Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: yKKPwOzuUeXu3mL4MSVd4e2i6ltUOzZm2yM2YitoGKY=
Subject key identifier: 48:CD:D7:DB:66:3B:2B:B4:C8:90:AF:38:8C:23:87:7B:44:A8:16:1A
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019A507525EADA18E1E01C18777DB1DA418F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 1275
Signing time: Tue 04 Nov 2025 20:00:45 +0000
Manifest this update: Tue 04 Nov 2025 20:00:45 +0000
Manifest next update: Wed 05 Nov 2025 20:00:45 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: G5y8woEe2/b/6D6ohA71RypI48vdMD4b1lCc5TukLoE=)
2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:25:ea:da:18:e1:e0:1c:18:77:7d:b1:da:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Nov 4 20:00:45 2025 GMT
Not After : Nov 5 20:00:45 2025 GMT
Subject: CN=48cdd7db663b2bb4c890af388c23877b44a8161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:8e:03:12:f1:81:41:b9:42:cf:9b:46:80:
61:cf:d1:37:9a:27:ca:e5:11:d7:9f:2c:e3:7e:cb:
a0:63:f6:22:71:4f:ff:9a:db:d5:cf:e0:d7:ef:5d:
26:e4:e1:15:89:a3:df:db:93:7d:26:ef:9a:17:4c:
38:13:88:56:ac:40:b9:d0:64:5f:d8:7f:c1:5e:4c:
fe:67:57:99:50:75:6f:51:bd:bb:64:be:05:8c:42:
64:3f:04:d6:5b:d2:8d:c4:a8:a8:e5:c6:7e:0a:57:
7e:f5:9a:fa:dc:de:c8:1c:6a:82:a3:33:61:bf:9a:
2e:cd:a8:a0:e1:05:f1:87:82:2d:33:68:a7:0c:cc:
b3:2d:64:4e:b4:05:d3:93:0d:ca:2e:29:cf:ca:64:
95:6f:e5:38:b9:77:83:15:6b:7d:88:64:35:33:a7:
c3:e5:93:e2:7f:fb:90:58:86:27:03:96:08:04:b2:
ff:f7:bf:ff:c5:38:a2:bf:14:d0:15:11:8f:ee:9b:
03:16:f2:22:39:46:b1:03:ab:d9:b9:bd:a7:10:46:
ca:7b:1a:55:87:bf:82:b9:99:57:9c:6f:ea:81:51:
19:f1:0c:02:1b:fe:20:c3:cf:c9:17:12:bc:bf:43:
62:eb:cf:48:22:d4:b3:bf:85:04:a6:b9:eb:d2:f7:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:D7:DB:66:3B:2B:B4:C8:90:AF:38:8C:23:87:7B:44:A8:16:1A
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b4:d3:9d:54:bf:f5:3a:a2:8c:37:84:97:bd:7e:02:00:5e:
85:a4:4d:85:38:e2:b5:ae:b0:61:0a:34:82:f6:10:20:f8:39:
03:93:9f:ef:7a:dc:ae:09:86:32:37:1f:97:3c:a6:15:87:31:
f8:83:5b:58:a7:ce:3a:09:66:9b:34:34:0e:8d:db:f7:6c:1f:
6b:4d:a0:bc:6b:5d:e8:87:95:5e:33:c9:4b:af:11:e9:ba:fc:
22:0d:92:50:ae:87:75:83:d4:42:ac:78:57:10:1f:43:76:78:
91:f9:13:b8:88:65:d3:45:dc:83:9f:75:6e:ce:b7:b2:c9:46:
72:3b:63:75:cd:6f:68:44:0f:cd:ab:05:50:08:ad:47:a4:33:
7d:f5:05:5f:8f:1d:2d:28:f8:7d:df:a5:b9:4e:56:a4:43:63:
c5:5e:7c:3f:f1:ba:00:a6:8a:3d:95:01:82:57:43:47:93:1d:
c7:ca:0f:b3:a5:d8:d8:63:c0:04:56:9d:64:85:be:50:ad:41:
4b:4c:f1:00:83:c5:31:cc:06:0c:15:58:d0:20:eb:4e:66:25:
7d:f5:f5:03:1e:65:7f:19:6a:ac:6c:dd:d6:f3:7b:38:20:ae:
42:71:9f:29:4e:5f:38:14:65:df:c2:cb:f8:80:59:e9:02:63:
8a:88:65:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSXq2hjh4BwYd32x2kGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjUxMTA0MjAwMDQ1WhcNMjUxMTA1MjAwMDQ1WjAzMTEwLwYDVQQD
Eyg0OGNkZDdkYjY2M2IyYmI0Yzg5MGFmMzg4YzIzODc3YjQ0YTgxNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApraOAxLxgUG5Qs+bRoBhz9E3mifK
5RHXnyzjfsugY/YicU//mtvVz+DX710m5OEViaPf25N9Ju+aF0w4E4hWrEC50GRf
2H/BXkz+Z1eZUHVvUb27ZL4FjEJkPwTWW9KNxKio5cZ+Cld+9Zr63N7IHGqCozNh
v5ouzaig4QXxh4ItM2inDMyzLWROtAXTkw3KLinPymSVb+U4uXeDFWt9iGQ1M6fD
5ZPif/uQWIYnA5YIBLL/97//xTiivxTQFRGP7psDFvIiOUaxA6vZub2nEEbKexpV
h7+CuZlXnG/qgVEZ8QwCG/4gw8/JFxK8v0Ni689IItSzv4UEprnr0vfcqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjN19tmOyu0yJCvOIwjh3tEqBYaMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLTTnVS/
9TqijDeEl71+AgBehaRNhTjita6wYQo0gvYQIPg5A5Of73rcrgmGMjcflzymFYcx
+INbWKfOOglmmzQ0Do3b92wfa02gvGtd6IeVXjPJS68R6br8Ig2SUK6HdYPUQqx4
VxAfQ3Z4kfkTuIhl00Xcg591bs63sslGcjtjdc1vaEQPzasFUAitR6QzffUFX48d
LSj4fd+luU5WpENjxV58P/G6AKaKPZUBgldDR5Mdx8oPs6XY2GPABFadZIW+UK1B
S0zxAIPFMcwGDBVY0CDrTmYlffX1Ax5lfxlqrGzd1vN7OCCuQnGfKU5fOBRl38LL
+IBZ6QJjiohlCw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:46 2025 by rpki-client