Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: FLkrhuiu7CJ39hsmXlq0MIABYOFY+rYLaCnyUcdoxKw=
Subject key identifier: 03:D4:89:35:02:DC:CF:0E:F0:00:47:70:B2:76:2C:50:BE:88:F3:62
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0199FC5876AD17FF6748BD5A3CCA10A8E584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0A75
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: o2kUjR1V3rPAY1Tr02jdzzm8ZqASwdNOwyuPuCEvuzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:76:ad:17:ff:67:48:bd:5a:3c:ca:10:a8:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=03d4893502dccf0ef0004770b2762c50be88f362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:82:61:1f:7e:9b:51:fe:77:07:08:d2:98:
32:e1:f4:ce:ed:a3:92:16:2a:21:e5:13:86:07:ca:
4c:ed:26:64:97:af:a2:a4:52:4c:a8:dc:7c:fe:8b:
15:a7:00:5e:3e:bd:cf:b6:d9:6f:38:99:41:6c:88:
c3:85:87:17:c2:6e:2a:8f:98:52:e2:c4:6b:d3:25:
ce:b8:50:30:07:43:2c:7d:aa:a1:a6:3e:18:d1:85:
16:c9:cf:34:34:35:bd:8b:e1:00:48:40:95:d6:b6:
ae:fe:c9:45:fd:a3:77:d3:f2:9d:fc:16:a7:97:5d:
50:2b:6e:a2:ba:87:cd:07:50:2d:2b:61:58:96:cc:
65:0a:6f:5b:ae:95:d3:a5:fc:dc:51:2c:3c:f0:72:
1e:ca:56:a9:e5:31:51:93:47:7c:5f:10:18:cf:1e:
e7:9f:83:af:15:89:c3:aa:ff:4d:55:86:05:a7:8e:
68:f3:69:12:ef:fc:0d:e4:20:3d:ac:4a:20:96:aa:
d5:ef:00:67:16:37:96:fb:9c:9b:06:53:48:e1:65:
cd:a7:46:d5:ee:7f:56:b0:21:b5:c7:7a:2b:e5:ed:
d7:56:6d:80:5b:44:8f:44:1b:69:e3:38:3c:65:79:
78:a1:e2:25:5d:72:44:16:fa:af:93:97:3b:f6:33:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:89:35:02:DC:CF:0E:F0:00:47:70:B2:76:2C:50:BE:88:F3:62
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b1:e9:fe:ea:0d:30:19:00:74:eb:37:8f:54:38:04:13:7c:
17:c8:ea:1b:24:25:c6:d2:67:29:d3:75:9d:22:bd:49:be:ae:
29:4b:b2:21:e4:3c:bb:eb:b6:fd:fd:8a:3c:c3:8b:33:23:65:
3a:ff:3c:ce:1a:5c:3b:16:cb:5c:cc:df:09:fc:31:88:39:71:
e2:0d:ae:41:44:5d:dc:d9:5a:86:da:75:8d:cf:ef:a8:78:03:
25:60:fd:73:8a:8c:4e:62:66:05:53:67:18:df:52:16:ee:49:
82:9b:b3:4c:49:6b:1d:70:b7:c6:8a:95:81:5d:5c:0a:9f:63:
02:80:57:c1:61:4d:3a:2c:63:b7:a9:54:ec:5d:ee:97:ae:df:
18:dc:f1:38:d3:fb:0a:a3:a4:7a:0f:0d:12:37:d0:d9:23:54:
43:56:e3:f0:d0:ac:f9:b2:b6:1f:85:61:90:a0:03:9b:c5:d6:
47:14:b6:4d:95:56:63:93:32:87:11:c3:5e:fe:80:e4:05:ee:
30:2d:b4:51:52:65:bd:90:12:fd:3d:3b:4a:97:67:93:57:9c:
ce:25:9d:7d:87:78:40:a4:ff:ba:f1:06:6c:10:f2:7d:55:1f:
f8:13:1b:2e:71:6e:18:1c:dd:ba:26:59:0b:17:88:67:1b:ca:
66:34:19:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHatF/9nSL1aPMoQqOWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj
OTRlMTMwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
EygwM2Q0ODkzNTAyZGNjZjBlZjAwMDQ3NzBiMjc2MmM1MGJlODhmMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt2CYR9+m1H+dwcI0pgy4fTO7aOS
Fioh5ROGB8pM7SZkl6+ipFJMqNx8/osVpwBePr3PttlvOJlBbIjDhYcXwm4qj5hS
4sRr0yXOuFAwB0Msfaqhpj4Y0YUWyc80NDW9i+EASECV1rau/slF/aN30/Kd/Ban
l11QK26iuofNB1AtK2FYlsxlCm9brpXTpfzcUSw88HIeylap5TFRk0d8XxAYzx7n
n4OvFYnDqv9NVYYFp45o82kS7/wN5CA9rEoglqrV7wBnFjeW+5ybBlNI4WXNp0bV
7n9WsCG1x3or5e3XVm2AW0SPRBtp4zg8ZXl4oeIlXXJEFvqvk5c79jMvPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPUiTUC3M8O8ABHcLJ2LFC+iPNiMB8GA1UdIwQY
MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt
Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz
LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLHp/uoN
MBkAdOs3j1Q4BBN8F8jqGyQlxtJnKdN1nSK9Sb6uKUuyIeQ8u+u2/f2KPMOLMyNl
Ov88zhpcOxbLXMzfCfwxiDlx4g2uQURd3Nlahtp1jc/vqHgDJWD9c4qMTmJmBVNn
GN9SFu5JgpuzTElrHXC3xoqVgV1cCp9jAoBXwWFNOixjt6lU7F3ul67fGNzxONP7
CqOkeg8NEjfQ2SNUQ1bj8NCs+bK2H4VhkKADm8XWRxS2TZVWY5MyhxHDXv6A5AXu
MC20UVJlvZAS/T07Spdnk1ecziWdfYd4QKT/uvEGbBDyfVUf+BMbLnFuGBzduiZZ
CxeIZxvKZjQZIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:57 2025 by rpki-client