Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: Tz7ORHjYU4TQsjYMZP9XTyoiYuP/8URAEMgjUZxQVrE=
Subject key identifier: BB:4E:93:C0:93:AA:14:A8:9B:F4:15:6C:2E:7E:9D:D7:39:1D:35:9C
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 019A72CA44C3DAB33EF5EB8A4E38F2992C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 1383
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: nKTMCBKDobEzyWSTDDlHTfC1S4F7AAYCzdDyZcNiXAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:44:c3:da:b3:3e:f5:eb:8a:4e:38:f2:99:2c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=bb4e93c093aa14a89bf4156c2e7e9dd7391d359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:ff:78:2a:83:ec:b5:7f:a2:ee:06:df:6f:
2a:fc:1b:b4:36:71:42:e3:41:c3:fd:af:63:72:96:
b5:cf:ca:03:de:b3:6d:10:db:bc:d6:fd:4f:4b:36:
41:50:8d:40:51:88:89:57:e2:1c:18:86:f7:aa:c3:
56:45:11:b7:3c:99:70:01:e4:ef:9d:9b:21:38:2c:
1d:d8:02:05:d4:aa:96:15:97:d5:dc:a7:95:84:45:
da:ae:a4:83:01:db:6e:90:43:46:78:3b:e9:0e:63:
02:5f:24:e9:18:3d:2d:9f:cb:c7:47:6b:81:7b:97:
97:fa:7c:a9:df:60:4f:65:98:97:93:ef:00:98:63:
2d:98:10:11:19:e8:01:23:89:48:bf:c9:3e:66:09:
70:0c:41:d9:e5:3d:6d:61:ff:4c:85:0e:89:e1:7e:
ca:70:6f:38:a0:ca:7a:94:30:0e:71:b3:fa:d2:19:
c2:1a:79:7e:5a:a0:7c:87:78:83:98:dc:a0:e2:24:
5e:e8:00:e2:fd:f6:cb:0d:3f:48:fe:21:61:d8:ab:
16:b8:cb:e7:3b:cb:8e:1b:0f:00:9a:a9:fb:13:47:
90:22:34:d1:8c:0f:8d:ca:bb:ba:95:8e:f6:f2:d8:
3c:f0:bb:52:f3:f2:fe:1d:cd:41:3c:af:70:c7:03:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:93:C0:93:AA:14:A8:9B:F4:15:6C:2E:7E:9D:D7:39:1D:35:9C
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f3:65:d6:b6:24:85:21:4d:60:a1:e0:d8:17:ca:29:e7:35:
7e:5a:64:e4:0d:66:d1:01:ad:53:06:4c:aa:88:1d:82:cb:3d:
12:e8:e7:4f:b2:0b:a2:74:1b:19:a4:7a:21:cb:07:e9:f0:68:
1a:c2:85:79:9c:a1:c6:6d:74:da:39:ad:d7:7a:1d:c7:ce:1a:
8f:c7:63:52:5f:ed:c2:5c:f5:15:d4:f3:88:ad:8e:f5:31:8f:
aa:ed:fa:c0:dd:9c:b0:7f:4e:d2:9a:5a:69:37:06:07:12:13:
4c:0e:ca:af:05:05:9a:65:0a:7e:49:3c:92:3d:74:a8:25:8d:
f6:e1:7c:f2:80:23:df:c6:1f:b9:2e:fd:47:7c:da:d4:18:d8:
96:ad:bc:da:95:b4:2e:16:eb:18:b1:ec:07:a1:f9:86:e7:76:
02:36:d5:67:09:78:91:d5:f2:a0:2c:2f:4e:36:38:c4:da:87:
67:65:77:b4:cd:dd:7b:96:02:22:2f:c5:fa:6a:63:de:ef:10:
b6:ca:ff:1a:a2:80:9d:b2:e8:db:a6:20:4b:e8:65:5d:68:20:
27:a7:8f:65:91:f3:93:51:44:f3:34:32:93:96:cf:d5:af:73:
b7:89:2d:50:c7:ff:84:02:c8:71:6e:e2:39:5c:4d:51:c7:92:
9a:05:48:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyykTD2rM+9euKTjjymSyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODdmODhlMThiYTM0NWY1ZGIwYjA2YTJhMzRkNDQ4NmU0
ZTZkYzUwHhcNMjUxMTExMTIwMDQ5WhcNMjUxMTEyMTIwMDQ5WjAzMTEwLwYDVQQD
EyhiYjRlOTNjMDkzYWExNGE4OWJmNDE1NmMyZTdlOWRkNzM5MWQzNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniv/eCqD7LV/ou4G328q/Bu0NnFC
40HD/a9jcpa1z8oD3rNtENu81v1PSzZBUI1AUYiJV+IcGIb3qsNWRRG3PJlwAeTv
nZshOCwd2AIF1KqWFZfV3KeVhEXarqSDAdtukENGeDvpDmMCXyTpGD0tn8vHR2uB
e5eX+nyp32BPZZiXk+8AmGMtmBARGegBI4lIv8k+ZglwDEHZ5T1tYf9MhQ6J4X7K
cG84oMp6lDAOcbP60hnCGnl+WqB8h3iDmNyg4iRe6ADi/fbLDT9I/iFh2KsWuMvn
O8uOGw8Amqn7E0eQIjTRjA+Nyru6lY728tg88LtS8/L+Hc1BPK9wxwMrZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtOk8CTqhSom/QVbC5+ndc5HTWcMB8GA1UdIwQY
MBaAFHCH+I4YujRfXbCwaio01EhuTm3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lmNGpoaTZORjlkc0xCcUtqVFVTRzVPYmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85OTFjNWMtNzgzZi00MTA2LTk2NjIt
NjVmODczMjE2MWE2LzEvY0lmNGpoaTZORjlkc0xCcUtqVFVTRzVPYmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85OTFjNWMtNzgzZi00MTA2LTk2NjItNjVmODczMjE2MWE2
LzEvY0lmNGpoaTZORjlkc0xCcUtqVFVTRzVPYmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPNl1rYk
hSFNYKHg2BfKKec1flpk5A1m0QGtUwZMqogdgss9EujnT7ILonQbGaR6IcsH6fBo
GsKFeZyhxm102jmt13odx84aj8djUl/twlz1FdTziK2O9TGPqu36wN2csH9O0ppa
aTcGBxITTA7KrwUFmmUKfkk8kj10qCWN9uF88oAj38YfuS79R3za1BjYlq282pW0
LhbrGLHsB6H5hud2AjbVZwl4kdXyoCwvTjY4xNqHZ2V3tM3de5YCIi/F+mpj3u8Q
tsr/GqKAnbLo26YgS+hlXWggJ6ePZZHzk1FE8zQyk5bP1a9zt4ktUMf/hALIcW7i
OVxNUceSmgVIgw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:45 2025 by rpki-client