Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: 4LrY3MXm8RAhBE7xe4/+ItLAtXsY7HuUoM4a+hNB7YQ=
Subject key identifier: 7D:05:96:14:62:70:6B:F9:76:4C:C6:7A:67:20:BB:6D:F9:2F:8D:1B
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019A221BC481452A53ACC60D58ED291787D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 125D
Signing time: Sun 26 Oct 2025 20:00:36 +0000
Manifest this update: Sun 26 Oct 2025 20:00:36 +0000
Manifest next update: Mon 27 Oct 2025 20:00:36 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: lsXQDkpxEBJ/vKC6UXnky4kzuToxpfHEhZ7nBcP9NBw=)
2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:c4:81:45:2a:53:ac:c6:0d:58:ed:29:17:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Oct 26 20:00:36 2025 GMT
Not After : Oct 27 20:00:36 2025 GMT
Subject: CN=7d05961462706bf9764cc67a6720bb6df92f8d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:1c:71:cd:aa:f5:f2:3d:de:89:fb:9f:98:
fc:18:14:97:f8:fa:7f:a3:86:51:e6:6a:6e:f2:16:
47:02:ab:d6:12:b4:ea:21:96:7d:95:a3:33:73:69:
36:00:4d:8f:98:b6:2b:f1:ad:1f:c7:49:48:c0:d2:
13:83:3d:e1:9a:d3:9d:db:c1:cb:65:9d:4e:00:c5:
f0:e6:38:07:6f:72:6b:45:8c:1f:2a:90:12:2e:83:
9f:58:59:79:f8:33:fa:4e:c1:be:2b:22:76:f1:4d:
a3:0f:25:be:ca:7b:de:d0:72:b7:92:ab:a7:45:78:
32:a4:eb:50:33:d1:47:60:26:ec:31:7b:50:a1:76:
dc:7f:66:bc:dc:90:5b:3e:33:2a:35:74:a8:df:26:
0b:e6:8a:bd:bd:3d:2d:df:09:57:60:85:fb:77:66:
f9:24:cb:ee:58:bc:de:d4:3c:05:a3:a9:98:1a:dc:
91:80:39:7a:98:6a:81:f3:16:a8:9f:b0:34:cd:23:
c4:f1:c4:a2:6b:77:e3:21:2b:0f:c8:e8:5c:44:2a:
a5:7c:28:94:2b:ba:f9:fc:78:70:10:82:bb:80:d5:
bc:02:f0:ff:02:04:f5:da:4e:62:35:0a:28:d9:83:
43:4e:b2:02:12:80:76:d7:be:64:72:21:09:21:8d:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:96:14:62:70:6B:F9:76:4C:C6:7A:67:20:BB:6D:F9:2F:8D:1B
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:19:8a:97:3b:4e:19:bf:36:f3:87:da:01:69:35:8a:d3:fa:
ff:65:67:04:e7:4f:a7:2b:dc:65:e8:6e:9d:da:fe:7c:89:b0:
3b:00:4b:f5:1c:1d:2c:28:15:01:77:fb:16:3d:17:b4:eb:7d:
1c:1d:4c:55:c0:cf:fa:c2:51:f0:6f:29:0a:23:ed:9f:02:7e:
2d:b6:e1:6c:2e:76:53:d3:10:83:c8:75:b0:c9:43:97:76:05:
b6:8e:ca:2f:9e:e1:53:14:8f:c5:4f:03:74:db:a3:8b:85:8a:
7a:85:5d:9b:58:cf:dc:da:31:27:72:da:9a:d9:5a:36:b3:c9:
4f:e9:13:ff:fe:78:cb:ad:0f:89:04:9b:75:80:ae:84:ad:6d:
62:f4:53:ac:c0:b7:ab:0f:20:e9:c6:0b:76:e9:6b:c6:a8:90:
45:0b:b0:e7:a5:67:5b:c7:2c:7b:ec:38:6c:2e:43:13:86:54:
59:be:cf:ba:0e:d0:14:a4:ff:df:04:2f:76:4f:d1:24:95:a0:
a9:ed:4c:da:10:a2:9e:fe:66:62:77:80:82:32:2f:a3:8c:bb:
b8:07:e5:31:db:03:4d:f4:ca:23:dd:d2:08:c5:ef:c4:be:6b:
b9:d2:4c:ea:5f:5f:df:d7:9b:66:a3:a4:a3:27:c1:8a:59:75:
90:24:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:58:26 2025 by rpki-client