Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: 7ULEhXY6kVouwy8p296ajD9QYXHH+25QhKIiG8BeWZ0=
Subject key identifier: C6:3C:33:5E:40:4A:D9:9D:E5:18:C4:28:48:8B:6C:47:EF:27:8E:99
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 0199FBEB6CEB7877BE8BDCF223EA4D6F0A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0AEE
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: DmANlb1TH/+4GAuK5aNoZm6y96XyQo4Wxrzf1Pkj4/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6c:eb:78:77:be:8b:dc:f2:23:ea:4d:6f:0a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=c63c335e404ad99de518c428488b6c47ef278e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:fe:ad:ce:c8:f8:87:ed:39:a9:56:ec:bf:
f0:25:fa:47:24:bd:e4:e1:b4:81:ce:e0:77:b5:08:
ff:b2:37:48:e8:85:20:44:4a:46:2b:74:eb:9e:a2:
70:9e:b2:8e:5e:82:bc:49:26:91:c8:51:e6:db:36:
2e:d0:3e:d4:bf:64:77:62:ce:67:f3:f3:79:ce:b2:
c8:dc:75:dc:09:b7:3b:3c:25:a7:97:a9:ad:ce:f6:
d4:1d:0e:90:aa:c3:63:bc:a8:84:ee:27:8e:ee:41:
fc:38:6e:2a:64:96:9a:08:ae:cd:05:d4:bf:ed:34:
04:64:87:e8:16:80:de:62:b7:5d:a6:69:17:f2:74:
7e:e1:a9:ca:57:84:f4:0d:8a:7c:12:1a:be:c2:73:
21:f7:f5:f5:6f:d7:9a:0e:fc:2e:6a:08:13:94:54:
81:28:c3:5a:4d:5c:64:c7:85:1a:9c:d3:72:e1:a4:
19:74:a2:c2:20:38:23:ca:7f:34:d8:93:c1:75:27:
83:56:54:a1:1e:50:92:24:73:fe:f5:ac:58:1f:33:
4e:be:d5:d0:9e:f1:6e:f0:81:b8:38:84:ab:be:e0:
5a:d0:60:a4:be:59:82:b4:5e:67:47:27:3f:2e:df:
41:10:8d:18:f5:b7:4b:ce:3b:91:fa:77:a9:71:2f:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:33:5E:40:4A:D9:9D:E5:18:C4:28:48:8B:6C:47:EF:27:8E:99
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:51:cc:78:ee:75:c0:1d:5b:4d:60:52:91:6f:79:22:d1:e3:
8a:66:d5:99:c0:a5:3c:80:1d:fc:00:d6:27:18:77:c6:9c:33:
a2:89:e9:6e:4a:3f:e1:0b:4f:65:ff:f2:74:67:7f:10:a3:ec:
5f:a2:b8:3b:ba:8e:a5:24:7e:5f:85:85:18:49:ef:a1:f8:be:
b5:51:9b:02:3b:5a:99:49:37:17:5c:f7:10:14:62:e3:bc:8c:
cd:b8:67:38:22:ed:fd:32:f7:a7:c7:54:80:7b:3a:7a:92:3b:
e0:c4:fb:a5:17:1a:fb:9a:ed:1e:76:76:30:93:5d:01:70:26:
42:7b:02:c4:5f:e5:c2:26:43:89:16:06:4d:f2:e5:d9:7e:f5:
9d:b6:d0:94:8d:06:9f:7c:7c:10:ed:66:01:8c:fa:1d:ba:64:
3d:aa:2b:62:bf:83:4d:1a:9a:00:3c:8e:a9:d7:a4:e0:52:17:
7b:aa:c9:16:a3:b2:8c:e9:a4:f2:c7:8d:64:f2:f6:c3:48:dd:
f5:f3:1b:74:61:28:76:98:2a:a7:f9:58:2c:b1:22:e3:3a:49:
1b:b6:cc:a8:6f:83:76:11:ec:b2:b2:ff:ac:ef:50:02:48:ab:
86:c0:9e:ef:b8:db:ab:5f:9f:91:c4:87:47:e2:cd:3c:76:0e:
1b:62:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:43 2025 by rpki-client