Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: SiwzJvsv5fOeKXuSDNI9k1SSoK1XRIAybOzTxa+F8Gw=
Subject key identifier: FC:67:EC:82:7F:6D:BC:B5:10:35:41:BB:7B:B9:CF:86:C1:C8:C7:5E
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019A71B88E4AB523258191BFEA5BB105617E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 07FB
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: qhoTYx8IqINawNhQnI1obWBTAoPFeKlXq/1krF1hGhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8e:4a:b5:23:25:81:91:bf:ea:5b:b1:05:61:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=fc67ec827f6dbcb5103541bb7bb9cf86c1c8c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:d0:76:d6:58:08:97:aa:59:bf:5e:a3:19:
9d:36:44:d1:47:93:ab:bd:86:d4:7b:87:34:4b:3c:
a1:57:bf:3e:f2:8d:be:40:ba:66:80:41:08:3f:71:
7d:34:c1:6e:3e:ff:07:2a:3b:55:f6:72:0e:d9:e3:
63:2e:69:56:d1:2c:c4:b9:85:d5:69:ce:86:9d:21:
1a:80:23:c6:45:1f:b8:4b:f1:2c:5e:d8:5f:a5:8f:
37:6f:48:b7:90:22:e5:53:0a:59:78:d9:a2:c0:1f:
11:14:41:7b:f6:e0:84:b1:c8:7e:4c:01:89:f0:10:
a2:56:3c:b2:a7:80:1e:86:d6:e3:e4:44:3a:d5:a8:
81:ab:e6:2d:84:3b:e8:85:a6:34:83:9d:40:37:76:
92:f3:01:07:47:40:83:60:15:95:be:4b:23:bb:8c:
23:91:c0:7f:69:78:fc:f6:b5:c2:72:35:47:6b:c5:
33:b5:81:14:00:b4:a8:2e:f3:4c:c0:01:b6:6c:d7:
86:7c:ce:76:92:f9:c1:e4:6b:fc:24:c8:05:eb:e5:
93:8b:05:65:0d:13:dd:cb:23:0e:48:ae:e5:f4:7b:
e6:3c:c3:cb:aa:a8:69:8f:7d:de:dd:19:7e:35:06:
de:e9:5a:25:d8:36:b6:b9:66:37:50:5f:48:cc:6a:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:EC:82:7F:6D:BC:B5:10:35:41:BB:7B:B9:CF:86:C1:C8:C7:5E
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:13:ae:3e:c4:dc:9a:1a:88:70:6f:2e:e0:50:63:db:5b:5f:
1a:61:86:a5:6f:85:ef:88:66:7f:d5:34:66:66:d8:89:f2:83:
32:19:f3:75:6c:77:7a:df:0f:6e:0f:51:8b:9a:f4:d0:d4:28:
5b:5e:b7:ff:b8:e8:e2:60:75:11:a4:5d:14:a8:bb:19:ff:92:
a5:2b:8f:9f:05:f6:60:76:46:1f:05:2e:fc:6a:af:00:12:db:
48:db:ad:57:3b:bb:18:e3:a2:a5:da:cd:ac:98:50:55:0a:a4:
9d:9b:22:97:ac:f7:ae:ea:d8:c5:51:96:d3:3a:e4:bd:69:3b:
dd:9d:ca:23:f0:b5:9f:99:62:0f:60:a9:37:67:6e:d1:48:93:
b0:ad:02:6b:92:6b:55:23:07:cf:27:0b:16:7d:16:a3:62:db:
64:f4:c3:ca:9e:23:07:57:32:d0:6f:a4:ec:69:23:dd:b3:d8:
57:1e:23:4a:e2:04:92:90:95:fe:6a:c5:1b:4f:3b:78:fd:09:
5c:23:36:ee:7e:da:f0:b1:bf:cd:c9:8e:15:c9:09:a8:6b:e1:
c7:25:59:37:c0:b7:48:af:3a:29:22:25:12:fe:fd:5d:e3:1c:
d7:71:6a:b6:75:30:b4:d1:bf:59:5a:00:9a:10:5e:26:1d:f5:
e9:8e:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:58 2025 by rpki-client