
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: HWiWyDaKoTrLVCNtv3fuJU/Ajk3Y7paN913NBQvUqzU=
Subject key identifier: 92:CB:AA:4E:7C:65:A0:C0:FA:D3:53:29:53:38:7E:21:ED:BC:83:62
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019873E1E143420A69E37A668B9EA743F3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 0655
Signing time: Mon 04 Aug 2025 07:00:39 +0000
Manifest this update: Mon 04 Aug 2025 07:00:39 +0000
Manifest next update: Tue 05 Aug 2025 07:00:39 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: VKhbEiNn9Rg+txI4caoV3KuR0WKt7RQ6ttm/wj4+8NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e1:43:42:0a:69:e3:7a:66:8b:9e:a7:43:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Aug 4 07:00:39 2025 GMT
Not After : Aug 5 07:00:39 2025 GMT
Subject: CN=92cbaa4e7c65a0c0fad3532953387e21edbc8362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:14:76:38:25:0a:68:eb:b0:84:d3:8e:45:
da:e5:2d:81:4d:96:e7:fc:f7:6c:d1:49:94:a4:75:
a9:c1:df:53:39:a3:f2:99:6c:1f:06:cd:11:0a:de:
7a:fc:b8:52:07:33:4a:00:20:04:72:08:ed:2a:3d:
05:17:68:8f:55:7e:c6:01:a5:01:a2:23:6c:1a:44:
53:2c:78:5a:cf:f0:2b:cc:ff:03:ac:07:8a:6b:ac:
d3:3b:61:53:24:6a:00:40:7d:9a:ab:60:cc:4e:eb:
86:a3:28:65:8b:81:bd:26:d1:e3:b6:cb:e7:b9:fd:
17:e8:af:03:f5:64:36:89:b3:8d:d8:90:8a:10:a8:
ca:7f:e3:f3:49:5c:8d:1d:ba:5b:63:b7:86:7c:1f:
d3:e2:8c:7d:80:1e:1e:f9:00:84:61:cf:eb:0d:ee:
f0:ba:79:7a:bf:65:ea:ca:3a:13:85:48:e6:9c:fc:
c3:6b:aa:08:14:ee:fe:ec:33:98:b9:e2:13:5f:71:
03:7b:b0:b0:86:0c:fe:cb:f2:d2:e7:4b:9f:32:3c:
e1:10:7e:4f:ea:61:28:e5:f4:4d:3a:7b:82:cc:8b:
82:e3:16:a1:06:a3:cc:44:95:a7:05:f0:f1:b4:a9:
e9:39:82:6d:a2:8c:a4:02:7d:fe:06:b3:31:95:67:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:AA:4E:7C:65:A0:C0:FA:D3:53:29:53:38:7E:21:ED:BC:83:62
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:f8:9d:92:e4:b6:ec:ff:5d:db:38:95:9c:b8:43:a1:89:
a4:24:1c:b1:23:06:fa:d6:db:c5:73:46:8e:c8:fa:c9:93:ea:
35:93:f4:71:9f:bc:be:d5:40:e6:4c:89:ee:7a:e4:a7:59:2a:
3b:ec:e1:4b:09:d1:3b:b3:09:43:cc:c5:a4:9e:69:62:49:ee:
07:0b:3f:93:aa:e2:46:f7:de:a3:f7:96:86:f0:79:17:b3:ca:
f8:05:01:b6:d9:47:9b:4c:d1:fd:9f:4f:22:dc:aa:71:59:3a:
06:8c:65:35:93:ee:cc:91:cb:77:e0:dd:c6:43:8a:3c:2e:b7:
5e:cb:20:fe:92:35:1a:68:71:f0:2b:02:2a:3a:86:14:fe:f6:
a1:0e:1f:1d:78:10:1c:3b:d8:7a:5d:65:10:45:ea:f8:8f:77:
a3:13:16:58:d3:ff:9e:6c:3e:0a:09:5f:ad:a3:7d:55:56:91:
7a:13:8a:52:0c:f9:30:af:41:78:89:5e:73:37:41:06:bf:f4:
be:cc:e4:0d:bd:aa:8d:c8:4a:42:fa:ea:4a:05:5c:82:15:84:
27:a6:5e:ac:4d:b6:0b:43:9d:b8:f6:b0:fd:13:f0:01:f7:95:
03:f3:f1:81:4b:54:30:ad:03:2a:53:93:4d:e1:cc:74:c1:6c:
2d:5b:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:22 2025 by rpki-client