Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: C2XxhrdRurveCcDLsz/FsjdYqK+aOwtiOPNsib3i2vI=
Subject key identifier: F6:8A:7E:38:2D:5A:7F:04:C0:2C:51:BE:48:98:C1:F5:7A:80:05:FC
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019A71B841BFCDA865ED5793D15AB6CFDA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 075D
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: 4JBYz+IAuySKyPUu9eP/PX6i1Lsh16GJMsyCg8eiXOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:41:bf:cd:a8:65:ed:57:93:d1:5a:b6:cf:da:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=f68a7e382d5a7f04c02c51be4898c1f57a8005fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:e7:c7:f3:48:a8:db:3d:ab:4b:dd:e2:e8:
b0:88:a8:94:6b:3b:b2:cc:10:90:20:54:10:1a:cf:
06:9f:af:d2:af:76:89:5f:2a:2e:e5:49:00:45:b2:
90:ee:c9:5e:89:6e:b3:1f:bb:3a:99:60:a0:b4:1c:
d4:83:cd:c4:af:7a:84:d8:98:05:a3:11:b3:33:73:
f7:9e:45:9f:aa:a7:98:dc:d4:a6:e1:64:69:d7:f2:
ec:0e:1e:6b:af:a6:0e:1f:e7:f5:d3:38:cc:82:46:
7a:11:ed:44:c9:eb:4f:53:2e:49:c0:96:6e:fd:8c:
9d:0b:bb:fe:25:b0:6e:f2:d2:71:c3:85:be:67:30:
70:8c:e0:0f:29:1d:ca:18:fc:da:38:aa:45:bf:32:
73:87:f7:e5:f0:62:19:f2:6f:76:7c:ab:ea:ea:07:
f6:06:34:09:3a:c1:f0:07:88:95:64:31:7d:84:8e:
75:7d:f3:4d:cd:52:96:80:85:1c:2b:3f:69:3b:69:
2b:2f:44:0b:fb:1b:01:dd:a8:60:41:d6:b6:1f:e8:
0c:e0:e7:99:02:e1:54:5d:c0:3c:43:1f:c4:f1:2a:
8a:1f:a2:ae:bf:6f:88:ae:db:05:9e:7e:ab:ae:43:
b2:97:e7:a0:c4:e4:75:11:4a:5d:0f:e9:90:02:1d:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8A:7E:38:2D:5A:7F:04:C0:2C:51:BE:48:98:C1:F5:7A:80:05:FC
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b3:2d:0e:bc:7b:c6:5a:36:94:5d:32:c1:fd:68:c0:2b:9f:
5a:29:ba:57:2b:2b:5e:d1:ac:1b:2b:4f:fc:2e:0f:60:99:99:
1a:a6:a2:4a:d9:b0:54:8c:d7:82:b4:8c:2b:0f:66:bf:cb:ab:
01:db:d5:82:02:41:35:5c:d1:c1:6b:f2:fb:22:53:cb:57:30:
80:4d:61:ea:86:fb:62:ab:cf:d4:9f:d3:f6:5c:9e:bf:f3:e5:
24:cb:4d:5a:ea:96:78:74:50:7e:5d:fe:84:8f:4f:9e:f6:31:
4f:2f:27:3e:a6:54:98:d3:ef:fb:c8:6c:2c:e2:42:3e:1d:85:
51:3c:81:5b:7f:ab:f1:bf:b3:3c:73:76:d5:74:9a:5d:b1:9b:
da:1a:e9:87:b8:8b:1b:74:21:4c:93:aa:aa:56:72:2e:d7:de:
88:de:d3:e4:1d:be:b5:18:44:b5:66:87:c8:03:65:06:7f:c7:
71:ca:69:71:89:04:62:45:d2:fa:ee:5f:eb:c6:62:44:b5:b0:
78:ed:e9:b6:69:c1:a2:0a:c1:8a:d0:11:a4:19:62:03:ce:db:
7b:fa:ff:cc:d3:b1:f7:76:84:9a:d8:9e:6b:1a:bf:97:0f:0d:
7a:f5:da:fb:02:cf:c2:55:b0:98:43:32:7c:87:8f:71:6a:87:
3e:49:b4:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEG/zahl7VeT0Vq2z9odMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMmQ2ZDRiZTE2MzEyMzI0MjE4NWRkNDUxZjE0Nzc3OTc0
ZjdjNjIwHhcNMjUxMTExMDcwMTMyWhcNMjUxMTEyMDcwMTMyWjAzMTEwLwYDVQQD
EyhmNjhhN2UzODJkNWE3ZjA0YzAyYzUxYmU0ODk4YzFmNTdhODAwNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Pnx/NIqNs9q0vd4uiwiKiUazuy
zBCQIFQQGs8Gn6/Sr3aJXyou5UkARbKQ7sleiW6zH7s6mWCgtBzUg83Er3qE2JgF
oxGzM3P3nkWfqqeY3NSm4WRp1/LsDh5rr6YOH+f10zjMgkZ6Ee1EyetPUy5JwJZu
/YydC7v+JbBu8tJxw4W+ZzBwjOAPKR3KGPzaOKpFvzJzh/fl8GIZ8m92fKvq6gf2
BjQJOsHwB4iVZDF9hI51ffNNzVKWgIUcKz9pO2krL0QL+xsB3ahgQda2H+gM4OeZ
AuFUXcA8Qx/E8SqKH6Kuv2+IrtsFnn6rrkOyl+egxOR1EUpdD+mQAh0lMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaKfjgtWn8EwCxRvkiYwfV6gAX8MB8GA1UdIwQY
MBaAFDItbUvhYxIyQhhd1FHxR3eXT3xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xYzc1OGMtZTc1Yi00MjI0LWFmYzct
MDYwYmRiYTQzMGM1LzEvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8xYzc1OGMtZTc1Yi00MjI0LWFmYzctMDYwYmRiYTQzMGM1
LzEvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLMtDrx7
xlo2lF0ywf1owCufWim6VysrXtGsGytP/C4PYJmZGqaiStmwVIzXgrSMKw9mv8ur
AdvVggJBNVzRwWvy+yJTy1cwgE1h6ob7YqvP1J/T9lyev/PlJMtNWuqWeHRQfl3+
hI9PnvYxTy8nPqZUmNPv+8hsLOJCPh2FUTyBW3+r8b+zPHN21XSaXbGb2hrph7iL
G3QhTJOqqlZyLtfeiN7T5B2+tRhEtWaHyANlBn/HccppcYkEYkXS+u5f68ZiRLWw
eO3ptmnBogrBitARpBliA87be/r/zNOx93aEmtieaxq/lw8NevXa+wLPwlWwmEMy
fIePcWqHPkm0FQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:13 2025 by rpki-client