Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: XiWhgjQ0uf3QJZRboQSDD94bLPmAtAxd4zdKChmkQFs=
Subject key identifier: 3D:60:91:9A:F2:12:16:5A:6F:03:0D:BC:F6:78:4F:6A:62:E8:A2:4D
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 0198D5BBBA6A91BED4C8483CAE05BC7772A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 11C9
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: u3n7jEclFbUiM2Nfj2u3GEyVDYjGzrQOs6tSji6EtKM=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:6a:91:be:d4:c8:48:3c:ae:05:bc:77:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=3d60919af212165a6f030dbcf6784f6a62e8a24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:09:52:59:ba:0d:7c:34:7b:01:0b:dd:52:
6d:5d:2f:e5:fc:29:fc:52:74:bd:3e:47:c1:64:02:
11:c7:17:1a:35:bc:db:f8:96:a2:ad:c6:a4:4b:d9:
c9:2f:1c:14:54:ef:13:d5:aa:ce:0d:bc:6a:53:52:
7c:62:00:98:42:ed:14:6b:fe:f8:36:c4:e3:3a:4f:
e2:85:f0:61:19:83:79:59:47:67:fd:51:1d:53:55:
49:07:f8:f4:5f:96:74:1a:83:a8:5a:e5:94:bf:df:
6e:bf:07:98:ba:ef:de:d2:7a:95:25:70:8e:ce:60:
14:74:2e:55:5f:7e:fa:94:6b:85:e2:28:c0:49:9a:
2c:c9:9d:8c:80:cf:03:82:91:ad:00:b8:b2:e9:a6:
71:28:40:d3:46:17:4b:2d:56:a8:dd:90:08:34:51:
42:c7:d2:48:0f:17:e2:68:53:a9:5b:16:af:26:73:
eb:cc:4a:0d:ae:e3:99:b6:1a:fc:7a:48:9e:6b:fe:
df:20:7a:05:5f:ac:65:1f:11:e1:02:b5:53:03:cd:
97:c9:c4:2d:f6:2b:a8:ef:8f:2a:04:9e:c9:d7:7a:
18:2c:74:ed:48:ac:bc:74:0f:d6:5c:42:e3:bf:29:
84:c1:d8:36:9b:f6:d2:52:3f:8c:32:c2:c2:78:c7:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:91:9A:F2:12:16:5A:6F:03:0D:BC:F6:78:4F:6A:62:E8:A2:4D
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:82:88:be:6e:8c:2e:b0:2d:4a:21:66:43:b8:a8:14:42:77:
49:dd:33:dc:d6:c7:08:51:ae:7f:66:87:ef:46:f4:e2:9d:8d:
5e:83:22:db:3a:9e:82:a7:ff:06:31:83:52:dc:de:4b:1e:e0:
3a:fc:ac:bc:52:5e:dc:0b:25:43:7a:ea:91:87:4f:c5:67:1a:
87:fa:cf:40:f6:dc:86:be:7f:0d:4f:b6:52:d3:a7:a9:49:89:
7d:ca:a9:4f:82:f8:7d:ae:60:de:d5:f1:91:34:f1:e8:e5:f5:
52:52:09:47:8c:4e:44:c0:d1:8a:f1:c0:12:70:aa:05:fb:4a:
d3:ce:7f:72:93:9b:55:a2:1c:4f:26:08:97:bf:43:6a:b9:1c:
73:50:25:f7:be:44:39:95:73:e5:5b:0d:5b:35:be:20:21:77:
3c:f6:3a:20:e4:4a:bf:87:bc:f3:d1:e3:a4:c3:a6:04:47:26:
a3:ee:11:61:a4:38:8c:12:65:7b:8e:24:18:b8:33:4c:5d:be:
a5:72:42:a2:55:37:6a:84:8e:1b:01:b1:68:30:90:fa:73:c6:
7f:d8:85:f7:65:f8:7a:d6:9b:33:9b:80:6d:5f:24:6e:8b:2c:
6f:d1:4e:f3:6c:22:85:b1:38:6b:58:79:8e:c2:75:02:20:9c:
be:92:3d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7pqkb7UyEg8rgW8d3KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
EygzZDYwOTE5YWYyMTIxNjVhNmYwMzBkYmNmNjc4NGY2YTYyZThhMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA254JUlm6DXw0ewEL3VJtXS/l/Cn8
UnS9PkfBZAIRxxcaNbzb+JaircakS9nJLxwUVO8T1arODbxqU1J8YgCYQu0Ua/74
NsTjOk/ihfBhGYN5WUdn/VEdU1VJB/j0X5Z0GoOoWuWUv99uvweYuu/e0nqVJXCO
zmAUdC5VX376lGuF4ijASZosyZ2MgM8DgpGtALiy6aZxKEDTRhdLLVao3ZAINFFC
x9JIDxfiaFOpWxavJnPrzEoNruOZthr8ekiea/7fIHoFX6xlHxHhArVTA82XycQt
9iuo748qBJ7J13oYLHTtSKy8dA/WXELjvymEwdg2m/bSUj+MMsLCeMdKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1gkZryEhZabwMNvPZ4T2pi6KJNMB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoKIvm6M
LrAtSiFmQ7ioFEJ3Sd0z3NbHCFGuf2aH70b04p2NXoMi2zqegqf/BjGDUtzeSx7g
OvysvFJe3AslQ3rqkYdPxWcah/rPQPbchr5/DU+2UtOnqUmJfcqpT4L4fa5g3tXx
kTTx6OX1UlIJR4xORMDRivHAEnCqBftK085/cpObVaIcTyYIl79Darkcc1Al975E
OZVz5VsNWzW+ICF3PPY6IORKv4e889HjpMOmBEcmo+4RYaQ4jBJle44kGLgzTF2+
pXJColU3aoSOGwGxaDCQ+nPGf9iF92X4etabM5uAbV8kbossb9FO82wihbE4a1h5
jsJ1AiCcvpI9Gg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:23 2025 by rpki-client