Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: 4Q+cFW8Gj9xvuDWe7wxRNf/zt47ZcNQKJqdZhh5bzO0=
Subject key identifier: 41:8D:75:E0:71:09:85:3C:56:6F:59:BC:56:C3:68:55:B4:9C:F9:1B
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 0199FBEAA1ABBD7A5022589197DEC8756162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: l4ignqn42TwDtu+hlr6aRM4NImwHnVOaRA9ubvYIAPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:ab:bd:7a:50:22:58:91:97:de:c8:75:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=418d75e07109853c566f59bc56c36855b49cf91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:3e:1e:09:ae:71:f7:e5:4f:89:54:e6:58:
85:b7:59:fa:f4:a2:b7:40:2c:aa:e7:9d:55:5c:ff:
83:ec:ad:4f:d7:d9:ab:34:8c:cb:1b:b4:f2:a2:15:
06:45:66:45:04:1a:eb:7e:26:5a:a1:af:d6:c1:bc:
d5:a7:ea:1b:6d:c3:e7:93:04:3d:38:40:00:e3:a9:
93:26:e4:9b:3a:83:41:43:11:80:30:11:d0:39:98:
00:fb:42:7d:fb:d2:f2:b9:c5:72:a6:ad:03:1c:be:
ba:be:b7:22:c6:de:75:50:17:2a:de:12:32:a7:8a:
e8:13:8f:0c:f4:71:c4:df:51:6c:3c:c8:92:bd:f3:
e5:fa:bc:28:05:86:fe:64:6e:06:0e:f9:10:82:27:
b1:04:6f:e4:2f:08:53:8b:1c:01:c4:e3:b9:f7:72:
6a:4a:eb:fb:d4:a2:9a:87:88:63:b3:38:d8:35:4e:
84:6f:f7:14:e2:a9:55:06:ab:b2:93:63:6a:f9:4f:
a2:57:36:b5:b8:51:03:f3:f7:78:22:22:0b:d9:0f:
9e:1a:ca:f8:8c:6f:13:07:c7:a4:88:4c:08:5d:25:
d0:b0:10:8a:c4:16:13:fd:22:e2:1d:48:d9:ca:14:
f3:f4:4f:20:39:c2:fb:b3:0e:e0:99:6d:9e:15:06:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:75:E0:71:09:85:3C:56:6F:59:BC:56:C3:68:55:B4:9C:F9:1B
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a1:db:63:f6:02:6d:3e:91:0e:2e:5f:13:65:01:fb:4f:eb:
4b:8e:3d:48:79:99:f3:2f:f1:54:c0:78:90:97:98:df:2b:51:
07:76:12:df:f9:a0:b7:ed:01:39:f9:c2:82:d6:1f:02:00:62:
bf:e4:a6:aa:7b:7d:4c:4f:1a:6d:7c:a2:0e:18:13:a2:45:2a:
2d:41:62:ca:14:e9:4c:dd:d7:39:5c:b3:c7:8e:02:41:ce:0e:
f3:92:c3:85:f7:d5:d9:18:ba:3b:74:15:fe:cf:59:c8:6b:3a:
c6:ae:17:0b:ca:cc:fc:06:bf:80:c9:fd:7c:db:b4:f1:83:28:
04:27:5f:c0:68:dd:51:82:a8:25:8a:fe:90:1b:f6:86:21:e5:
45:c7:9f:23:d9:ef:f3:2a:c3:28:67:c8:a9:9f:45:b8:c2:06:
80:2d:9a:7f:b6:44:3e:51:58:a8:b2:5f:72:0d:60:42:03:8f:
81:77:63:d2:0c:3e:a6:b0:6f:6f:56:79:7a:e2:a9:02:f7:6f:
6b:ac:9d:83:23:d4:8f:50:54:49:52:72:bf:35:be:cf:19:22:
91:6a:04:94:02:55:70:73:6a:ad:49:b9:05:86:ca:79:5e:92:
d4:23:0a:dd:1e:df:02:a2:66:84:c5:3d:f3:af:8d:8e:fb:1c:
98:64:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:58 2025 by rpki-client