Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: BRnP+ufrdMFh9pZZhGFNYYL77h0HJYEcZtVnJQj7I4E=
Subject key identifier: 89:9F:5A:7D:CD:E2:B4:19:52:43:5C:95:28:11:26:02:43:72:02:39
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 019A71B948BDEB934395C9A17FC3EDDB5339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 0981
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: 3KQrrNo6by1GT6CuAGMHg0bTRL9ViiR/DIQ0AeEHmS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:48:bd:eb:93:43:95:c9:a1:7f:c3:ed:db:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=899f5a7dcde2b41952435c952811260243720239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:bc:6a:63:36:6a:f9:ef:16:da:c2:33:b2:
fc:89:5c:95:e6:63:90:bc:c1:52:b5:5c:33:91:4d:
bc:f4:27:59:cc:cf:8d:1c:21:34:50:a5:07:10:d2:
95:72:bc:d6:e8:87:a8:62:5d:12:67:70:47:a7:8c:
e9:12:b5:90:fe:5d:91:e6:34:de:93:89:aa:40:30:
27:e6:55:fd:f4:e3:c0:19:c5:16:4f:bf:c7:a3:44:
50:e1:5f:60:e3:15:24:69:3e:8c:15:e1:2b:70:ed:
37:63:df:05:7f:49:13:23:85:f9:37:fa:e8:41:9b:
d5:83:9f:2e:aa:54:11:39:02:7e:37:5a:93:70:c5:
fc:12:34:5f:bb:89:43:cd:1a:44:a9:92:7f:95:18:
bf:d9:ed:b7:1f:f6:3d:19:d4:4b:df:6a:65:66:1a:
86:d6:77:16:70:d2:9b:0f:74:30:00:e7:a2:74:71:
39:36:09:be:44:eb:ca:d7:50:d6:06:f2:bf:cf:96:
da:11:65:91:61:6b:8a:39:65:e2:f1:52:42:6b:9e:
34:ca:f4:1d:49:52:1b:70:51:73:bb:bc:34:38:c7:
cf:7b:b3:34:6f:0d:3a:c6:a1:ac:5f:ae:91:59:58:
15:28:3c:dd:74:14:4b:17:23:51:8d:d7:84:3f:4a:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:5A:7D:CD:E2:B4:19:52:43:5C:95:28:11:26:02:43:72:02:39
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:94:df:3a:3e:ad:5e:4b:aa:ff:21:38:aa:40:fa:b7:74:
90:0f:b4:1b:db:76:2f:30:ea:9a:68:3f:de:57:ac:c3:b5:35:
78:73:c5:ba:f3:cb:28:ca:36:c0:43:b5:a5:dd:ba:e2:20:71:
5d:83:92:76:81:85:08:49:7c:23:c1:17:79:fe:9c:9a:10:a7:
69:20:bd:70:dd:43:7e:3e:8b:0a:ed:90:4e:0c:b4:b9:22:fd:
22:8e:8c:05:51:ff:fd:d0:d4:44:4e:c5:49:d9:60:ce:7f:21:
d3:f9:6d:0b:24:f2:bd:6c:1e:4c:b0:2e:7c:7d:e5:c7:2f:df:
a8:33:69:0c:24:61:56:14:51:18:ff:bf:86:ce:37:05:b7:2f:
ab:54:83:a6:2b:1b:af:fa:02:09:8e:01:80:a1:61:7a:7c:5b:
c6:7f:44:13:23:25:f8:9e:90:b4:f4:86:0a:23:c0:20:af:62:
c7:ae:b5:89:8d:95:4f:ec:e2:8c:a1:59:60:1c:11:4f:65:c8:
10:90:b7:fb:2e:49:ba:27:8c:9b:b6:e4:dc:18:a6:ea:bf:31:
5f:a2:f8:42:bd:f5:a9:5f:54:68:b3:14:e1:6b:80:83:5b:64:
4e:80:93:b2:e7:fe:f7:01:a1:68:f9:d5:7b:fa:77:63:8e:f1:
19:af:17:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuUi965NDlcmhf8Pt21M5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz
OTJlMjkwHhcNMjUxMTExMDcwMjM5WhcNMjUxMTEyMDcwMjM5WjAzMTEwLwYDVQQD
Eyg4OTlmNWE3ZGNkZTJiNDE5NTI0MzVjOTUyODExMjYwMjQzNzIwMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/G8amM2avnvFtrCM7L8iVyV5mOQ
vMFStVwzkU289CdZzM+NHCE0UKUHENKVcrzW6IeoYl0SZ3BHp4zpErWQ/l2R5jTe
k4mqQDAn5lX99OPAGcUWT7/Ho0RQ4V9g4xUkaT6MFeErcO03Y98Ff0kTI4X5N/ro
QZvVg58uqlQROQJ+N1qTcMX8EjRfu4lDzRpEqZJ/lRi/2e23H/Y9GdRL32plZhqG
1ncWcNKbD3QwAOeidHE5Ngm+ROvK11DWBvK/z5baEWWRYWuKOWXi8VJCa540yvQd
SVIbcFFzu7w0OMfPe7M0bw06xqGsX66RWVgVKDzddBRLFyNRjdeEP0qcCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImfWn3N4rQZUkNclSgRJgJDcgI5MB8GA1UdIwQY
MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt
OGY5MzRlNzE3NjdjLzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj
LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKeU3zo+
rV5Lqv8hOKpA+rd0kA+0G9t2LzDqmmg/3lesw7U1eHPFuvPLKMo2wEO1pd264iBx
XYOSdoGFCEl8I8EXef6cmhCnaSC9cN1Dfj6LCu2QTgy0uSL9Io6MBVH//dDURE7F
Sdlgzn8h0/ltCyTyvWweTLAufH3lxy/fqDNpDCRhVhRRGP+/hs43Bbcvq1SDpisb
r/oCCY4BgKFhenxbxn9EEyMl+J6QtPSGCiPAIK9ix661iY2VT+zijKFZYBwRT2XI
EJC3+y5JuieMm7bk3Bim6r8xX6L4Qr31qV9UaLMU4WuAg1tkToCTsuf+9wGhaPnV
e/p3Y47xGa8X0w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:22 2025 by rpki-client