Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: Ry7BCQsMwWG0Bbs27NDDkUExUFgEyKqb3VZl9eC7SVE=
Subject key identifier: 66:64:CF:4C:46:B6:06:1D:F4:4A:74:04:FD:10:4C:5C:FA:3D:13:1F
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 0198D73AF4A90B9EDD4828914562F8754272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 10BB
Signing time: Sat 23 Aug 2025 14:00:21 +0000
Manifest this update: Sat 23 Aug 2025 14:00:21 +0000
Manifest next update: Sun 24 Aug 2025 14:00:21 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 8AtJn2JXm6CYQDX52VvIOG5utOLcKEzgKSqpZO79Ng0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f4:a9:0b:9e:dd:48:28:91:45:62:f8:75:42:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Aug 23 14:00:21 2025 GMT
Not After : Aug 24 14:00:21 2025 GMT
Subject: CN=6664cf4c46b6061df44a7404fd104c5cfa3d131f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:6c:50:e7:aa:73:01:32:89:17:03:cb:39:
77:8d:98:74:cf:34:1a:bd:96:35:a0:87:9f:c1:2e:
46:1c:da:6f:26:3a:0a:26:09:61:be:34:44:b6:fc:
9d:d9:4f:98:33:6d:39:78:7d:61:4c:0b:b2:ff:fd:
8f:b9:7e:da:94:63:ec:29:99:ac:48:b9:5e:81:da:
8c:6a:e5:63:fd:d4:5c:50:4f:60:a8:43:2c:c2:9d:
a4:9d:38:69:e3:0b:9a:5a:e6:48:52:5e:18:27:aa:
3c:15:f8:28:8c:a8:a7:d0:f9:e1:12:58:78:34:32:
d0:67:04:65:36:9a:97:9f:15:f0:6d:16:29:18:4f:
99:31:4a:c5:40:49:17:4a:37:b1:16:4e:12:81:3f:
1e:c0:e8:dd:b5:f9:9d:30:a9:5d:78:1d:d5:d0:9c:
4e:5e:51:0f:a4:c9:1b:00:6f:46:43:bf:57:d5:04:
58:fc:75:f5:27:2c:ca:08:c6:3c:62:65:dd:30:d0:
d6:39:a7:6a:5c:07:cb:11:2a:83:bd:89:b5:00:63:
d1:c7:f8:00:ac:06:21:48:1f:a3:98:2f:cc:8b:27:
d8:15:08:a6:03:91:47:46:43:fe:f9:a7:0d:62:bf:
b5:fa:17:76:2f:8d:bb:85:17:4b:7a:2d:d3:6b:34:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:CF:4C:46:B6:06:1D:F4:4A:74:04:FD:10:4C:5C:FA:3D:13:1F
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:40:1a:e9:7e:69:c7:00:f6:9a:b1:2d:38:5a:ef:b2:e5:16:
a9:c8:e8:f3:e7:a0:fe:7b:f2:03:ce:9d:0d:d9:84:c2:74:36:
39:35:6a:27:4f:ed:4f:2a:12:33:36:57:10:92:b8:12:d6:51:
e2:e5:60:0f:9b:f3:c7:b4:c9:5e:cb:fa:aa:bc:ad:77:d3:49:
ee:00:ef:29:61:28:33:c6:01:04:dd:2e:ec:82:97:d7:1f:cf:
d3:83:cb:5c:f2:4a:fc:63:6e:2e:76:6d:44:b0:57:4d:8e:b2:
87:4f:a9:17:f7:0f:ce:7f:b4:aa:fa:24:63:a7:23:b5:56:9f:
47:c1:9e:cb:a2:9e:61:d1:f9:ff:94:5e:bb:aa:53:ae:14:86:
4d:9d:b6:8b:a9:fc:c3:0e:19:d0:cd:04:b4:2c:6b:68:4f:a4:
34:0b:2d:a2:f9:21:fd:4d:2c:26:6e:37:5e:36:22:0e:02:32:
36:63:83:a9:00:b6:b2:09:db:8a:2b:39:ab:d7:58:af:ce:72:
19:0c:64:b1:98:64:d7:00:f3:99:fa:d0:c1:81:54:0c:27:1f:
ee:4d:83:11:52:2d:fa:d7:33:c0:18:e3:c6:00:8d:58:fa:ff:
07:eb:71:f0:3e:06:5e:1f:f3:db:6d:80:f4:c7:33:db:65:7f:
32:f8:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:29 2025 by rpki-client