Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
File: miIdT5cAcYIi7es06TinZjQ_JOE.mft (raw, json)
Hash identifier: daamq2+RU+ncOI925Q4gCudQ3b/ceSDsLxqgF30cTFY=
Subject key identifier: 2B:85:98:03:E1:25:DC:66:ED:31:E9:2C:05:75:3D:CE:E0:30:37:AA
Authority key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
Certificate issuer: /CN=9a221d4f9700718222edeb34e938a766343f24e1
Certificate serial: 019A4EF5F0B97DD21E68531FDB3417BDFE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
Manifest number: 15B7
Signing time: Tue 04 Nov 2025 13:02:12 +0000
Manifest this update: Tue 04 Nov 2025 13:02:12 +0000
Manifest next update: Wed 05 Nov 2025 13:02:12 +0000
Files and hashes: 1: miIdT5cAcYIi7es06TinZjQ_JOE.crl (hash: lfRRpdvAMU2RODWX1g5udhtw8/lyAghzqiHLdNoW7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f0:b9:7d:d2:1e:68:53:1f:db:34:17:bd:fe:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a221d4f9700718222edeb34e938a766343f24e1
Validity
Not Before: Nov 4 13:02:12 2025 GMT
Not After : Nov 5 13:02:12 2025 GMT
Subject: CN=2b859803e125dc66ed31e92c05753dcee03037aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:a5:44:4a:6d:16:dd:75:f5:51:b4:88:1a:
c8:24:f8:da:ab:a3:91:c7:86:1d:25:a2:77:87:cd:
fe:70:93:28:18:e7:b6:e1:87:dc:8f:2e:d7:cb:10:
67:a3:f5:75:dc:53:71:2d:36:b4:3e:9a:b6:ba:bb:
80:a8:07:ad:79:cc:19:eb:cb:13:a4:fd:83:09:c5:
3e:0f:5b:6e:89:bc:a5:18:52:7f:d8:26:3d:07:51:
33:30:d9:66:36:97:7b:86:5d:63:f2:e6:da:ba:d3:
75:db:b1:bb:0f:bf:c7:e2:66:00:8f:10:60:3e:63:
ab:cc:e8:6e:ad:6f:5d:55:07:59:39:60:ae:a4:e5:
42:af:58:a4:e9:d3:c3:d3:df:19:f1:d2:5a:6e:d2:
af:63:7f:ff:d7:48:c9:77:ee:5a:2b:99:57:b3:ac:
66:f2:fa:40:f9:8e:d5:d3:18:4d:72:f8:4e:cb:68:
45:da:8f:24:bb:c5:6f:18:cc:bc:b7:46:50:d0:a4:
48:43:20:03:5e:a0:ab:06:7d:db:eb:d8:a3:8b:cc:
c0:e0:4b:a4:1e:b0:31:66:db:62:1b:99:90:89:78:
68:0b:77:9e:ae:cc:47:57:ff:eb:72:4b:f1:87:df:
c0:8f:7b:df:50:5e:91:a5:13:e2:b0:3e:c3:87:48:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:98:03:E1:25:DC:66:ED:31:E9:2C:05:75:3D:CE:E0:30:37:AA
X509v3 Authority Key Identifier:
keyid:9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e3:a9:a1:1c:12:b5:9d:ad:e3:7a:f1:d0:9e:38:13:4d:ed:
b0:98:4e:3b:4a:9d:6d:55:32:b8:c1:28:3f:da:06:e2:41:16:
ec:6b:07:3b:86:75:01:65:cd:77:92:e9:a2:8e:26:94:de:9d:
