Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: AXq4Tz7ObKHwlPHhBFjP3Zq5ZSuzBt7Oi3Sxfkmfs4Q=
Subject key identifier: D2:A0:9B:52:20:2A:F5:AE:10:0A:75:49:B7:20:AC:55:11:26:30:B4
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019A71B84BAF436DCF5F32F0D13A654A6DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 121D
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: gdiAeyH9ec63+lS5xRn4WNS2s3OQWlxiYXuAzSlES4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:af:43:6d:cf:5f:32:f0:d1:3a:65:4a:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=d2a09b52202af5ae100a7549b720ac55112630b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:aa:b6:4b:f9:1b:77:76:a0:1d:66:c9:12:
89:3a:f4:8a:2c:ae:6d:6c:ae:56:8e:c3:25:28:4a:
fd:5a:67:fc:65:59:93:26:3d:52:21:55:62:ec:22:
f3:cf:2c:53:a0:4d:02:61:86:4f:2f:43:43:57:a9:
fe:de:d5:f0:4e:78:55:35:a3:2b:e7:3c:64:57:e7:
5f:c4:50:42:58:ee:42:f2:f7:02:8d:87:94:da:0f:
99:a9:5f:e5:1c:6a:af:f5:be:dd:82:71:03:fc:fe:
36:29:ba:38:b2:3a:37:67:3e:35:f2:5f:87:e8:eb:
54:a2:c2:9f:44:a2:80:e1:42:99:58:c6:8a:49:62:
43:49:42:26:b9:fd:ba:55:df:c9:b3:6c:1b:30:7c:
bf:f4:3a:29:df:8d:c0:09:f6:a6:cd:4d:1e:f2:00:
c0:64:c2:96:cb:ce:aa:bb:5e:61:6b:48:bd:4e:97:
1f:0f:1b:70:c3:e3:ae:04:fd:7a:e2:8b:7f:0a:f8:
74:b1:68:98:8c:38:17:d1:14:aa:52:47:21:e5:1e:
5d:99:04:74:0f:88:c6:79:78:26:91:5d:f3:7c:fc:
37:89:e4:e9:9c:8a:6c:bf:c8:78:7f:87:de:6f:f6:
6a:e9:e6:5c:91:a0:3a:d3:34:fd:35:be:bf:34:3a:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:9B:52:20:2A:F5:AE:10:0A:75:49:B7:20:AC:55:11:26:30:B4
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:40:e1:cf:4f:6d:ea:1d:c4:1a:1f:3d:6e:50:85:5c:40:67:
b3:0a:b6:5c:21:39:29:9e:f6:e6:ed:1e:2c:8e:84:cb:65:50:
48:b5:be:27:02:7e:56:47:cb:41:56:c5:4f:01:d0:4e:af:46:
17:48:94:15:0c:65:18:35:22:43:90:81:f1:8f:32:5f:9e:98:
0c:a4:cc:9e:0c:16:cf:8f:0e:57:1d:36:ba:f1:06:91:d6:4c:
80:8c:fe:9e:40:40:02:36:be:8a:ce:9d:e3:78:5e:6a:e9:c9:
a2:41:74:10:73:79:6b:89:d9:1d:33:13:3e:75:06:90:dc:4b:
32:e4:e2:d7:42:69:d6:0e:25:bd:86:c5:2d:24:e8:14:41:52:
cb:4b:85:81:52:cd:9c:6c:44:39:d5:62:88:11:03:5b:2b:a4:
e4:67:cc:d1:a3:69:ea:3e:a4:93:90:58:5c:a5:7a:1c:bc:44:
bc:e7:84:2a:47:01:4f:98:d6:96:a3:12:a1:f5:8e:85:18:7b:
49:6d:8e:14:a8:3b:3b:88:8f:45:13:92:25:ed:01:e0:83:37:
b7:16:dd:1b:8c:91:2f:f4:26:0e:2c:e9:69:e2:fd:aa:87:0a:
a8:af:a9:d4:c6:3f:6e:29:44:e6:85:f4:5d:d1:a5:d0:55:18:
64:0a:30:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEuvQ23PXzLw0TplSm2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3
MWQ5NzYwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
EyhkMmEwOWI1MjIwMmFmNWFlMTAwYTc1NDliNzIwYWM1NTExMjYzMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Sqtkv5G3d2oB1myRKJOvSKLK5t
bK5WjsMlKEr9Wmf8ZVmTJj1SIVVi7CLzzyxToE0CYYZPL0NDV6n+3tXwTnhVNaMr
5zxkV+dfxFBCWO5C8vcCjYeU2g+ZqV/lHGqv9b7dgnED/P42Kbo4sjo3Zz418l+H
6OtUosKfRKKA4UKZWMaKSWJDSUImuf26Vd/Js2wbMHy/9Dop343ACfamzU0e8gDA
ZMKWy86qu15ha0i9TpcfDxtww+OuBP164ot/Cvh0sWiYjDgX0RSqUkch5R5dmQR0
D4jGeXgmkV3zfPw3ieTpnIpsv8h4f4feb/Zq6eZckaA60zT9Nb6/NDqAYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKgm1IgKvWuEAp1SbcgrFURJjC0MB8GA1UdIwQY
MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt
Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx
LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUDhz09t
6h3EGh89blCFXEBnswq2XCE5KZ725u0eLI6Ey2VQSLW+JwJ+VkfLQVbFTwHQTq9G
F0iUFQxlGDUiQ5CB8Y8yX56YDKTMngwWz48OVx02uvEGkdZMgIz+nkBAAja+is6d
43heaunJokF0EHN5a4nZHTMTPnUGkNxLMuTi10Jp1g4lvYbFLSToFEFSy0uFgVLN
nGxEOdViiBEDWyuk5GfM0aNp6j6kk5BYXKV6HLxEvOeEKkcBT5jWlqMSofWOhRh7
SW2OFKg7O4iPRROSJe0B4IM3txbdG4yRL/QmDizpaeL9qocKqK+p1MY/bilE5oX0
XdGl0FUYZAow1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:16 2025 by rpki-client