Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: qFmQdY6c+YlEG+FJoduYhVg/h7f6K2gax3crkLcqAlA=
Subject key identifier: 27:E8:74:FF:B4:F6:E6:CA:39:6A:8C:44:B1:4A:3B:BF:D2:C2:F0:11
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 019A503E123614200326462F123223A72551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 1249
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: 5Kl/cFoJajWHhM5fNma0KNyVNHfrLSzVLzt3cV8Lzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:12:36:14:20:03:26:46:2f:12:32:23:a7:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=27e874ffb4f6e6ca396a8c44b14a3bbfd2c2f011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:53:56:e1:f8:a1:f0:cb:85:3b:3d:bd:18:
75:99:a7:7d:4b:34:71:ed:13:7d:f4:e3:af:59:48:
a6:41:ff:57:38:15:8d:d5:6b:23:62:74:b1:c9:2c:
63:d3:07:a5:99:0a:04:7c:c9:4e:36:a9:05:9d:37:
22:27:80:77:72:a9:a4:0c:b5:81:c7:97:b6:ce:8d:
34:62:1c:54:e3:a2:48:58:f5:70:7d:f5:98:cf:5d:
28:ed:64:86:32:40:03:9f:4d:2f:dc:7b:ef:52:58:
48:c9:3f:8e:a3:e2:0b:5c:d9:d9:71:48:79:c8:9a:
cf:3d:c7:55:44:fc:21:a9:86:e7:a2:da:4e:89:1e:
27:ca:d9:49:ea:33:32:02:ab:19:73:59:0f:40:3b:
69:a6:5b:ed:7a:8a:54:57:b6:4e:b8:15:ac:69:d2:
49:15:6e:e4:4c:c0:f1:8d:68:66:e6:9f:e9:61:14:
1b:e8:ba:b0:fd:04:2d:b0:54:74:6b:9c:72:1d:e9:
72:46:94:48:4b:22:16:bc:5f:1f:83:03:7a:41:78:
8b:71:b7:9a:56:98:54:22:76:50:c7:e4:3f:e6:e8:
13:18:c4:9c:59:b1:84:71:52:3e:0f:33:6d:67:80:
f9:ae:d0:fc:d3:fe:a5:68:39:5c:11:90:6c:3c:27:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:74:FF:B4:F6:E6:CA:39:6A:8C:44:B1:4A:3B:BF:D2:C2:F0:11
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d6:ba:fd:dc:f8:83:b0:0c:87:b4:21:86:4a:88:4c:ea:f4:
11:bf:ba:37:5f:2b:21:a6:02:fc:56:fd:1d:fc:d9:57:72:cd:
74:98:a3:64:36:18:0d:ca:9e:13:f6:cf:6c:b8:3b:76:b6:bc:
6e:7e:03:07:bc:46:40:e7:bf:5d:76:f7:a7:9a:c5:cd:97:02:
69:34:09:34:db:a9:d0:87:80:2f:aa:81:79:42:9a:3f:46:de:
47:62:36:7b:a6:90:64:75:bf:81:06:48:4c:3e:98:77:62:9d:
34:03:dd:eb:da:c3:30:13:42:f7:e4:dd:aa:fa:c2:23:41:72:
f2:95:d6:30:3a:38:90:b3:05:10:01:e6:63:2f:2a:e0:68:38:
5f:02:8b:d5:fd:1a:22:b2:da:ed:77:e9:29:7d:38:78:c7:12:
b5:78:57:80:bd:df:dc:d1:1a:05:e7:66:4b:25:cd:c2:45:13:
44:3a:a3:5e:ff:cf:ae:b8:b6:92:42:ee:21:50:ec:6b:5f:02:
78:ac:cc:72:ed:a1:b1:c9:44:62:a2:4c:25:63:52:38:14:57:
32:3d:3d:26:9b:55:e7:29:77:81:6e:72:7b:ca:f8:af:27:99:
e2:8e:ae:fe:08:fa:82:b3:17:aa:3d:c7:35:7b:9c:d7:b0:03:
33:3f:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:40 2025 by rpki-client