
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier: g97Bj5F1tb/3GB1S1cLYIIPRNv7cR0Ve2cVBwZ/qybA=
Subject key identifier: 33:89:34:34:58:E8:1D:F6:FE:9D:1B:E9:04:68:C9:0B:B7:25:67:C9
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial: 019A50E34DE8C5E271CE6E79533DC5D21DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number: 08E2
Signing time: Tue 04 Nov 2025 22:01:04 +0000
Manifest this update: Tue 04 Nov 2025 22:01:04 +0000
Manifest next update: Wed 05 Nov 2025 22:01:04 +0000
Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: 6SO0vDcztx+fxNKWM+8FrPpCcgj4+0vPJbVFz+7/3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:4d:e8:c5:e2:71:ce:6e:79:53:3d:c5:d2:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Validity
Not Before: Nov 4 22:01:04 2025 GMT
Not After : Nov 5 22:01:04 2025 GMT
Subject: CN=3389343458e81df6fe9d1be90468c90bb72567c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:9b:3f:16:a6:72:bb:e5:53:78:8c:82:4d:
50:e9:d0:67:0e:e2:5a:95:37:c3:6c:81:b7:ea:ab:
06:c3:4e:8f:f3:2a:54:1e:a7:74:40:5a:32:6d:76:
ad:e7:00:33:7a:d2:2e:0b:22:cb:88:8b:e4:0d:d4:
2a:dd:55:e6:41:32:38:03:26:d5:a1:6c:ca:0e:50:
59:9f:5f:04:f1:76:b2:de:15:39:39:d3:21:42:d6:
c0:a0:13:63:4b:f1:10:4c:1e:4f:02:3a:1e:33:f8:
6e:64:ef:f4:66:62:cd:a6:1d:da:38:d4:0a:1b:f0:
9c:de:2b:e0:2f:b6:02:eb:41:95:9f:cb:5f:27:7a:
66:c1:de:0b:7e:5d:e4:53:02:a8:bc:9a:cb:d6:6f:
b5:44:83:4c:5a:73:27:ee:82:d1:d3:f4:30:ad:56:
50:10:55:eb:8a:e1:0e:c2:0a:f7:05:c2:42:ad:10:
f6:cd:3c:b8:01:54:a1:5a:62:fd:01:ce:9b:78:cb:
8f:ae:1d:83:62:2a:8e:93:9b:a9:11:70:74:0e:78:
f2:17:43:d4:e0:c7:4d:ac:df:a1:71:d0:7d:13:37:
35:a5:3d:3b:4e:ff:6f:c2:04:f6:f5:92:7d:2c:a9:
29:a3:d9:99:61:ca:93:50:ba:c8:8d:95:d8:32:b5:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:34:34:58:E8:1D:F6:FE:9D:1B:E9:04:68:C9:0B:B7:25:67:C9
X509v3 Authority Key Identifier:
keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:59:39:26:4e:08:f7:b9:7d:6a:ff:f4:60:e7:d8:66:1d:bf:
bd:09:6f:b5:f2:b8:c8:a5:b6:12:60:32:67:40:11:5c:d2:12:
14:46:ec:73:c0:8f:25:ca:c9:57:ca:2b:7c:47:9c:73:ad:21:
29:e6:a0:75:5e:28:48:a8:7b:f8:33:3f:1e:47:ae:62:cd:ed:
a2:bf:8e:84:83:d3:ef:0c:20:55:6f:4e:1a:5b:36:38:7b:ad:
02:3c:64:64:b6:c5:62:08:6d:8d:bb:b3:0c:2c:8d:a9:c3:4e:
66:4c:16:ad:db:c6:6b:3c:c0:74:2c:26:fc:85:1c:5b:5b:1e:
3d:f9:6d:c6:26:30:63:4e:ea:9f:1a:d8:00:3f:f5:52:92:24:
27:64:43:85:f0:06:cf:79:19:f5:59:4a:70:6e:79:e2:b3:5c:
b7:34:86:71:20:82:0b:4b:2d:28:7c:3e:5b:19:25:9f:cc:58:
61:41:9d:70:53:23:3e:d7:1c:9d:16:e4:68:70:aa:99:4b:04:
6a:f8:52:20:4f:29:76:5c:60:51:89:ec:c7:ee:24:fe:28:03:
9f:49:7f:da:d6:67:c2:27:1d:ba:c8:f5:f8:45:1c:16:0f:be:
85:1c:e7:4e:d1:00:9c:30:ff:de:24:cd:e3:7c:8a:3b:52:03:
ac:22:93:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ403oxeJxzm55Uz3F0h31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx
Yjc4ZTcwHhcNMjUxMTA0MjIwMTA0WhcNMjUxMTA1MjIwMTA0WjAzMTEwLwYDVQQD
EygzMzg5MzQzNDU4ZTgxZGY2ZmU5ZDFiZTkwNDY4YzkwYmI3MjU2N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyybPxamcrvlU3iMgk1Q6dBnDuJa
lTfDbIG36qsGw06P8ypUHqd0QFoybXat5wAzetIuCyLLiIvkDdQq3VXmQTI4AybV
oWzKDlBZn18E8Xay3hU5OdMhQtbAoBNjS/EQTB5PAjoeM/huZO/0ZmLNph3aONQK
G/Cc3ivgL7YC60GVn8tfJ3pmwd4Lfl3kUwKovJrL1m+1RINMWnMn7oLR0/QwrVZQ
EFXriuEOwgr3BcJCrRD2zTy4AVShWmL9Ac6beMuPrh2DYiqOk5upEXB0DnjyF0PU
4MdNrN+hcdB9Ezc1pT07Tv9vwgT29ZJ9LKkpo9mZYcqTULrIjZXYMrX43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOJNDRY6B32/p0b6QRoyQu3JWfJMB8GA1UdIwQY
MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt
MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw
LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVk5Jk4I
97l9av/0YOfYZh2/vQlvtfK4yKW2EmAyZ0ARXNISFEbsc8CPJcrJV8orfEecc60h
KeagdV4oSKh7+DM/HkeuYs3tor+OhIPT7wwgVW9OGls2OHutAjxkZLbFYghtjbuz
DCyNqcNOZkwWrdvGazzAdCwm/IUcW1sePfltxiYwY07qnxrYAD/1UpIkJ2RDhfAG
z3kZ9VlKcG554rNctzSGcSCCC0stKHw+Wxkln8xYYUGdcFMjPtccnRbkaHCqmUsE
avhSIE8pdlxgUYnsx+4k/igDn0l/2tZnwicdusj1+EUcFg++hRznTtEAnDD/3iTN
43yKO1IDrCKT4A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:22 2025 by rpki-client