Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: 8+bmewUluVHvS8YBcSoc1gpuTQYUq8ncNNu54LDlD8I=
Subject key identifier: FE:F5:1B:8F:D4:B6:C9:E9:0E:CD:EC:A0:41:9A:73:7C:1C:05:A6:19
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 019A71B91566EB2A6720AE036CBFDD842A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: OOZR53QZbwto0Dpw6o021AZksWjWbP0cWH/3mna1HfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:66:eb:2a:67:20:ae:03:6c:bf:dd:84:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=fef51b8fd4b6c9e90ecdeca0419a737c1c05a619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:e3:70:de:cf:1e:77:1b:82:51:8a:7f:65:
01:a3:a1:bf:1d:04:a1:c8:85:78:9c:6c:c8:56:08:
d8:35:55:e6:fe:7d:e3:50:2a:84:24:e7:29:8b:5e:
e8:05:61:4f:47:08:46:67:1f:37:3f:23:cf:4c:53:
1b:91:42:df:a9:af:de:d1:f6:17:db:fd:97:a9:8e:
82:7f:14:49:03:e8:23:d1:84:52:71:ba:e9:7a:1c:
79:eb:83:b2:73:8b:d8:f0:98:ee:23:39:2a:9f:17:
c9:21:33:b4:be:cf:71:70:e3:98:5a:ef:18:8c:6f:
04:e5:5e:c3:66:f1:21:4b:a6:ac:a8:c4:c6:04:c2:
ae:fb:fb:e0:68:4a:6f:ea:b2:ca:e8:6b:f8:c0:5f:
cd:a9:18:88:81:db:01:a2:79:6a:9f:16:a3:e6:c0:
90:c2:8e:98:04:77:dc:e3:24:8d:5e:fd:59:81:5a:
e4:79:78:90:be:91:60:f8:71:55:7b:67:5b:5c:87:
53:1e:41:8e:b8:72:9c:e2:3b:f9:86:9a:64:d9:3c:
90:69:19:6b:e9:c6:72:51:8a:6f:ee:d9:ee:7f:df:
5e:cd:11:b3:4a:3f:33:5d:67:9a:cb:32:74:1d:43:
13:08:4e:76:a2:d8:b8:2e:47:a6:16:0d:81:89:3e:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F5:1B:8F:D4:B6:C9:E9:0E:CD:EC:A0:41:9A:73:7C:1C:05:A6:19
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:27:79:2e:5a:21:ce:6a:53:51:4f:f2:dc:13:38:5f:57:a0:
a8:17:9a:27:49:01:d2:1e:b9:64:f3:6f:58:96:66:9c:4e:d1:
58:5b:3e:bb:dd:75:fc:72:90:ce:68:f8:6c:e6:4a:9f:29:33:
b4:5c:42:01:ac:43:ae:75:6e:cd:68:13:b9:8f:66:30:44:82:
97:37:a3:6a:c7:eb:4e:74:d6:a5:c8:c6:61:6d:52:09:36:02:
6a:24:43:b2:ea:9d:f0:b8:b4:04:c0:94:81:99:b7:c8:d3:8c:
50:85:87:10:b0:3c:2a:b0:1f:0b:57:d5:fd:45:95:85:14:a8:
82:71:0c:ed:2a:de:d7:ad:77:0d:70:58:e4:33:51:96:38:b8:
e0:5e:9d:33:0f:36:f7:2c:e7:2b:fa:58:9d:e0:69:82:6a:00:
a6:fd:5b:95:16:e2:82:b0:84:10:61:fc:7a:a3:cf:51:65:e5:
f1:d6:8e:94:a7:6b:ee:70:c2:f7:f3:aa:c7:09:d5:f6:08:b8:
19:33:54:2b:c0:c2:b7:4e:5c:fc:fb:11:7b:d2:f2:cd:7b:3a:
ac:96:22:fd:e3:f6:86:ca:ad:06:4f:e4:a7:ce:56:03:93:53:
b7:1d:2e:83:4e:d3:d7:57:11:bb:5a:3b:bd:ac:dc:14:89:0c:
c9:9e:bd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRVm6ypnIK4DbL/dhCohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2
ZWJiMTUwHhcNMjUxMTExMDcwMjI2WhcNMjUxMTEyMDcwMjI2WjAzMTEwLwYDVQQD
EyhmZWY1MWI4ZmQ0YjZjOWU5MGVjZGVjYTA0MTlhNzM3YzFjMDVhNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgrjcN7PHncbglGKf2UBo6G/HQSh
yIV4nGzIVgjYNVXm/n3jUCqEJOcpi17oBWFPRwhGZx83PyPPTFMbkULfqa/e0fYX
2/2XqY6CfxRJA+gj0YRScbrpehx564Oyc4vY8JjuIzkqnxfJITO0vs9xcOOYWu8Y
jG8E5V7DZvEhS6asqMTGBMKu+/vgaEpv6rLK6Gv4wF/NqRiIgdsBonlqnxaj5sCQ
wo6YBHfc4ySNXv1ZgVrkeXiQvpFg+HFVe2dbXIdTHkGOuHKc4jv5hppk2TyQaRlr
6cZyUYpv7tnuf99ezRGzSj8zXWeayzJ0HUMTCE52oti4LkemFg2BiT5NEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP71G4/UtsnpDs3soEGac3wcBaYZMB8GA1UdIwQY
MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt
ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx
LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANid5Lloh
zmpTUU/y3BM4X1egqBeaJ0kB0h65ZPNvWJZmnE7RWFs+u911/HKQzmj4bOZKnykz
tFxCAaxDrnVuzWgTuY9mMESClzejasfrTnTWpcjGYW1SCTYCaiRDsuqd8Li0BMCU
gZm3yNOMUIWHELA8KrAfC1fV/UWVhRSognEM7Sre1613DXBY5DNRlji44F6dMw82
9yznK/pYneBpgmoApv1blRbigrCEEGH8eqPPUWXl8daOlKdr7nDC9/OqxwnV9gi4
GTNUK8DCt05c/PsRe9LyzXs6rJYi/eP2hsqtBk/kp85WA5NTtx0ug07T11cRu1o7
vazcFIkMyZ69aA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:08 2025 by rpki-client