Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: G8zWc2b9IK2iS5vliukcCvRPs2JAMoimsP/m5WktHLk=
Subject key identifier: 76:10:45:C1:80:65:0F:8D:92:29:83:0A:6E:4E:4B:17:42:59:7E:BB
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 0199FBEB9C68B0DBF0C68E34C6ECE0DF7E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0791
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: FXlQH8nhSETv58GjcPLxnf7A+GfvqKFbJoFhzbpKbcg=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9c:68:b0:db:f0:c6:8e:34:c6:ec:e0:df:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=761045c180650f8d9229830a6e4e4b1742597ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:1c:55:b7:10:50:1b:7e:cb:73:f6:8f:98:
6e:e1:7b:9e:d7:7c:cc:26:70:d7:09:99:72:e2:2f:
ac:ed:a7:44:f1:d3:5d:df:39:fa:7f:ab:4d:69:0c:
de:f4:32:4a:7b:04:a6:87:2b:35:53:8f:8a:2e:07:
cb:a3:74:3d:19:3a:89:df:89:1f:af:b6:3e:18:4d:
4b:8b:2f:ff:65:36:69:85:20:31:e1:c2:f8:bd:28:
9c:0b:e5:8f:8e:9f:d0:a0:cf:10:e5:06:2c:34:06:
15:35:4c:02:17:1c:14:8e:8f:56:38:c0:3f:48:e1:
27:66:df:fa:9f:e3:da:4e:36:61:59:e3:b7:a6:b2:
ae:2f:69:7b:d9:ef:c7:a2:2f:74:39:23:11:af:11:
7d:ce:e0:fe:9d:dd:04:27:5a:12:53:74:1f:c9:6e:
5a:5b:1d:33:86:ca:ce:08:7a:b7:44:c2:f5:9c:f6:
37:c8:95:96:d3:0c:dd:fd:48:2f:e1:2c:f4:fe:0d:
d5:fc:16:ff:cd:3c:10:84:bb:5f:1e:32:d3:a1:f3:
b8:09:fb:ef:c8:94:4e:db:76:e4:ca:2c:f1:73:25:
48:6a:03:98:bc:3a:21:60:b5:b3:8a:e5:37:3f:26:
0d:a1:09:5f:6d:0d:1f:ed:5c:e3:ff:de:71:e6:bd:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:45:C1:80:65:0F:8D:92:29:83:0A:6E:4E:4B:17:42:59:7E:BB
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:1a:67:22:3d:6d:f8:b0:07:76:82:98:30:27:65:2e:86:
fc:89:53:32:b0:17:b2:f6:83:34:11:52:f4:2d:c8:25:49:12:
bc:2c:ed:93:49:23:da:c3:b5:9f:5d:fb:3a:b8:21:82:5c:8a:
37:7a:1e:20:3b:0e:3c:96:35:6a:82:b3:d9:e7:b3:30:77:cb:
04:cb:5a:c7:00:a1:53:d5:01:53:9b:6d:1c:44:fa:f4:19:73:
1a:95:81:85:3e:97:f1:fb:1a:07:56:95:71:25:ed:e2:6f:a1:
bc:8a:6c:81:10:44:75:dd:7b:49:fa:44:49:44:fc:52:3a:99:
45:27:eb:80:b6:6e:35:22:91:49:0a:23:f5:b9:e6:6e:f5:7f:
31:34:44:54:33:68:d1:ef:7c:8f:50:03:a9:ce:ee:db:f6:21:
2d:32:db:da:2c:22:0d:ee:ba:8e:c2:e8:71:3c:65:f8:06:19:
d7:c5:43:7b:3d:57:4d:3c:94:23:91:b8:35:37:84:c7:c4:94:
8e:47:a4:b0:dc:65:99:e0:b0:f0:c4:28:f2:9d:e0:c4:9a:29:
12:7f:33:ba:bd:67:f8:95:e4:e0:c8:92:f2:c0:90:a1:92:67:
74:56:86:1f:62:ba:97:b7:4b:39:c2:11:5e:d3:3b:08:59:0d:
49:52:67:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765xosNvwxo40xuzg335MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2
ZjIzYzQwHhcNMjUxMDE5MTAwMjI2WhcNMjUxMDIwMTAwMjI2WjAzMTEwLwYDVQQD
Eyg3NjEwNDVjMTgwNjUwZjhkOTIyOTgzMGE2ZTRlNGIxNzQyNTk3ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUcVbcQUBt+y3P2j5hu4Xue13zM
JnDXCZly4i+s7adE8dNd3zn6f6tNaQze9DJKewSmhys1U4+KLgfLo3Q9GTqJ34kf
r7Y+GE1Liy//ZTZphSAx4cL4vSicC+WPjp/QoM8Q5QYsNAYVNUwCFxwUjo9WOMA/
SOEnZt/6n+PaTjZhWeO3prKuL2l72e/Hoi90OSMRrxF9zuD+nd0EJ1oSU3QfyW5a
Wx0zhsrOCHq3RML1nPY3yJWW0wzd/Ugv4Sz0/g3V/Bb/zTwQhLtfHjLTofO4Cfvv
yJRO23bkyizxcyVIagOYvDohYLWziuU3PyYNoQlfbQ0f7Vzj/95x5r2j7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYQRcGAZQ+NkimDCm5OSxdCWX67MB8GA1UdIwQY
MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt
Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm
LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzkaZyI9
bfiwB3aCmDAnZS6G/IlTMrAXsvaDNBFS9C3IJUkSvCztk0kj2sO1n137OrghglyK
N3oeIDsOPJY1aoKz2eezMHfLBMtaxwChU9UBU5ttHET69BlzGpWBhT6X8fsaB1aV
cSXt4m+hvIpsgRBEdd17SfpESUT8UjqZRSfrgLZuNSKRSQoj9bnmbvV/MTREVDNo
0e98j1ADqc7u2/YhLTLb2iwiDe66jsLocTxl+AYZ18VDez1XTTyUI5G4NTeEx8SU
jkeksNxlmeCw8MQo8p3gxJopEn8zur1n+JXk4MiS8sCQoZJndFaGH2K6l7dLOcIR
XtM7CFkNSVJnhQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:12 2025 by rpki-client