Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File: mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier: lKiaUfdb6wgP5hwZSYYFQZG01CzPJyen5v26CCEzJtE=
Subject key identifier: 57:61:5C:BF:E3:C2:8E:C2:04:1A:91:40:C6:5D:2E:51:2F:BB:59:53
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer: /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial: 019A7301BCB0B4BD1F0DF7A913EB042FAE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number: 1207
Signing time: Tue 11 Nov 2025 13:01:24 +0000
Manifest this update: Tue 11 Nov 2025 13:01:24 +0000
Manifest next update: Wed 12 Nov 2025 13:01:24 +0000
Files and hashes: 1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: JntNL6jhTq/Hmko+lpUqyNjzvkOCg+hoNIIsirHoNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:bc:b0:b4:bd:1f:0d:f7:a9:13:eb:04:2f:ae:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
Validity
Not Before: Nov 11 13:01:24 2025 GMT
Not After : Nov 12 13:01:24 2025 GMT
Subject: CN=57615cbfe3c28ec2041a9140c65d2e512fbb5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:6b:c3:c8:ee:82:be:29:82:5c:27:49:9d:
a4:2d:a4:d0:88:4c:84:16:e3:dd:5b:7c:d3:c6:60:
c2:7b:62:ea:fd:b9:9c:68:f8:e7:7f:d1:06:f9:2e:
7e:69:58:3d:aa:d6:29:0f:0b:9a:2d:a9:62:f0:fe:
68:2c:e9:3c:a6:9c:0a:c8:ea:a6:ad:7d:24:6a:b3:
dd:4e:0f:a2:bb:06:cd:5d:16:cf:a4:7d:b8:e1:5a:
9b:64:ba:38:0b:92:06:66:18:d7:e1:7f:ef:3d:a6:
3e:a0:60:b0:b4:91:29:3b:8b:9b:48:e3:7d:07:f9:
ba:c7:bf:7c:82:64:f7:ec:f5:a5:33:03:64:c5:51:
8c:ec:69:4a:31:de:f9:fa:c8:58:07:08:50:d0:cb:
e5:04:f8:7b:e3:f5:aa:a7:8e:a0:40:bf:af:7c:b6:
f5:2d:79:48:36:5d:06:5f:54:a3:8e:6b:e2:61:75:
f7:dd:9d:3b:28:ff:12:59:68:b0:25:10:59:95:2b:
b9:ff:d2:c1:73:57:90:8d:4c:36:95:b9:52:8a:76:
39:6c:a8:35:5e:9d:ef:c5:a6:0e:6f:de:49:14:f0:
6a:ce:4b:fd:81:f8:ad:0f:2f:dd:64:39:71:e6:ef:
ae:72:cf:96:c6:e2:42:e4:74:11:19:69:57:5a:73:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:5C:BF:E3:C2:8E:C2:04:1A:91:40:C6:5D:2E:51:2F:BB:59:53
X509v3 Authority Key Identifier:
keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:0d:67:9c:ab:57:fc:1c:bd:0a:f7:bf:fc:c2:53:ce:e6:
77:89:5b:c4:2f:9f:28:77:99:a6:53:6b:c2:b0:52:be:de:24:
42:22:79:86:6f:57:d0:e0:ca:ed:45:09:02:62:5f:f8:f8:bd:
9b:dd:1b:fa:9d:0c:0e:04:59:eb:1b:ee:f7:0f:5b:76:be:9b:
43:b3:60:88:01:6f:4e:34:c2:b5:8a:8c:08:4d:c2:b7:06:01:
a7:98:50:64:01:55:c2:15:b8:b4:5e:9a:b9:5b:a3:e3:d2:d8:
d7:ce:cf:05:b4:3f:ee:a8:ac:8c:83:56:97:cb:e5:90:60:dd:
4b:cc:3a:36:e7:9c:a9:7c:09:78:97:05:18:3b:68:63:46:40:
c2:32:18:aa:40:97:75:2b:12:07:11:57:d2:2c:9d:93:71:b2:
74:67:a8:a7:71:4c:48:bc:eb:3b:ca:37:75:ae:8b:bc:fd:ef:
b8:af:97:a8:f6:c4:3e:87:20:e1:83:a8:0f:a6:be:16:29:dd:
d8:4a:02:da:aa:9a:1f:b2:ef:8c:f4:46:92:55:28:e9:2e:b3:
17:c4:08:90:e4:53:b7:0d:2a:89:8d:84:8b:69:47:72:62:65:
a7:71:e3:b3:85:16:c6:37:92:98:e3:29:2d:5c:5d:da:ff:e6:
4a:dc:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:11 2025 by rpki-client