Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: vjbupwRC7jqaE04KB5PMvcEJw2ofyyLmvyvdj+SqDT8=
Subject key identifier: 06:59:5C:FA:9F:D5:20:C9:A1:54:4E:2D:60:2C:AE:4F:9B:37:13:78
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019A725CDDFE36DECD71D429D2AA6B589BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 16E7
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: Y2H2LcjZWIx8kZnTSYti16APMeSiGIlmLFd4HUtwZ/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dd:fe:36:de:cd:71:d4:29:d2:aa:6b:58:9b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=06595cfa9fd520c9a1544e2d602cae4f9b371378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:0d:77:88:f7:4d:f5:0f:1c:59:f1:11:b9:
2f:fc:09:ff:7a:a7:2e:80:63:a4:af:06:a8:9f:de:
fc:83:c4:a0:83:39:70:10:b2:cd:73:51:00:81:d7:
f2:90:ad:63:0b:16:8a:1d:12:83:f1:1e:5d:de:8c:
88:24:93:bb:7c:bc:22:85:7d:44:f1:d2:03:41:48:
7e:c3:21:c2:7d:f7:4a:df:f1:c7:7d:3a:ec:9b:5f:
9a:27:c0:3b:35:31:e0:4f:1c:7e:3b:c6:9e:c9:b6:
7b:65:54:35:0c:7e:ea:8f:a7:fb:af:b2:fc:fb:b8:
1c:72:37:e2:65:03:b9:40:a4:42:e1:69:42:1c:b4:
bf:30:22:c8:c8:6c:93:f0:2e:1b:31:12:2d:eb:f3:
74:e5:61:ce:7d:16:9a:58:f3:0d:6a:9d:9f:2f:d4:
b5:17:55:56:07:e9:6b:fd:0c:1b:b1:75:78:6a:8f:
ab:f4:47:07:2c:31:f0:a6:15:bb:6d:93:b9:6c:2f:
a1:d8:b5:a5:f5:1a:c7:a1:c9:8f:19:15:8b:6e:69:
96:7f:9c:78:2e:05:e1:2a:43:46:a0:c4:38:22:57:
8d:51:8d:2e:0f:3b:2b:0a:bf:bc:6e:40:8f:eb:76:
79:71:01:b3:b4:46:40:2a:29:e2:bf:9a:4d:fb:53:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:5C:FA:9F:D5:20:C9:A1:54:4E:2D:60:2C:AE:4F:9B:37:13:78
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:1f:00:b2:e9:55:fd:55:bf:9a:c7:1b:78:7a:5c:83:5b:
c3:e1:5c:d6:b0:7c:83:3d:71:88:74:db:87:f2:c1:62:d0:6a:
4e:af:0b:9d:1f:83:7c:f2:ff:7c:69:0e:f8:f4:35:ea:d2:64:
c5:f5:4a:bb:9f:48:5e:f8:87:af:b1:75:0e:b9:ab:39:df:d0:
21:ce:cf:0d:f5:b2:03:cd:d2:80:77:46:d7:ee:a4:99:fe:c2:
0e:f9:29:da:00:35:0a:0d:dd:4a:6d:ee:ca:f7:6e:31:44:9f:
dd:9f:5c:b3:63:eb:e4:b9:79:71:37:e3:e8:1e:74:be:66:bd:
6a:7c:f9:38:e8:55:84:ea:50:63:ef:0b:fb:e5:04:c4:59:3b:
a3:38:01:71:44:f7:de:46:75:1b:3a:cc:f0:ac:86:98:28:a3:
90:72:0e:6d:c9:cc:95:1b:21:cb:a9:29:31:74:4b:6a:25:ef:
ee:c6:9e:a3:ca:a9:11:3c:71:fd:33:ac:1e:05:f9:32:cb:26:
31:06:ba:32:89:23:52:ad:26:65:1b:e7:21:52:8f:2a:c0:43:
cb:ac:47:a6:4f:7b:87:e3:dc:2f:a3:e5:b3:89:c3:f8:16:29:
9a:a0:8e:0c:bb:a1:fd:c5:b0:51:8d:e0:cb:b7:43:41:0d:0c:
c3:11:b1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXN3+Nt7NcdQp0qprWJvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi
ZjJlZWMwHhcNMjUxMTExMTAwMTIwWhcNMjUxMTEyMTAwMTIwWjAzMTEwLwYDVQQD
EygwNjU5NWNmYTlmZDUyMGM5YTE1NDRlMmQ2MDJjYWU0ZjliMzcxMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqUNd4j3TfUPHFnxEbkv/An/eqcu
gGOkrwaon978g8SggzlwELLNc1EAgdfykK1jCxaKHRKD8R5d3oyIJJO7fLwihX1E
8dIDQUh+wyHCffdK3/HHfTrsm1+aJ8A7NTHgTxx+O8aeybZ7ZVQ1DH7qj6f7r7L8
+7gccjfiZQO5QKRC4WlCHLS/MCLIyGyT8C4bMRIt6/N05WHOfRaaWPMNap2fL9S1
F1VWB+lr/QwbsXV4ao+r9EcHLDHwphW7bZO5bC+h2LWl9RrHocmPGRWLbmmWf5x4
LgXhKkNGoMQ4IleNUY0uDzsrCr+8bkCP63Z5cQGztEZAKiniv5pN+1NwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZZXPqf1SDJoVROLWAsrk+bNxN4MB8GA1UdIwQY
MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt
ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1
LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfwfALLp
Vf1Vv5rHG3h6XINbw+Fc1rB8gz1xiHTbh/LBYtBqTq8LnR+DfPL/fGkO+PQ16tJk
xfVKu59IXviHr7F1DrmrOd/QIc7PDfWyA83SgHdG1+6kmf7CDvkp2gA1Cg3dSm3u
yvduMUSf3Z9cs2Pr5Ll5cTfj6B50vma9anz5OOhVhOpQY+8L++UExFk7ozgBcUT3
3kZ1GzrM8KyGmCijkHIObcnMlRshy6kpMXRLaiXv7saeo8qpETxx/TOsHgX5Mssm
MQa6MokjUq0mZRvnIVKPKsBDy6xHpk97h+PcL6Pls4nD+BYpmqCODLuh/cWwUY3g
y7dDQQ0MwxGxPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:27 2025 by rpki-client