
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier: xgyfZl66zWlmK57gCMgnnvUWNvzAK1TT7YZqtxZxB3g=
Subject key identifier: 78:7C:50:D9:EC:D2:80:0B:B2:8A:FE:E7:93:67:DC:22:48:23:A3:40
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 019A7225A83EDA29005D0F3B9DDE230666F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: Hhfrzj3pV8bvxd9mZXjFSbKfC9/xVEqPD+jnfflf8zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a8:3e:da:29:00:5d:0f:3b:9d:de:23:06:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=787c50d9ecd2800bb28afee79367dc224823a340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:5e:a0:03:ab:c4:af:35:b9:1d:26:aa:21:
26:f9:f2:7b:75:c7:89:82:47:25:97:0e:6b:d4:cf:
12:65:23:f0:bf:73:60:e3:3c:d5:7d:98:6e:bf:7a:
b1:26:81:28:cb:d9:a0:9d:89:f7:62:38:57:b5:b3:
f6:8b:c4:37:c0:87:1c:7f:9d:83:c1:d6:df:30:c1:
b4:b3:df:18:79:fc:73:1b:a5:e8:1c:91:89:6b:35:
4e:1a:84:02:7d:87:3d:13:8a:ac:75:40:fa:a2:7f:
22:7c:07:fd:00:6e:3b:49:7b:38:e3:32:64:4b:68:
67:d8:ac:d2:fa:8e:71:49:2e:42:a0:31:41:e8:24:
46:3a:92:1e:be:90:71:34:4f:bf:38:74:d3:50:b2:
6c:5f:ff:c9:3b:d3:29:1f:67:5a:2b:48:47:d1:5a:
1b:98:65:5b:04:c3:8f:19:1a:22:96:d6:a4:42:2d:
71:72:71:9b:85:82:85:e3:ed:fa:34:64:24:ae:81:
ec:73:df:97:ec:2d:a2:ad:07:e8:69:9f:e3:5d:51:
96:cb:4e:94:84:b0:66:4c:2a:df:54:7c:91:60:a1:
dc:3c:a2:f4:de:18:6b:c1:e8:89:56:79:82:45:cb:
11:b8:b7:3e:0c:a4:da:2a:21:b1:1e:3e:2f:29:5c:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:50:D9:EC:D2:80:0B:B2:8A:FE:E7:93:67:DC:22:48:23:A3:40
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9c:79:b3:c2:47:9b:6e:0d:da:fa:88:5f:ec:f2:4f:37:8f:
8e:b5:d2:a4:53:68:17:9f:e3:fd:ab:24:fa:01:f3:cc:aa:e6:
20:57:d3:75:78:e1:95:1c:12:27:d6:43:54:8d:34:b0:06:fa:
9f:a2:b4:8e:ab:e6:d3:83:07:5b:15:20:f5:eb:8c:98:df:82:
8e:90:fb:78:fa:36:65:6a:16:3a:11:34:86:b3:90:0a:6c:bf:
f0:78:15:40:cf:6d:73:8d:2f:aa:7f:3a:c1:e2:16:fc:14:20:
d4:20:61:e1:0d:87:19:81:83:36:3f:3a:22:23:21:0a:c9:21:
9b:a4:53:03:ad:df:f0:ab:a4:20:4c:04:87:1b:c9:4c:c0:99:
b0:20:6c:aa:ae:8a:a2:cb:50:19:f4:f8:85:87:80:65:ce:4c:
83:81:2c:71:85:ec:1b:b8:36:ce:fd:1d:f5:83:ee:f7:7a:88:
e8:4e:90:c9:63:a6:f5:22:c3:ad:58:16:d2:f5:bd:65:47:d1:
1c:b3:10:17:33:33:76:72:1d:7f:cb:3c:d1:0d:91:fd:53:90:
c6:85:23:da:93:b4:9f:19:d9:d8:ce:95:a2:fb:a4:83:6f:df:
99:f3:0e:b2:9f:b2:71:3a:8e:a9:15:c2:5d:7d:cb:b9:fb:c1:
8a:3e:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client