Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: vtWZn1XbIxlAH6ktYdRxtKRAPoQ0i9BeXKu2obLBQcE=
Subject key identifier: 50:8A:55:08:37:CA:05:02:1F:B7:E3:11:DD:81:03:FD:C0:3B:98:C2
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 0198D47282E902B725F8E888B4F0D12169E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 0687
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: XAtmm8K6x299wQvufNG3YtCDQerGWrsBVPBKno/lDDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:82:e9:02:b7:25:f8:e8:88:b4:f0:d1:21:69:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=508a550837ca05021fb7e311dd8103fdc03b98c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:49:68:68:f7:89:8e:15:01:af:ca:48:90:
18:74:a7:2e:7c:0c:92:a4:ec:47:cf:9b:70:a1:e3:
fe:3a:fc:4d:21:eb:0d:2f:91:f3:56:b9:15:9a:cb:
2e:c9:47:4d:c7:33:90:15:ef:26:a5:a2:63:ed:e8:
2c:14:3f:03:d9:03:02:cd:c1:30:fe:83:00:9c:bb:
3e:ca:b0:be:0f:b5:74:b5:45:ef:61:f1:c0:6a:e0:
7d:d2:74:6a:63:fe:7d:89:43:f1:3e:14:3a:27:9a:
f0:22:94:a6:7e:3b:78:7b:d4:71:64:5a:96:16:90:
e3:fc:ea:15:32:0e:e0:fd:76:79:10:f5:1f:3c:a1:
45:c7:b9:e3:18:de:f4:39:0f:bd:be:48:43:54:c0:
70:db:91:5c:ac:0f:52:6d:c2:af:19:95:46:b0:ba:
ea:37:56:c4:1a:78:96:4c:fa:e3:a8:e5:4c:8f:02:
7e:84:e3:17:3f:a5:91:c7:e1:67:f6:4f:81:19:15:
79:63:c2:7f:36:a1:33:69:7d:af:a5:b0:f0:e5:46:
d2:a5:cd:ad:9a:49:b3:95:72:87:7f:b2:1f:e4:fc:
99:1d:75:b2:f8:cb:b9:c0:f1:0c:34:17:94:50:cb:
ab:79:0f:ef:11:4e:fb:de:74:90:1e:34:32:64:c1:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:55:08:37:CA:05:02:1F:B7:E3:11:DD:81:03:FD:C0:3B:98:C2
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8b:39:4b:f1:9d:d1:a2:88:97:51:68:de:42:da:4f:b8:0c:
d8:1c:c8:28:02:26:7f:24:0a:6f:30:5d:0a:2c:af:3a:a1:ed:
c7:16:65:39:26:3d:e6:fc:62:17:9d:ad:08:29:05:e5:89:7c:
5a:f6:72:4e:5e:2e:8d:e9:4c:08:c5:9d:de:12:04:ec:09:a5:
7c:ca:6d:57:c9:2e:85:f1:84:d8:ad:ad:3e:e0:21:c8:7f:d5:
50:4a:02:38:8b:46:3f:ea:41:3c:d7:7a:1c:0d:ea:f4:8a:a2:
26:f6:01:18:fd:4b:02:22:1f:b8:17:2f:28:8d:5d:11:e1:4c:
1c:64:90:75:71:d5:43:bc:52:7b:6c:20:49:b6:a8:57:7f:a3:
88:ba:d7:e4:8b:6e:33:f2:74:43:79:57:50:4f:7b:de:8b:74:
ca:8b:b2:b4:ae:0e:d6:68:10:0e:46:ed:e8:a9:9b:56:67:37:
fd:92:88:5d:4f:33:82:b6:0c:eb:eb:78:b3:26:16:c0:64:1f:
15:7d:80:82:0b:c7:72:df:01:db:28:fe:04:ca:a7:6c:40:be:
6b:ba:13:23:98:84:78:3d:83:c4:f5:7e:13:ce:11:46:c4:24:
a2:68:31:75:4c:d0:16:99:7e:73:fd:1f:f8:20:d4:ab:d6:35:
20:c0:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:19 2025 by rpki-client