Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: ZqUu6mYQ1jIOSivYMew9i//avVxCa3v22imGUxf2DAk=
Subject key identifier: D7:80:2E:4E:D4:1B:D1:AA:3C:2A:84:55:63:BA:49:22:6D:B4:A7:F2
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 019A4EF49454697D47BDF95E5D58565D02EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: nL78ePNRxrqFEnoOKJCTN/W1AH18Smwx6zn7GecyNYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:94:54:69:7d:47:bd:f9:5e:5d:58:56:5d:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=d7802e4ed41bd1aa3c2a845563ba49226db4a7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:8e:45:2f:3e:29:04:e2:58:0e:e2:dc:6a:
c0:e4:60:f3:e0:ba:37:4f:71:1e:71:55:7d:7d:93:
ca:a3:78:21:e0:0b:a8:fc:41:00:64:fa:be:52:e8:
6a:80:22:f4:25:17:c5:9b:5b:4c:90:7e:14:c4:d4:
7c:f3:78:7b:6e:b4:ba:4c:d2:cb:c9:73:36:62:dd:
4f:75:d2:4e:5e:6d:1b:f0:40:a2:40:da:9a:96:cf:
27:7e:74:27:c6:a7:5b:48:eb:0a:4b:89:7e:d0:71:
48:86:27:55:0c:85:d6:12:3c:9d:b1:ac:0b:9f:5e:
8b:f2:59:d0:9d:b8:1f:3a:37:99:2e:63:33:bc:36:
1b:f9:db:ac:ed:f0:58:20:72:2f:42:f0:0e:51:31:
92:ba:c9:97:56:4e:11:ab:cc:28:ed:2b:ed:99:96:
13:68:a5:70:ac:03:17:c8:c1:81:5e:23:9b:4a:13:
35:85:b0:f0:a9:6a:ab:9c:91:93:ab:d6:f0:b6:c5:
46:83:4d:52:e8:f5:de:cb:9b:54:aa:f7:36:18:2b:
3d:04:e2:a3:6e:01:7f:ea:3e:4a:6e:7e:cb:04:56:
cd:87:73:ca:0b:61:03:4d:50:1f:90:9b:16:a8:50:
31:a1:a0:73:b7:c6:af:d5:05:36:4c:81:3f:ba:e5:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:2E:4E:D4:1B:D1:AA:3C:2A:84:55:63:BA:49:22:6D:B4:A7:F2
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:09:3f:28:ae:a1:53:b6:e1:61:5e:1f:35:d5:2a:d2:e0:
61:86:e3:37:84:d2:cb:8b:eb:c3:11:79:f3:ff:9a:3d:ab:ac:
6d:59:a9:fd:8d:47:06:48:5e:e0:5b:ba:29:bc:50:f1:e6:f6:
4c:e1:63:ba:7e:34:02:94:f3:7f:71:4a:71:ab:25:24:38:bc:
04:01:30:10:d2:a1:3c:7a:a4:3c:bc:38:2c:d7:40:2d:36:f3:
fc:49:94:5c:d0:20:a1:46:ea:f8:74:12:e9:1d:7f:6e:0c:9d:
60:3f:9d:4c:da:1d:b1:d4:56:5a:49:b7:a5:c6:08:85:bd:2f:
b0:63:94:32:37:03:62:94:2d:58:00:01:54:f0:50:f8:0d:16:
f3:64:58:f9:61:4e:bc:04:f6:dd:a7:28:bf:5b:56:ee:c3:ec:
c7:7e:07:0b:21:f8:ef:89:fa:ab:4f:70:18:21:ec:f1:17:c9:
73:49:97:31:c0:80:56:d7:06:eb:aa:63:2c:37:ad:25:2a:07:
a4:a7:14:3f:ea:b4:67:b9:94:7a:ef:33:15:92:90:d7:8d:f7:
d7:54:58:cc:2f:0d:6d:4a:72:fc:32:2d:6f:4a:ef:e3:75:1e:
76:6c:75:c5:0c:30:7d:a3:06:71:5a:a4:3d:0a:0c:a5:85:4d:
2b:9b:ab:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JRUaX1HvfleXVhWXQLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2
ZWJiMTUwHhcNMjUxMTA0MTMwMDQyWhcNMjUxMTA1MTMwMDQyWjAzMTEwLwYDVQQD
EyhkNzgwMmU0ZWQ0MWJkMWFhM2MyYTg0NTU2M2JhNDkyMjZkYjRhN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GyORS8+KQTiWA7i3GrA5GDz4Lo3
T3EecVV9fZPKo3gh4Auo/EEAZPq+UuhqgCL0JRfFm1tMkH4UxNR883h7brS6TNLL
yXM2Yt1PddJOXm0b8ECiQNqals8nfnQnxqdbSOsKS4l+0HFIhidVDIXWEjydsawL
n16L8lnQnbgfOjeZLmMzvDYb+dus7fBYIHIvQvAOUTGSusmXVk4Rq8wo7SvtmZYT
aKVwrAMXyMGBXiObShM1hbDwqWqrnJGTq9bwtsVGg01S6PXey5tUqvc2GCs9BOKj
bgF/6j5Kbn7LBFbNh3PKC2EDTVAfkJsWqFAxoaBzt8av1QU2TIE/uuW3eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeALk7UG9GqPCqEVWO6SSJttKfyMB8GA1UdIwQY
MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt
ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx
LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKgJPyiu
oVO24WFeHzXVKtLgYYbjN4TSy4vrwxF58/+aPausbVmp/Y1HBkhe4Fu6KbxQ8eb2
TOFjun40ApTzf3FKcaslJDi8BAEwENKhPHqkPLw4LNdALTbz/EmUXNAgoUbq+HQS
6R1/bgydYD+dTNodsdRWWkm3pcYIhb0vsGOUMjcDYpQtWAABVPBQ+A0W82RY+WFO
vAT23acov1tW7sPsx34HCyH474n6q09wGCHs8RfJc0mXMcCAVtcG66pjLDetJSoH
pKcUP+q0Z7mUeu8zFZKQ143311RYzC8NbUpy/DItb0rv43Uedmx1xQwwfaMGcVqk
PQoMpYVNK5urYg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:04 2025 by rpki-client