Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: DU2fLca9Qv6FlOEJWPrbIaH9WScAcjJjzEjX7zgLbpw=
Subject key identifier: 8C:7D:55:8B:1C:66:6C:A7:85:92:CE:F8:B7:02:BA:20:8B:6E:32:E0
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 0199FAD7D00724B81B55F18687430155A013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 05:01:11 +0000
Manifest this update: Sun 19 Oct 2025 05:01:11 +0000
Manifest next update: Mon 20 Oct 2025 05:01:11 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: d7G+Ftw06tbuzoQxx9w7B0WVJ4efRDyydrHKB10Jy30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d0:07:24:b8:1b:55:f1:86:87:43:01:55:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Oct 19 05:01:11 2025 GMT
Not After : Oct 20 05:01:11 2025 GMT
Subject: CN=8c7d558b1c666ca78592cef8b702ba208b6e32e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:94:79:83:25:98:07:f4:9a:70:2b:42:5c:
a4:17:e9:9e:31:d3:3f:58:d7:be:37:1b:8e:ab:3d:
ae:75:dd:64:54:21:c5:f5:0b:23:bb:13:87:19:95:
29:0e:87:1b:5f:ac:bc:0f:b9:c9:37:20:8e:69:75:
f8:75:af:c0:1d:e0:26:d8:12:5a:2d:8d:3c:3b:17:
4b:1c:44:7e:28:de:71:d2:d6:3e:8c:fe:84:7b:d5:
97:ea:5f:51:5d:b3:7d:f5:64:f1:91:ba:5b:60:3c:
8a:99:b3:a8:f0:1b:34:56:12:be:84:4b:b0:be:da:
f0:a7:a6:a8:17:8a:68:a6:c2:bd:28:19:35:27:72:
58:ac:5b:e9:98:3f:2d:ed:6b:e9:c6:19:f7:33:f3:
da:b0:fd:98:68:22:d5:9a:c7:b3:13:c8:ac:03:7e:
79:3c:fc:a6:03:1b:6a:db:1c:8a:6d:66:7f:e3:1f:
c9:e6:a3:1b:7e:fd:d8:8b:9c:d6:8e:3d:ef:ac:67:
7f:9e:09:c9:3a:8d:d5:e6:25:e2:34:91:1b:4d:0d:
4a:b0:34:80:10:7c:9f:a1:b7:41:be:5a:78:29:aa:
34:45:17:7f:8a:f1:9c:89:37:ee:bf:fb:90:fb:34:
55:4d:bc:6d:13:96:33:21:63:7d:f4:09:1b:e5:54:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:55:8B:1C:66:6C:A7:85:92:CE:F8:B7:02:BA:20:8B:6E:32:E0
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:75:1c:34:69:9e:6c:71:0f:c7:5e:02:d4:62:ad:db:06:6c:
70:c9:a6:8b:9b:f4:1e:e4:c9:e3:c0:72:0e:64:c1:98:9b:e9:
60:af:55:3a:9a:c9:cb:18:7b:3b:21:ea:fc:df:60:21:11:7f:
b5:9f:8b:45:39:87:32:aa:1d:51:67:4b:89:a9:83:fa:74:c0:
5f:6f:0f:e9:43:7d:f5:29:dd:b5:81:5f:8b:48:f4:15:50:18:
6a:0b:57:f8:d7:b7:a3:76:19:15:d2:0c:92:da:90:cb:ad:14:
41:00:c9:d9:f8:d9:57:2b:d8:19:36:4f:2c:84:f3:9d:dc:54:
3d:6b:df:94:33:6f:68:e0:02:4f:26:07:9d:c7:81:7f:0d:a7:
75:c9:08:c0:c9:e3:a0:71:33:8c:67:93:29:18:4c:ec:42:23:
90:2e:57:0a:42:81:aa:6f:c2:3e:a5:82:a8:09:b7:f7:76:58:
18:2a:62:9f:a4:93:7d:11:71:d2:59:31:e7:eb:24:b9:d9:7c:
81:4d:cc:43:3b:00:43:79:7d:7c:eb:d0:8a:d6:6c:6e:db:94:
69:91:66:d6:a7:fe:14:8f:cd:a1:92:1b:0b:d8:20:66:6c:32:
e0:a8:f6:15:48:73:62:66:c0:ed:70:d2:00:86:e8:45:14:41:
59:9e:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:14 2025 by rpki-client