Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier: fhm8+kyN+BPLwmJKh7x9v6/Vv2uo0Oa2aPez7mgmBH8=
Subject key identifier: B8:33:14:AD:45:D5:68:B1:60:69:11:80:5E:6D:B7:5E:58:B4:D2:6F
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial: 019A4EF57DFA41542548DB8C5EDE1EE906E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number: 067F
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: 5K+fARuerrsbYDcypISuZmzi/7pqHl3XnykYil9eNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7d:fa:41:54:25:48:db:8c:5e:de:1e:e9:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=b83314ad45d568b1606911805e6db75e58b4d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:31:ef:00:be:eb:6a:92:02:0c:7d:79:8b:
d3:59:01:c6:0e:43:c0:ca:82:b7:5f:5f:50:68:9d:
13:ef:e6:71:8c:93:b7:5d:0e:99:74:04:7b:55:70:
da:1c:e3:0b:9f:a8:62:a9:99:5f:68:d0:ff:fe:97:
a1:2e:55:e3:a7:19:b1:4b:3f:8e:fa:38:fc:77:17:
72:4a:68:ea:a9:a3:69:33:91:6d:fc:15:56:8f:3f:
7c:cd:8e:5c:59:ee:c5:2f:86:4f:d9:f3:6d:b3:92:
c0:a7:fc:1f:bc:91:f2:a2:5c:f1:99:0b:95:68:fb:
4c:e5:94:62:6d:5b:29:54:1c:ea:38:5b:5c:a0:81:
ba:6e:38:f0:e4:71:e5:f1:74:6d:b9:a4:b5:d2:13:
27:e6:a8:9e:2c:d9:0a:32:6e:93:c6:52:96:2b:7a:
28:96:f2:be:73:90:5b:6c:b1:aa:ef:af:78:f9:c3:
61:66:87:e8:b9:a5:c8:e5:cf:1f:09:09:0b:51:94:
ff:23:44:ad:e0:2e:5d:9e:7d:63:84:24:44:98:ef:
27:4e:f8:5a:ca:63:39:b9:74:dd:65:32:74:93:28:
b3:02:ea:42:2e:a1:48:a6:18:c1:8c:10:6e:9b:9d:
32:49:b8:24:f2:f2:2d:35:b8:1e:13:67:8d:0a:ca:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:14:AD:45:D5:68:B1:60:69:11:80:5E:6D:B7:5E:58:B4:D2:6F
X509v3 Authority Key Identifier:
keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d0:8f:35:e9:ea:19:29:95:93:81:04:32:dd:ab:64:46:b7:
50:77:ab:73:fa:a7:95:38:8d:09:4c:83:ab:54:27:2c:7c:8e:
d6:5e:76:84:26:b8:6d:29:02:2e:4f:5b:7b:b9:3a:19:1c:0a:
c6:2b:b9:d2:dd:4f:32:33:c2:bb:1a:00:d5:d3:ac:eb:9c:62:
e1:7d:c3:3e:19:3a:55:08:c7:43:81:8d:a5:04:84:16:f8:ed:
27:2d:30:49:20:02:50:c2:23:63:95:8d:36:aa:fc:eb:9b:e7:
2f:8c:2c:26:9e:d9:7e:ea:5a:a7:a0:74:12:26:c9:0f:af:d7:
6d:57:24:06:12:14:dd:3a:12:54:71:40:98:32:a1:a2:61:51:
a6:90:5d:66:52:2c:83:5c:0d:da:80:ff:a6:20:7f:79:a7:33:
63:ca:02:30:77:af:4a:dd:26:2c:81:79:88:68:c6:41:b7:23:
86:fd:f2:a7:22:2b:10:ea:48:63:ee:09:f1:61:7d:9f:16:89:
c0:4d:f2:c6:58:af:12:aa:f5:55:96:1d:1b:09:1f:34:7c:29:
da:79:46:60:3e:30:4c:23:1b:d3:80:c0:51:4a:cb:d0:8e:75:
a4:64:00:36:c2:c5:14:33:30:0a:e4:95:4c:6c:49:29:5c:3f:
c8:a6:aa:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpO9X36QVQlSNuMXt4e6QbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWQyMjg4MDM1ZTQwNTZlYjBjZWMxNTQ0NmEwYzQxODBk
MjZlYTQwHhcNMjUxMTA0MTMwMTQyWhcNMjUxMTA1MTMwMTQyWjAzMTEwLwYDVQQD
EyhiODMzMTRhZDQ1ZDU2OGIxNjA2OTExODA1ZTZkYjc1ZTU4YjRkMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+wx7wC+62qSAgx9eYvTWQHGDkPA
yoK3X19QaJ0T7+ZxjJO3XQ6ZdAR7VXDaHOMLn6hiqZlfaND//pehLlXjpxmxSz+O
+jj8dxdySmjqqaNpM5Ft/BVWjz98zY5cWe7FL4ZP2fNts5LAp/wfvJHyolzxmQuV
aPtM5ZRibVspVBzqOFtcoIG6bjjw5HHl8XRtuaS10hMn5qieLNkKMm6TxlKWK3oo
lvK+c5BbbLGq7694+cNhZofouaXI5c8fCQkLUZT/I0St4C5dnn1jhCREmO8nTvha
ymM5uXTdZTJ0kyizAupCLqFIphjBjBBum50ySbgk8vItNbgeE2eNCspn+wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLgzFK1F1WixYGkRgF5tt15YtNJvMB8GA1UdIwQY
MBaAFPutIogDXkBW6wzsFURqDEGA0m6kMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02MGlpQU5lUUZickRPd1ZSR29NUVlEU2JxUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJmLWMwNjUtNDhkMS1hZmNl
LTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dWUkdvTVFZRFNicVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IyL2E2YjBiZi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1
Y2IvMS8xLTYwaWlBTmVRRmJyRE93VlJHb01RWURTYnFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdCP
NenqGSmVk4EEMt2rZEa3UHerc/qnlTiNCUyDq1QnLHyO1l52hCa4bSkCLk9be7k6
GRwKxiu50t1PMjPCuxoA1dOs65xi4X3DPhk6VQjHQ4GNpQSEFvjtJy0wSSACUMIj
Y5WNNqr865vnL4wsJp7Zfupap6B0EibJD6/XbVckBhIU3ToSVHFAmDKhomFRppBd
ZlIsg1wN2oD/piB/eaczY8oCMHevSt0mLIF5iGjGQbcjhv3ypyIrEOpIY+4J8WF9
nxaJwE3yxlivEqr1VZYdGwkfNHwp2nlGYD4wTCMb04DAUUrL0I51pGQANsLFFDMw
CuSVTGxJKVw/yKaqQA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:36 2025 by rpki-client