JCYZb5EH472OpLnoh4ll1Bh9T+GtDZRWFURdWnuBep8DRwlSmRUUPKFyH+ygeY
4aSwVx1Fwiz/1Ng3U3J1dIlCH3bnqGUjXr1Htzd6EZINFxnGUgSeJx0eQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9yIEbbW8L0KKUrSy6JjxwstrSyMB8GA1UdIwQY
MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt
MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1
LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL3G4aW7
P4LUmTP8KR2Ro7H7AcqILByzLIMYCPnrzA0WkiIsZMhbupEQM/a61051jqaOnRsi
Mbt5V0I/i4QyIQY2HE1fwYAJutWqgAG4xPbqnaL4oRqBaCeycacQ/lmrH8Q2qroQ
pT8HnrHWbKwP6HJrV4CuWBTg7pYSUPDc+GJ/oDI4ud11aP1CznHiEjYYt9UEhale
0qmU6HiWDOh83l+ntJ+3BLXXhx++TElEuazoy2Wkbv7j/KkHfcGw27KE4cHUW9a6
9eE7We6pHj1JP9MntRUTwdvE+Te5JGBq2AqbpOGp2cWQOkv7iferi17Plyv8GqSZ
Ld6HvhTmtalftQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client