eb:90:01:07:7b:b1:1c:a9:b6:58:7c:59:ff:9f:94:91:20:e1:
2a:91:16:ba:b5:61:a2:06:fd:76:d6:ce:b2:50:28:a5:5e:5f:
cd:a2:13:91:7c:4c:b5:76:4a:ff:72:aa:a0:3e:27:48:36:57:
d4:58:ec:6f:33:01:82:2b:08:01:b2:59:49:13:5b:94:5a:c8:
15:f2:da:0c:74:28:be:6e:aa:b5:85:eb:94:b4:ab:5e:bb:bf:
6a:36:7e:d3:3c:2f:69:a5:44:91:05:39:6c:2b:c6:b3:6a:d6:
99:3e:f5:99:c5:c9:c7:87:e8:44:ca:ce:1e:c3:db:d4:a4:06:
a4:89:55:0d:a9:56:cf:aa:eb:8a:b6:26:43:92:3a:aa:35:78:
fb:d3:00:da:37:cd:c3:a9:df:4d:be:1f:c4:8d:d5:59:c8:98:
d3:a7:d3:77:9b:d9:45:7b:fc:10:74:07:eb:e5:f0:2b:20:be:
20:08:a2:e3:e3:32:59:8b:21:d7:1b:ef:80:11:3d:46:c2:c0:
74:00:1a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fC5fdIeaFMf2zQXvf4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjIxZDRmOTcwMDcxODIyMmVkZWIzNGU5MzhhNzY2MzQz
ZjI0ZTEwHhcNMjUxMTA0MTMwMjEyWhcNMjUxMTA1MTMwMjEyWjAzMTEwLwYDVQQD
EygyYjg1OTgwM2UxMjVkYzY2ZWQzMWU5MmMwNTc1M2RjZWUwMzAzN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F6lREptFt119VG0iBrIJPjaq6OR
x4YdJaJ3h83+cJMoGOe24Yfcjy7XyxBno/V13FNxLTa0Ppq2uruAqAetecwZ68sT
pP2DCcU+D1tuibylGFJ/2CY9B1EzMNlmNpd7hl1j8ubautN127G7D7/H4mYAjxBg
PmOrzOhurW9dVQdZOWCupOVCr1ik6dPD098Z8dJabtKvY3//10jJd+5aK5lXs6xm
8vpA+Y7V0xhNcvhOy2hF2o8ku8VvGMy8t0ZQ0KRIQyADXqCrBn3b69iji8zA4Euk
HrAxZttiG5mQiXhoC3eersxHV//rckvxh9/Aj3vfUF6RpRPisD7Dh0jNswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuFmAPhJdxm7THpLAV1Pc7gMDeqMB8GA1UdIwQY
MBaAFJoiHU+XAHGCIu3rNOk4p2Y0PyThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlJZFQ1Y0FjWUlpN2VzMDZUaW5aalFfSk9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hYzYzYjYtNTVjNi00NmRmLThjMTEt
N2RlN2E3YzViZjcyLzEvbWlJZFQ1Y0FjWUlpN2VzMDZUaW5aalFfSk9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hYzYzYjYtNTVjNi00NmRmLThjMTEtN2RlN2E3YzViZjcy
LzEvbWlJZFQ1Y0FjWUlpN2VzMDZUaW5aalFfSk9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+OpoRwS
tZ2t43rx0J44E03tsJhOO0qdbVUyuMEoP9oG4kEW7GsHO4Z1AWXNd5Lpoo4mlN6d
65ABB3uxHKm2WHxZ/5+UkSDhKpEWurVhogb9dtbOslAopV5fzaITkXxMtXZK/3Kq
oD4nSDZX1FjsbzMBgisIAbJZSRNblFrIFfLaDHQovm6qtYXrlLSrXru/ajZ+0zwv
aaVEkQU5bCvGs2rWmT71mcXJx4foRMrOHsPb1KQGpIlVDalWz6rrirYmQ5I6qjV4
+9MA2jfNw6nfTb4fxI3VWciY06fTd5vZRXv8EHQH6+XwKyC+IAii4+MyWYsh1xvv
gBE9RsLAdAAaTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:02 2025 by rpki-client