Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: RCqWJOrMDyrzHnQkdIK/bNScZL0A6VgR7R3h3pCxks4=
Subject key identifier: 61:74:EB:B9:B1:C4:4C:5F:09:6D:26:62:CF:54:02:00:1D:C2:39:4B
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019A52D1D46BB667D2C9E20D28E070E2EE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 074D
Signing time: Wed 05 Nov 2025 07:01:14 +0000
Manifest this update: Wed 05 Nov 2025 07:01:14 +0000
Manifest next update: Thu 06 Nov 2025 07:01:14 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: pDVYAde+EkvHpq34JUGc6X9cZAw6M9XHBw3yeTvBpsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d4:6b:b6:67:d2:c9:e2:0d:28:e0:70:e2:ee:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Nov 5 07:01:14 2025 GMT
Not After : Nov 6 07:01:14 2025 GMT
Subject: CN=6174ebb9b1c44c5f096d2662cf5402001dc2394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:b7:9a:d0:f2:24:97:e2:21:3f:c0:ec:1d:
87:b6:be:77:57:33:9c:9f:5e:e3:ac:72:e1:6d:92:
69:e9:a8:20:71:66:b7:df:ed:3d:69:43:fa:6b:fc:
c6:dd:a4:a1:ce:26:df:7b:f9:b5:c9:f8:aa:06:38:
e4:1f:24:15:46:9c:5a:f2:35:5e:d2:c4:07:fd:f6:
8e:18:57:eb:bf:31:60:0a:aa:ff:37:45:c8:b1:20:
b9:2b:f8:f5:e4:7c:92:03:1a:b7:6c:b8:92:4d:1c:
74:de:10:e7:0a:8e:53:ca:be:5a:bd:41:2e:dd:cb:
58:5a:cb:1f:1a:e9:47:3b:0e:bf:b4:76:f6:85:5f:
93:0a:90:c0:df:ff:02:96:60:5d:1d:1e:76:a4:d7:
74:1e:06:48:a2:a3:15:da:cc:7d:39:43:d0:ee:94:
8a:99:0e:09:4a:01:7e:69:af:af:e5:3f:1a:be:5f:
32:dd:64:06:e0:40:02:8d:27:37:f1:47:59:96:dd:
35:fc:bf:8c:e7:af:5e:dc:5b:a1:1b:31:d3:92:3b:
76:b1:02:67:ab:0d:51:44:f3:05:da:b5:16:16:af:
0d:4e:b3:07:cb:e8:7a:14:c3:77:e5:be:5f:ce:f9:
48:b0:ac:34:f3:ae:e9:a0:fc:7a:ed:36:5f:b3:0f:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:EB:B9:B1:C4:4C:5F:09:6D:26:62:CF:54:02:00:1D:C2:39:4B
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:bc:b9:ce:14:04:c4:97:a1:06:9a:9b:a0:4b:a8:e7:46:
9b:c7:31:98:6b:60:79:ba:7a:ac:b7:0c:0f:d6:4c:6f:13:6a:
67:4e:d1:2d:6a:9a:12:5b:ea:31:af:77:6d:88:6a:dd:c4:50:
1c:24:cc:73:29:b3:c9:af:f7:7c:dc:6d:f4:41:7d:44:77:09:
8d:81:fc:bf:44:8f:21:36:de:dd:40:fa:10:b4:80:2e:52:00:
05:74:b4:9b:5a:a8:f8:9d:67:37:29:d8:26:6a:ce:87:1d:ce:
49:49:67:11:dc:c2:87:35:dd:bb:72:91:a9:7a:39:b0:9c:13:
b7:90:6f:59:af:f4:5c:03:5d:5a:53:21:10:35:56:68:74:97:
6c:6d:4e:4d:b5:d7:2f:fc:b2:4e:a8:5a:02:26:65:52:5f:92:
32:1f:26:e9:e3:b3:20:64:79:5b:26:bb:7e:bd:f3:1e:28:4f:
1d:74:5c:eb:f9:7c:d1:44:c8:3d:1a:4e:df:ff:a0:39:93:68:
56:a7:3e:af:cc:e7:a7:14:31:14:dd:41:69:d3:39:fb:bf:9f:
95:48:ab:81:c2:4d:5a:ba:b0:00:29:68:d9:34:db:b7:ca:a7:
ba:29:8e:13:ca:e4:a9:c6:06:b1:82:b1:6d:dd:db:98:c1:24:
d2:38:0b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:57 2025 by rpki-client