Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File: MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier: nstr2Xe3Pfs1VbHVmp6GNjOkJNYb1xFj+S301gahRis=
Subject key identifier: 3D:C5:46:BB:2F:E1:27:FD:C4:43:A9:3F:90:F6:EF:3E:B1:EF:BF:CC
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer: /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial: 0199FD34669D60882DDF345F46ECF4A343BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number: FE
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: 4FpzYmGK3scjiyyYth3vwAL6I+sCn90G0/1uvTGCiuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:66:9d:60:88:2d:df:34:5f:46:ec:f4:a3:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=3dc546bb2fe127fdc443a93f90f6ef3eb1efbfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:37:32:8c:f5:31:ad:03:b3:d7:ac:4c:5d:
22:52:1b:0c:7a:2a:28:81:11:cc:eb:de:44:78:cd:
5d:19:fc:d4:4b:18:64:c0:91:bc:20:49:04:ce:1a:
37:ca:c7:8a:20:f0:d9:e3:db:dc:3d:57:c5:e6:43:
fc:73:9a:a9:af:e4:81:5e:15:7b:d9:a1:d2:37:50:
3c:5c:99:e1:95:c6:34:94:34:4d:4b:a4:86:1f:d0:
61:8e:b9:8e:4a:ae:c0:11:45:bf:e5:a6:21:39:44:
ad:08:64:7a:a7:03:0d:de:e6:bd:04:5c:b7:c7:81:
b4:b2:40:8a:3e:b1:9d:d2:28:67:20:ac:27:b8:1a:
eb:19:2c:1b:a6:96:06:00:af:42:fc:aa:8a:34:ca:
45:f2:09:1f:92:c3:01:cc:cb:0f:ef:24:c0:78:30:
a1:41:2f:30:2a:fd:2a:b6:1a:08:e0:37:58:a0:b5:
40:40:09:7e:27:43:68:55:45:ca:09:a2:7d:84:a9:
81:fc:6d:22:70:ff:7d:7e:b5:69:ce:d3:09:97:47:
11:91:6c:ee:cf:cb:93:65:e9:52:93:65:f5:a6:06:
35:f0:82:35:f9:17:f0:01:65:db:9d:6c:8f:f8:90:
a4:21:1f:e7:2b:56:eb:1e:b6:23:83:92:37:8f:e3:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:46:BB:2F:E1:27:FD:C4:43:A9:3F:90:F6:EF:3E:B1:EF:BF:CC
X509v3 Authority Key Identifier:
keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f7:56:27:64:b7:6d:6d:a0:a8:6b:2c:4e:76:95:14:cf:7a:
57:bf:99:bb:a5:15:d0:dd:47:e3:00:d7:98:21:b8:0f:51:1b:
42:63:f6:6f:6c:fa:7e:4d:ef:05:d6:0d:3b:a9:34:4c:a5:4d:
69:a4:4d:13:88:b6:fe:83:4e:29:81:47:f3:50:d1:6c:12:1a:
d1:55:e1:59:18:78:5d:02:5f:72:a5:fe:d8:7b:60:08:6f:73:
99:45:f5:0a:b8:c8:12:42:31:14:66:20:e1:cf:a3:0e:b3:24:
84:8f:bf:dc:c8:ad:1c:f2:df:e0:d4:94:19:a2:f6:75:70:f1:
18:9e:d7:e3:c2:aa:ce:c4:94:3d:b6:fb:cc:93:32:e4:e7:54:
d9:b2:c6:54:cf:bd:b0:26:4e:5f:4d:59:a6:e7:a5:fd:69:5b:
c2:a9:19:82:f7:0c:87:ed:b5:43:4a:06:3e:5d:f0:df:a1:94:
f7:ad:1e:19:0c:1b:27:45:ee:2a:c5:e4:fd:17:ec:21:40:09:
cf:3c:23:48:a2:63:32:d1:6c:bc:16:e7:75:3b:bd:1a:dd:82:
93:6c:a8:e7:f7:ea:80:02:df:4d:be:bc:2f:33:c8:c6:d4:ff:
ec:96:f2:9d:08:2a:c4:5c:28:9f:da:d3:40:e5:30:01:ab:66:
ba:ac:3b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGadYIgt3zRfRuz0o0O9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOWU0OGI4MjgzMWZmOWNiYmMwYmY3ZGFmZDdkNDY0YjMx
MmMxOTEwHhcNMjUxMDE5MTYwMTMzWhcNMjUxMDIwMTYwMTMzWjAzMTEwLwYDVQQD
EygzZGM1NDZiYjJmZTEyN2ZkYzQ0M2E5M2Y5MGY2ZWYzZWIxZWZiZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wA3Moz1Ma0Ds9esTF0iUhsMeioo
gRHM695EeM1dGfzUSxhkwJG8IEkEzho3yseKIPDZ49vcPVfF5kP8c5qpr+SBXhV7
2aHSN1A8XJnhlcY0lDRNS6SGH9BhjrmOSq7AEUW/5aYhOUStCGR6pwMN3ua9BFy3
x4G0skCKPrGd0ihnIKwnuBrrGSwbppYGAK9C/KqKNMpF8gkfksMBzMsP7yTAeDCh
QS8wKv0qthoI4DdYoLVAQAl+J0NoVUXKCaJ9hKmB/G0icP99frVpztMJl0cRkWzu
z8uTZelSk2X1pgY18II1+RfwAWXbnWyP+JCkIR/nK1brHrYjg5I3j+N7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3FRrsv4Sf9xEOpP5D27z6x77/MMB8GA1UdIwQY
MBaAFDCeSLgoMf+cu8C/fa/X1GSzEsGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUo1SXVDZ3hfNXk3d0w5OXI5ZlVaTE1Td1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85NjIyYTMtOTRmMS00ZmJjLWE0NmIt
MmIyNDhmMmYxMmE3LzEvTUo1SXVDZ3hfNXk3d0w5OXI5ZlVaTE1Td1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85NjIyYTMtOTRmMS00ZmJjLWE0NmItMmIyNDhmMmYxMmE3
LzEvTUo1SXVDZ3hfNXk3d0w5OXI5ZlVaTE1Td1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvdWJ2S3
bW2gqGssTnaVFM96V7+Zu6UV0N1H4wDXmCG4D1EbQmP2b2z6fk3vBdYNO6k0TKVN
aaRNE4i2/oNOKYFH81DRbBIa0VXhWRh4XQJfcqX+2HtgCG9zmUX1CrjIEkIxFGYg
4c+jDrMkhI+/3MitHPLf4NSUGaL2dXDxGJ7X48KqzsSUPbb7zJMy5OdU2bLGVM+9
sCZOX01Zpuel/WlbwqkZgvcMh+21Q0oGPl3w36GU960eGQwbJ0XuKsXk/RfsIUAJ
zzwjSKJjMtFsvBbndTu9Gt2Ck2yo5/fqgALfTb68LzPIxtT/7JbynQgqxFwon9rT
QOUwAatmuqw7ZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:53 2025 by rpki-client