Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: fNKh7P8m8tRjCm/tp/l4y9wzLYKqVSiDRHAaqvTwWao=
Subject key identifier: 75:3A:C2:66:C8:C5:3E:00:FF:CC:60:C6:C4:22:8B:AE:B1:1A:71:6F
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 0199FC8F95B6BE48436BB6494AA57C3FB9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 16AA
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: HbERNk5meiFWjXw2yG4vrhHUzyi3ftzu1l5tq/UU7lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:95:b6:be:48:43:6b:b6:49:4a:a5:7c:3f:b9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=753ac266c8c53e00ffcc60c6c4228baeb11a716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:3c:dd:a8:74:a1:55:46:5f:11:9f:fd:db:
d5:2b:42:9e:2a:a9:44:0c:7a:83:d2:bd:10:d7:d3:
8f:6e:e0:a8:c1:b7:17:57:50:df:c3:45:cc:67:36:
ef:8c:bb:ba:ef:f5:35:f5:aa:14:80:b7:90:24:02:
76:4c:56:aa:a2:0a:e2:89:f5:b8:5f:f3:45:06:1c:
30:be:88:78:48:df:8e:ab:45:c2:1c:54:96:e6:53:
b6:52:27:58:46:13:bb:05:60:ea:dd:85:51:19:50:
a4:1d:9c:b2:66:67:96:3b:29:d7:75:ad:bf:f6:7e:
4a:ba:0d:d5:d9:ec:11:0d:06:2b:3d:b7:ab:07:e1:
66:23:f3:58:65:10:c4:07:ea:43:ba:88:18:2f:60:
4c:a4:ef:75:ff:9d:be:99:ef:9a:cc:c5:3b:08:90:
09:53:be:0d:68:79:8d:31:07:6f:76:33:a3:3c:81:
75:5a:8c:57:63:8a:08:09:7c:a2:77:ae:77:9f:cc:
19:23:13:9a:b2:81:64:73:3f:50:7a:ea:5b:05:ab:
4c:23:15:67:e3:ea:59:5a:a5:58:28:5b:af:e0:78:
8f:c1:9e:91:64:ae:fd:6e:cf:b7:a7:42:5c:39:cf:
00:09:bb:4b:22:ad:42:ba:44:03:51:94:53:37:38:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:C2:66:C8:C5:3E:00:FF:CC:60:C6:C4:22:8B:AE:B1:1A:71:6F
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:2b:96:29:b0:c7:2e:b4:4c:8e:73:a4:21:79:dd:41:bc:
32:55:e1:4c:55:18:b4:60:4a:48:c2:59:fd:fb:85:f0:92:ca:
3f:a3:6d:50:29:63:65:61:79:01:32:22:9b:3e:78:db:c1:8e:
16:f5:13:0e:f1:04:90:d5:97:92:df:94:9f:f2:f1:59:2a:02:
57:9d:00:51:16:79:da:a3:ae:ad:dd:64:14:9d:7b:7d:3e:25:
b1:2e:b7:04:20:6a:7c:0b:6c:1e:e7:44:5c:2b:0f:b0:25:5e:
f9:a7:a8:56:fb:cb:69:d3:05:57:1a:61:ab:bf:fa:04:0b:b1:
d4:e3:dd:8f:ea:77:25:b3:d1:a4:50:b2:0f:d7:89:29:86:a8:
d4:12:8a:5c:9d:7a:6f:b8:75:d0:86:9a:28:2d:12:55:7f:52:
c3:ef:7e:14:b7:a2:cd:dd:10:65:02:5c:ae:82:c5:6e:91:64:
f5:1d:3f:e4:83:44:a6:43:e8:37:6a:2d:fc:46:fe:ef:3d:b5:
ed:72:d1:71:67:00:da:36:8c:91:d7:12:14:6a:a4:d3:54:f6:
84:27:6c:33:5c:b2:52:7b:f0:b7:0c:eb:4a:68:08:f2:7b:0f:
99:60:c1:5a:aa:de:0b:67:6e:9b:c4:70:40:8e:60:7d:9d:20:
35:b1:b3:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5W2vkhDa7ZJSqV8P7mwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi
ZjJlZWMwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD
Eyg3NTNhYzI2NmM4YzUzZTAwZmZjYzYwYzZjNDIyOGJhZWIxMWE3MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNU83ah0oVVGXxGf/dvVK0KeKqlE
DHqD0r0Q19OPbuCowbcXV1Dfw0XMZzbvjLu67/U19aoUgLeQJAJ2TFaqogriifW4
X/NFBhwwvoh4SN+Oq0XCHFSW5lO2UidYRhO7BWDq3YVRGVCkHZyyZmeWOynXda2/
9n5Kug3V2ewRDQYrPberB+FmI/NYZRDEB+pDuogYL2BMpO91/52+me+azMU7CJAJ
U74NaHmNMQdvdjOjPIF1WoxXY4oICXyid653n8wZIxOasoFkcz9QeupbBatMIxVn
4+pZWqVYKFuv4HiPwZ6RZK79bs+3p0JcOc8ACbtLIq1CukQDUZRTNziY5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU6wmbIxT4A/8xgxsQii66xGnFvMB8GA1UdIwQY
MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt
ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1
LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9Yrlimw
xy60TI5zpCF53UG8MlXhTFUYtGBKSMJZ/fuF8JLKP6NtUCljZWF5ATIimz5428GO
FvUTDvEEkNWXkt+Un/LxWSoCV50AURZ52qOurd1kFJ17fT4lsS63BCBqfAtsHudE
XCsPsCVe+aeoVvvLadMFVxphq7/6BAux1OPdj+p3JbPRpFCyD9eJKYao1BKKXJ16
b7h10IaaKC0SVX9Sw+9+FLeizd0QZQJcroLFbpFk9R0/5INEpkPoN2ot/Eb+7z21
7XLRcWcA2jaMkdcSFGqk01T2hCdsM1yyUnvwtwzrSmgI8nsPmWDBWqreC2dum8Rw
QI5gfZ0gNbGzJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:35 2025 by rpki-client