Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: Ef7l97gEp50V7P6/5r+XAFtA09lDzqZFuCauKCbgo5E=
Subject key identifier: F3:24:EB:32:82:9E:4D:31:27:33:AA:CC:00:A9:13:4F:16:27:15:D0
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 0199FCC68E9691BB7F9408AF5719364AE449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 1262
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: VnasLW/ALUD/Qnk6P6xU++JxoB94pGJIpDMm2kmC/Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8e:96:91:bb:7f:94:08:af:57:19:36:4a:e4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=f324eb32829e4d312733aacc00a9134f162715d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:96:5c:d0:47:d3:af:18:2d:45:13:ce:bb:
9e:6d:bd:06:3d:64:d3:c2:82:94:a4:82:f3:c9:47:
4f:e2:5a:14:a6:8a:9b:e8:3a:2b:fa:6a:b9:69:4b:
93:68:9f:10:2c:9e:29:6c:58:da:04:b9:f2:f4:e2:
c5:1e:40:bf:88:e3:38:23:ed:e7:5e:f4:0c:d2:58:
db:b8:f2:c9:27:b8:43:b7:41:1e:8c:aa:c8:73:2f:
ed:a9:c3:f5:48:c5:31:30:e0:3b:68:ec:af:30:bc:
0b:8e:f2:fb:3b:01:3d:1c:f6:f6:36:6c:e1:72:f4:
78:5c:d9:f2:f6:b6:5f:6c:b7:dc:a1:bc:76:84:64:
24:e4:66:d3:d3:fd:11:e2:4e:e7:76:2e:6f:c3:ed:
6a:4a:b4:f4:7f:77:95:a0:ad:66:44:8d:f7:87:d3:
fb:46:1a:2e:82:b3:b7:fb:99:57:23:b9:20:06:36:
bb:2b:51:64:56:c8:0a:ca:f6:9d:4d:c2:bd:d0:35:
7f:d4:36:7e:75:a9:04:f8:25:fa:d0:a3:e5:42:84:
8f:f7:87:ae:8e:98:21:ed:fc:29:9a:9b:13:4c:57:
76:20:f4:27:be:21:dd:88:75:2e:9d:be:59:34:5d:
6f:a1:a5:76:7f:9e:41:91:a0:63:c8:2a:f0:1e:9a:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:24:EB:32:82:9E:4D:31:27:33:AA:CC:00:A9:13:4F:16:27:15:D0
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:bd:ae:2b:22:19:cf:8f:9a:52:e9:05:0a:f1:88:00:c9:
00:b3:b0:38:1e:c8:24:ec:a3:15:e8:7a:a0:81:e8:e9:40:ca:
f2:9b:b8:ba:14:09:3b:0c:d5:5f:4e:6d:a9:2f:2f:fb:27:1a:
11:c5:9f:28:05:01:fd:c0:f0:ad:c1:6c:a9:e4:f1:20:37:d4:
d2:10:b1:88:ba:0e:0b:88:0f:6c:d8:07:88:c6:a4:70:9e:e5:
51:03:c4:ff:10:2f:65:98:9a:03:84:e8:e3:97:2d:1a:37:53:
53:a7:fe:e5:4a:51:32:74:50:a4:b2:93:32:e0:c7:6d:e1:c2:
96:77:51:4d:53:f9:53:6b:eb:83:63:09:d0:f1:9d:e2:30:62:
d6:3e:d0:af:ca:e2:4e:49:7b:82:47:b6:17:7d:4a:ed:43:95:
b7:f3:1c:30:9b:50:8e:14:ee:7f:6a:d5:51:02:3e:75:d9:c7:
82:8e:b8:c4:ac:ff:c7:e8:5c:4d:82:71:0c:68:3e:09:fb:ae:
02:04:63:8e:4d:41:7e:98:ac:90:c2:6a:dd:b7:92:61:bb:c2:
0c:c5:27:c5:c7:80:3c:69:ec:02:ae:8b:40:be:4f:3f:97:d0:
9b:fb:c0:c1:4b:83:34:97:92:8f:14:6b:b7:27:d0:d0:e4:54:
2c:c9:19:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xo6Wkbt/lAivVxk2SuRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODMyNmNjZWJjNWZjMzJmYmQwZTM0ZmVlN2YzOWJiYTg4
ZmI5YTIwHhcNMjUxMDE5MTQwMTM1WhcNMjUxMDIwMTQwMTM1WjAzMTEwLwYDVQQD
EyhmMzI0ZWIzMjgyOWU0ZDMxMjczM2FhY2MwMGE5MTM0ZjE2MjcxNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHOWXNBH068YLUUTzruebb0GPWTT
woKUpILzyUdP4loUpoqb6Dor+mq5aUuTaJ8QLJ4pbFjaBLny9OLFHkC/iOM4I+3n
XvQM0ljbuPLJJ7hDt0EejKrIcy/tqcP1SMUxMOA7aOyvMLwLjvL7OwE9HPb2Nmzh
cvR4XNny9rZfbLfcobx2hGQk5GbT0/0R4k7ndi5vw+1qSrT0f3eVoK1mRI33h9P7
RhougrO3+5lXI7kgBja7K1FkVsgKyvadTcK90DV/1DZ+dakE+CX60KPlQoSP94eu
jpgh7fwpmpsTTFd2IPQnviHdiHUunb5ZNF1voaV2f55BkaBjyCrwHpojXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMk6zKCnk0xJzOqzACpE08WJxXQMB8GA1UdIwQY
MBaAFP+DJszrxfwy+9DjT+5/Obuoj7miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZjViNmEtZjRiYi00ZmRlLThhNTEt
OGIxMzQ0YjdkNWE2LzEvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82ZjViNmEtZjRiYi00ZmRlLThhNTEtOGIxMzQ0YjdkNWE2
LzEvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4W9risi
Gc+PmlLpBQrxiADJALOwOB7IJOyjFeh6oIHo6UDK8pu4uhQJOwzVX05tqS8v+yca
EcWfKAUB/cDwrcFsqeTxIDfU0hCxiLoOC4gPbNgHiMakcJ7lUQPE/xAvZZiaA4To
45ctGjdTU6f+5UpRMnRQpLKTMuDHbeHClndRTVP5U2vrg2MJ0PGd4jBi1j7Qr8ri
Tkl7gke2F31K7UOVt/McMJtQjhTuf2rVUQI+ddnHgo64xKz/x+hcTYJxDGg+Cfuu
AgRjjk1BfpiskMJq3beSYbvCDMUnxceAPGnsAq6LQL5PP5fQm/vAwUuDNJeSjxRr
tyfQ0ORULMkZUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:17 2025 by rpki-client