Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
File: mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json)
Hash identifier: Ow1OTxnBEeO23q2FyE75VYJ+dOaJKkVOe5v67gICaik=
Subject key identifier: D5:0F:23:F2:E4:12:57:18:16:2A:2D:F8:D3:26:FD:46:46:22:54:35
Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
Certificate issuer: /CN=98d2d8720a7835bdab53b45313381abb176d5dff
Certificate serial: 019A730120AE632B7E1335399C3C9F17875C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
Manifest number: 0644
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: Q7j1+eFM3DUBq5oc8AiN7wEuyn3L8dEjRpvV85n2e/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:20:ae:63:2b:7e:13:35:39:9c:3c:9f:17:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=d50f23f2e4125718162a2df8d326fd4646225435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:84:fb:89:2a:87:f2:a8:0b:7d:f9:a4:f5:
bd:8b:e2:12:34:ca:fd:6f:86:3a:1b:92:fc:92:fb:
af:63:99:45:aa:74:57:28:da:49:a2:d3:ba:59:54:
83:a8:5a:68:7a:46:3b:a2:0e:2d:73:32:8f:b6:6e:
eb:71:80:7c:ed:0e:b0:f8:88:c1:e5:61:a3:0e:6f:
96:8d:1e:2c:48:31:4b:7f:13:b4:0c:da:29:a6:1c:
3a:be:93:b3:30:7d:77:2d:fc:53:44:ce:94:c6:a4:
c2:55:fe:1a:f7:6b:42:23:90:06:3e:d9:74:97:e2:
d0:88:20:5f:22:f7:57:fb:fe:18:65:41:64:af:8d:
39:fd:60:75:4c:27:44:64:5b:a2:4d:a5:ff:2a:c0:
1a:11:33:1b:87:95:80:1d:60:6e:da:be:8e:bf:b9:
ed:f6:97:0d:64:ef:7d:89:30:ff:b7:01:66:9e:e2:
07:e5:02:aa:8c:de:28:4d:70:ee:c2:3f:ad:e8:e2:
8f:b0:40:8e:8e:77:d7:61:17:81:18:ee:b4:22:d7:
0c:18:48:05:1e:d9:a4:ce:73:4b:dc:2b:92:dd:1c:
20:d3:dd:97:87:4a:d3:79:1c:31:a5:9b:8a:03:64:
1b:c7:5d:aa:9e:f7:9d:d0:27:b2:10:7b:ba:16:87:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:23:F2:E4:12:57:18:16:2A:2D:F8:D3:26:FD:46:46:22:54:35
X509v3 Authority Key Identifier:
keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e9:67:48:66:da:21:3d:32:75:da:8a:2b:3c:bd:d6:bd:dc:
7f:0f:87:46:7d:7c:b0:59:3d:04:f1:ba:7d:ca:a4:4c:f1:45:
71:d6:eb:9f:65:64:61:28:b1:a8:40:75:65:eb:70:93:28:0d:
d4:57:9d:50:d9:8b:1e:8f:f6:a4:0c:91:a0:7d:7b:c5:bc:bb:
e5:f4:c6:f7:b2:e2:f9:d7:ab:13:f7:20:28:dc:24:61:2e:53:
80:7e:0a:84:90:22:d0:b2:d5:1a:03:6c:24:34:1b:d2:0c:5f:
2d:9f:c1:1f:48:fa:ce:24:f0:f9:98:be:c6:45:f1:36:a2:0d:
16:02:74:44:0d:d6:6e:5b:7d:f4:1f:51:2d:22:56:79:a2:ba:
88:ab:32:ad:8e:e0:97:e6:76:11:79:45:9f:4a:7b:af:d3:65:
16:f8:08:f5:b4:9e:cd:5c:dd:51:20:2a:f8:93:94:c6:13:8f:
68:21:eb:f1:11:bb:a4:4f:b7:b2:d3:cc:bd:e3:2b:29:7e:88:
4a:90:b1:84:1a:a8:e7:5b:54:9c:c0:0e:94:a8:60:ca:36:91:
f4:7f:bb:88:c6:20:22:ef:e7:e4:4e:49:be:02:c0:3e:71:15:
82:94:cb:3b:44:6f:33:70:6a:c0:88:7a:6d:57:7d:b9:5e:c2:
d0:1d:66:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzASCuYyt+EzU5nDyfF4dcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZDJkODcyMGE3ODM1YmRhYjUzYjQ1MzEzMzgxYWJiMTc2
ZDVkZmYwHhcNMjUxMTExMTMwMDQ0WhcNMjUxMTEyMTMwMDQ0WjAzMTEwLwYDVQQD
EyhkNTBmMjNmMmU0MTI1NzE4MTYyYTJkZjhkMzI2ZmQ0NjQ2MjI1NDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmE+4kqh/KoC335pPW9i+ISNMr9
b4Y6G5L8kvuvY5lFqnRXKNpJotO6WVSDqFpoekY7og4tczKPtm7rcYB87Q6w+IjB
5WGjDm+WjR4sSDFLfxO0DNopphw6vpOzMH13LfxTRM6UxqTCVf4a92tCI5AGPtl0
l+LQiCBfIvdX+/4YZUFkr405/WB1TCdEZFuiTaX/KsAaETMbh5WAHWBu2r6Ov7nt
9pcNZO99iTD/twFmnuIH5QKqjN4oTXDuwj+t6OKPsECOjnfXYReBGO60ItcMGEgF
HtmkznNL3CuS3Rwg092Xh0rTeRwxpZuKA2Qbx12qnved0CeyEHu6FoeESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUPI/LkElcYFiot+NMm/UZGIlQ1MB8GA1UdIwQY
MBaAFJjS2HIKeDW9q1O0UxM4GrsXbV3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU5MWWNncDROYjJyVTdSVEV6Z2F1eGR0WGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNDRmODAtYzY5MS00MTI5LWE5NjEt
ZjMyMGJhNWE0NGRhLzEvbU5MWWNncDROYjJyVTdSVEV6Z2F1eGR0WGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lNDRmODAtYzY5MS00MTI5LWE5NjEtZjMyMGJhNWE0NGRh
LzEvbU5MWWNncDROYjJyVTdSVEV6Z2F1eGR0WGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+lnSGba
IT0yddqKKzy91r3cfw+HRn18sFk9BPG6fcqkTPFFcdbrn2VkYSixqEB1ZetwkygN
1FedUNmLHo/2pAyRoH17xby75fTG97Li+derE/cgKNwkYS5TgH4KhJAi0LLVGgNs
JDQb0gxfLZ/BH0j6ziTw+Zi+xkXxNqINFgJ0RA3Wblt99B9RLSJWeaK6iKsyrY7g
l+Z2EXlFn0p7r9NlFvgI9bSezVzdUSAq+JOUxhOPaCHr8RG7pE+3stPMveMrKX6I
SpCxhBqo51tUnMAOlKhgyjaR9H+7iMYgIu/n5E5JvgLAPnEVgpTLO0RvM3BqwIh6
bVd9uV7C0B1mAQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:15 2025 by rpki-client