Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: bBXRCpkAEFlXMQXAr3v96eHqQ/f4Ur+o0IKbjQtZLgk=
Subject key identifier: C6:63:8B:8F:F8:8D:F5:37:7F:E7:33:B9:99:09:1A:68:DF:05:05:97
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 0199FDD99E539A860A262A8DDEAA910A480D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 0EF7
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: SA680GsLeLCrq/aVYR7DHt1xSGWvx9NSAvz9Xiiqc8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:9e:53:9a:86:0a:26:2a:8d:de:aa:91:0a:48:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=c6638b8ff88df5377fe733b999091a68df050597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:ae:e9:eb:65:63:44:96:0e:2d:02:06:d6:
30:c1:3f:b8:1c:72:46:b4:f4:85:03:c3:a3:6a:e1:
83:4d:32:a0:cf:53:52:c6:64:81:75:53:3a:b6:5b:
c7:6b:69:fa:f6:8b:14:d2:af:c8:90:1e:ed:50:6c:
7f:9e:4f:25:e0:13:16:13:98:db:0c:d6:31:05:2f:
a1:d7:89:d3:95:ea:0c:a1:07:35:3a:dc:7d:e7:c6:
1e:ad:d3:e8:46:9f:1a:55:29:02:fe:d5:63:3e:f0:
22:75:e2:5c:a3:02:c2:71:ff:49:2f:9e:e8:e0:83:
6f:b6:fc:06:a9:09:66:6e:04:92:00:0a:8c:2d:c2:
cd:98:fc:be:cc:21:43:e5:1b:82:b6:fe:8c:1e:77:
b8:06:2e:14:e4:18:04:6b:bd:c0:15:88:c4:3e:e4:
0d:0c:0f:0a:80:3c:49:13:93:0f:40:f7:82:86:65:
18:b1:85:43:d4:5d:a7:87:7c:72:82:90:da:1a:0b:
6a:1e:4f:b6:cd:ff:22:89:a9:c6:87:60:62:0c:08:
ef:8e:b2:09:49:ae:5d:0a:25:18:b8:b7:87:f1:39:
4f:84:0f:ad:aa:7c:4a:2c:6d:4d:d5:b4:a8:f3:05:
0a:63:3f:12:79:f9:b3:8a:40:ea:06:41:fd:03:52:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:8B:8F:F8:8D:F5:37:7F:E7:33:B9:99:09:1A:68:DF:05:05:97
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:51:39:b2:10:8b:79:95:82:2f:43:64:52:f7:34:3f:0c:2e:
c0:b3:0e:ec:30:02:1e:2a:4b:2f:7b:a2:b3:15:ed:ba:f4:3f:
2b:51:d0:e4:2c:9b:00:64:1d:cf:3d:80:08:15:79:ee:cc:e6:
75:8b:3f:a1:cc:54:e1:a5:73:80:aa:6f:1f:36:9a:48:76:54:
f6:eb:90:98:04:d7:a5:9a:06:d7:ec:72:00:a4:e6:40:44:03:
a7:65:49:26:1d:88:3b:64:39:35:26:6d:3f:75:25:9b:86:c5:
fc:a1:56:75:49:ba:97:71:e2:7a:a3:4b:b5:a9:25:ca:a6:34:
5c:6c:d3:86:99:b1:12:da:b9:21:33:cb:58:8b:8a:4d:93:36:
5c:69:1b:a6:70:da:c7:f9:de:c3:d8:2a:0e:31:2c:9b:7a:a3:
0b:6c:3f:e4:64:c2:d6:dc:19:51:bc:7e:d4:b1:5d:38:4a:75:
a9:cc:ed:d8:0b:59:d9:58:93:58:22:a0:dd:a1:c5:c0:46:15:
c5:05:4d:54:16:fd:5a:d6:a4:74:23:c6:74:40:7f:78:91:b0:
a8:81:db:22:ce:da:fd:18:04:08:f0:57:28:7b:5e:82:15:1a:
a9:25:a7:d7:9c:85:70:8d:04:1b:b1:a2:08:9a:20:45:86:c4:
1d:b5:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:33 2025 by rpki-client