Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: 0/Aqkp/fpP0ff3cNDpTA+ZhB/TJ+xoAwmC0EN0BY3Ck=
Subject key identifier: B9:5D:50:B8:6A:58:3E:88:8C:82:6E:83:70:02:1A:BB:61:E9:4D:EE
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 0199FBEB9AB9B5219DD8929044A20DC75530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 07BE
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: cITU9x9U9p1cQ03/CBJc/DR7ipun/cuqu78RMWevi1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:b9:b5:21:9d:d8:92:90:44:a2:0d:c7:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=b95d50b86a583e888c826e8370021abb61e94dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:01:99:7f:c7:36:ac:a8:38:83:1d:fb:11:
95:ca:fc:3f:c6:33:a3:6c:53:dc:1b:7e:aa:50:eb:
94:5a:0a:40:56:1a:3b:f6:d6:ac:bd:47:53:ce:25:
ac:6b:c0:0f:fc:f7:e5:d3:35:28:d0:a0:77:50:36:
84:c9:7a:b5:0f:c7:90:79:89:ca:e0:2e:e1:35:9b:
b4:7c:02:a7:1c:2d:f9:16:44:de:ba:84:5d:cc:2a:
8a:83:0a:99:5e:c5:65:e0:21:b6:c6:6a:70:a9:a4:
7e:4a:0d:7a:f1:d2:1f:0c:21:e1:19:54:9c:3b:28:
11:4c:ee:5e:12:22:dc:7c:7d:5c:06:10:87:e7:78:
6e:8a:8d:08:6c:71:03:d4:19:93:eb:af:33:0a:ac:
00:c5:c0:97:1d:5c:19:6c:1b:0c:a2:59:1b:c2:7c:
21:f5:d6:72:5e:f2:cf:f9:12:a7:59:0e:9c:78:4e:
51:3c:8f:23:43:a5:42:94:58:3e:21:26:6a:31:aa:
db:08:ab:6e:f6:14:3e:19:20:dc:eb:af:f0:21:ee:
76:14:1e:2b:7a:d7:6a:c8:29:88:00:66:38:99:ae:
0d:db:4d:07:ed:38:f3:e8:8b:50:55:92:90:c6:95:
11:c2:37:fd:64:da:a2:92:00:14:16:4f:9b:d0:c2:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5D:50:B8:6A:58:3E:88:8C:82:6E:83:70:02:1A:BB:61:E9:4D:EE
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4f:39:78:35:8b:96:77:71:ed:a3:8f:67:6c:64:00:4f:99:
70:61:31:95:e5:04:93:85:16:ea:6b:51:d7:1d:f5:d8:28:bf:
76:9d:d2:8d:88:66:84:79:22:a7:49:2a:6c:72:37:72:f2:00:
d1:59:8e:24:31:be:f5:a3:86:f8:40:89:95:d3:0b:de:6c:f4:
6e:6b:93:e2:28:0f:c3:8b:d9:42:38:e3:43:81:bf:e6:04:a9:
88:30:70:c4:45:59:20:07:8f:50:79:93:fa:05:7e:b3:32:23:
a3:89:05:69:b0:9d:6a:5f:de:07:05:d1:96:bf:01:ce:f0:5f:
37:60:2b:a7:f7:54:0f:51:63:7d:78:55:ab:2e:58:e4:94:86:
73:a2:cf:e3:e9:f4:ad:71:34:25:2c:e2:82:ac:5a:06:08:46:
f8:c1:ae:c9:69:73:96:11:00:28:31:ff:63:59:49:a4:2f:bc:
9b:eb:38:ae:14:e7:cb:da:7c:8d:f3:88:62:e0:ca:f8:ea:51:
8a:86:8a:27:50:be:e5:8b:3e:48:51:9a:c4:de:23:1d:96:33:
bd:27:4b:7d:68:69:e9:2f:77:54:48:02:7b:1b:c1:5c:88:38:
1f:a1:90:b0:2b:f4:ac:b8:14:ed:90:a2:d2:54:7c:9d:2f:fe:
a4:73:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:13 2025 by rpki-client