Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: FJ1NS7Q0c1OXEsYMx729WmUJAqAvSKwSAlBirt5b+C4=
Subject key identifier: F5:B5:0C:FD:31:C9:24:76:18:47:EA:62:C6:21:A1:2D:E7:DF:E8:AF
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 0199FC8F389C5E26E3FC93EA1BA6AD5ADEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 1153
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 9Nue4v3Z8fhc9k1T1+WANzbc3HEiE+WEqaG709QI9WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:9c:5e:26:e3:fc:93:ea:1b:a6:ad:5a:de:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=f5b50cfd31c924761847ea62c621a12de7dfe8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:b5:4d:98:3d:d0:c5:33:ba:a3:1d:dd:4a:
15:a4:51:0a:de:34:3b:31:55:97:88:aa:49:f2:04:
52:34:3d:08:c6:f5:7f:22:6a:c0:ec:4f:7e:d4:de:
6d:8b:20:c8:77:bf:ae:d4:42:d2:0e:a5:9a:c9:4f:
8f:6b:a7:59:71:aa:e9:33:9c:d4:f1:66:b1:ed:56:
b5:b5:ca:f4:e5:72:3b:07:19:53:e0:f2:82:72:e6:
0c:39:05:38:04:c7:3e:d9:d6:de:16:73:f3:09:25:
a6:9a:68:14:61:54:4d:a1:8c:48:bd:cd:42:23:69:
dd:3b:ea:5a:4c:54:76:52:2f:bf:e2:4d:58:1b:28:
32:fe:dc:04:89:5b:6d:a0:e2:39:f2:1b:a4:01:05:
f0:a8:ff:97:16:e1:60:df:e4:02:b8:d9:1a:ea:32:
b9:2f:dd:d1:84:6a:74:1c:8f:4f:9a:0d:a5:01:b7:
b1:f6:a6:9b:86:d6:36:4e:24:8e:69:7b:cc:69:03:
f7:31:27:de:e2:9e:26:cd:1a:32:8a:8b:63:d3:e6:
37:b8:2a:0e:65:9f:70:86:41:b0:d0:23:b2:72:f0:
8e:28:fe:1d:a5:40:9d:27:67:73:11:7d:89:d9:8f:
56:9c:d8:8b:30:39:86:35:0c:bb:c2:de:b6:53:54:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:0C:FD:31:C9:24:76:18:47:EA:62:C6:21:A1:2D:E7:DF:E8:AF
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fd:33:1d:74:60:0f:f3:05:c3:ab:0a:8e:28:af:2a:5a:3f:
4a:73:ca:fe:11:6f:7e:9f:d6:58:d7:96:4a:eb:b8:cf:89:5e:
bf:8e:46:e4:aa:de:1d:f6:32:fd:09:71:c3:d3:1c:d9:0c:a8:
ec:9b:17:bf:d7:c3:8f:63:7c:34:91:1d:98:cf:95:4b:07:7d:
81:bf:46:ab:78:25:22:db:5e:0d:84:39:f3:a6:ce:5b:88:05:
79:c8:a5:8a:db:48:57:85:7a:0d:6f:ac:d7:72:65:5f:1b:c6:
28:4b:e1:a9:3f:fd:93:85:2d:f0:12:ef:5e:7c:66:27:0f:62:
70:e2:9b:9e:b2:8f:aa:ca:29:f6:9b:de:43:2d:ed:34:30:a0:
63:8e:a2:cf:b2:29:f6:0a:9d:c3:03:6a:bc:61:31:15:06:f6:
55:89:6a:44:e3:7a:a1:f8:93:9e:ad:16:98:4a:7b:ba:fa:ec:
88:ff:bc:42:c9:61:61:54:42:30:96:a7:df:14:ea:ea:60:bf:
a8:21:c6:5d:eb:f5:a7:a7:5b:b1:75:7e:8a:47:5b:d9:8c:81:
f5:61:f4:17:17:d0:e7:f0:79:3c:89:cf:9b:ba:e0:b7:a5:1f:
8c:b3:b6:bf:9c:9e:31:38:6b:2f:47:43:75:24:b5:b1:e0:9b:
3b:24:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:58 2025 by rpki-client