Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: ELChbyVk4mO5ldaStnJaxn9N74ux6Am4Jc8bQuW9CTA=
Subject key identifier: 32:7A:B0:6A:05:58:DD:C5:16:43:F1:F7:F8:64:F7:8F:88:AB:18:49
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 0199FBEAA6B540CBA05FB4E6691918053480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: p/wPOihqxvqgRRUvlKN0ZiA8MlqTPfxqQcc/ODlYRmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a6:b5:40:cb:a0:5f:b4:e6:69:19:18:05:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=327ab06a0558ddc51643f1f7f864f78f88ab1849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:ea:04:95:5f:37:a2:08:c0:0c:5c:44:e8:
c3:e6:cf:05:ab:33:89:9c:95:d2:a5:ae:a5:f5:5f:
ca:75:ad:46:9c:09:49:4c:f5:a2:3c:a3:5b:2a:8b:
48:95:fd:87:bc:04:fc:1c:27:9f:92:6d:2b:c9:cf:
4d:55:fd:f5:8f:60:5c:d0:3d:cc:07:75:3a:81:8e:
e6:70:30:2a:18:13:42:66:b2:7b:58:04:b6:b4:2c:
46:04:14:73:5a:3a:14:f4:62:8e:93:31:44:db:d8:
73:0a:29:e8:32:61:ea:b2:b5:bd:11:93:ac:cd:da:
ba:46:f9:37:f4:cc:98:e1:39:32:79:fa:ba:fa:e1:
40:bb:da:53:be:77:33:e8:07:1c:47:ae:e4:97:1f:
13:80:ce:14:35:b6:ea:75:18:5b:1b:ea:d1:cb:40:
c8:45:fd:47:5c:6b:3e:66:4e:74:df:1d:71:db:6c:
66:3d:97:c7:d6:6d:b0:55:76:81:35:8e:3b:d8:97:
8a:ee:bd:2e:01:4e:7f:ea:ed:7e:83:f8:2e:58:78:
50:bc:cc:bf:f9:e4:a9:ce:c9:11:ee:34:6a:60:81:
7a:b7:0b:e9:55:50:c1:01:37:6e:d6:9e:64:c6:d1:
00:2f:e1:e2:d2:01:1d:01:a1:76:b3:39:cf:8e:fc:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:B0:6A:05:58:DD:C5:16:43:F1:F7:F8:64:F7:8F:88:AB:18:49
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:71:9b:c7:5d:8f:0d:40:1c:e3:f0:89:cb:59:dd:30:be:9d:
16:3d:11:8f:31:ce:10:39:d7:62:24:5a:3e:40:7d:ec:db:99:
0c:ae:80:24:ee:fd:a9:9f:ab:3e:61:88:96:15:f7:a0:0c:47:
70:d9:8a:b7:ac:0e:20:80:80:ef:93:71:af:04:eb:e3:58:36:
fc:7c:da:e0:47:50:8e:b9:79:4c:d8:35:df:84:e5:ea:cd:12:
a5:a6:b7:4a:e2:95:d5:e2:93:30:0b:62:ff:8d:76:a1:dd:7f:
bc:e5:d4:84:31:fd:a7:5d:e0:4d:66:52:9c:8a:86:85:b6:1a:
5a:9e:c4:99:89:ce:70:9c:03:06:87:2b:1d:e1:5a:8f:c9:e5:
05:76:a2:72:4a:21:ae:25:e4:41:69:70:d5:f6:bb:4a:d7:6b:
5e:2e:4e:e3:35:a6:d0:7e:10:c8:77:8d:1f:ff:d0:a0:79:8c:
0f:09:d0:1c:ea:0f:67:6e:63:24:2b:df:5e:e9:83:58:2d:a5:
69:33:cd:66:2e:e6:79:ae:70:4e:5d:da:1d:ba:dd:86:d1:49:
28:92:e3:0c:d9:0f:cf:0b:8a:53:34:54:1d:f1:4d:ca:9a:6e:
2d:08:ca:52:4d:d2:27:31:bc:91:4e:ef:f7:cd:a3:0a:6f:95:
8a:ee:4c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:45 2025 by rpki-client