Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: CRVVVMds9e9uOzO2nilGp3ii2e6Z4ZlsPASE2Jictks=
Subject key identifier: A9:AB:08:37:26:0D:18:92:90:9D:C5:8C:39:1D:54:5D:92:34:9A:5F
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 0199FBEC18F103BA7ACDA1DDBEDE5358D36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 0343
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: 8fn08tf8Pj6cyQ/GXv5MtvFARUTNiC8wf4Mpd6FHeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:f1:03:ba:7a:cd:a1:dd:be:de:53:58:d3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=a9ab0837260d1892909dc58c391d545d92349a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:9e:7b:2b:d1:19:ed:9d:e5:7f:a2:1c:f7:
88:e3:e7:cc:50:df:73:b1:a5:f2:d8:4c:ae:5b:3c:
e1:6d:a3:a6:aa:97:03:69:9a:a2:8a:27:9c:51:98:
43:a3:ed:08:92:20:af:53:ae:fe:89:54:ce:4b:e6:
d3:77:a6:9c:c0:f4:4b:e2:5c:04:6d:ab:c8:88:f0:
74:70:a4:2c:f5:da:57:98:7a:22:4d:9b:2a:74:11:
7b:34:9f:c5:fc:27:ee:d8:b1:42:c2:db:b3:bd:0c:
b1:5f:14:4d:c1:72:00:c8:64:99:d5:fc:3a:c8:c0:
ef:5f:8a:74:d2:98:2c:73:bb:6e:c7:1f:1b:19:1e:
dd:5a:e3:c3:f3:66:7f:58:99:dd:a7:26:88:30:76:
4e:05:23:ca:39:22:cd:ba:3d:c3:ee:61:26:e7:67:
af:7a:3f:3d:fb:e6:44:4f:2d:3a:b2:e0:7d:db:8a:
c5:ac:52:b5:fd:9d:ed:be:0a:16:54:dd:ed:b2:13:
33:ba:a2:da:01:db:bb:a4:70:4a:ac:6a:21:e2:64:
a0:a7:a9:5b:d7:ae:d1:23:93:a1:26:4a:3f:c4:3d:
8b:41:be:19:33:be:db:f3:e6:8b:05:a7:96:ac:e6:
43:e5:60:fa:f8:1b:8b:68:01:b6:cb:7b:35:0e:f7:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:08:37:26:0D:18:92:90:9D:C5:8C:39:1D:54:5D:92:34:9A:5F
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:31:5d:d8:13:7b:5d:c0:42:9f:7e:25:35:56:7d:92:75:
ce:c6:90:3c:ba:2b:1d:3a:5f:e6:fc:79:64:c0:1a:d0:b3:70:
5e:74:81:70:4f:f6:76:da:98:70:50:31:f9:7b:ee:05:b6:e4:
14:63:44:ec:6c:60:50:ba:db:f9:17:2b:57:33:e5:a5:1d:6b:
36:9b:b2:9b:c1:af:03:5c:1f:68:51:17:f9:24:93:79:ec:c1:
e9:75:a7:40:7b:a3:f9:b4:38:44:db:38:0f:c0:e6:00:76:d3:
e3:81:5d:0c:0d:3d:15:63:12:3b:70:aa:9d:4c:cd:ac:bc:6f:
04:88:5b:6d:85:4b:e4:23:08:c1:cb:65:f8:ea:c4:62:14:32:
0d:46:42:97:cf:09:c6:cb:2b:02:2c:40:85:66:fe:4e:74:b2:
3f:ac:87:38:b4:6c:e4:33:bc:0d:9f:22:03:84:b7:9d:00:64:
46:4d:7f:12:e8:8d:50:ae:52:2d:f2:6c:5e:3e:f8:45:99:16:
0a:fe:29:11:18:f2:52:e7:3a:29:18:11:07:75:41:ad:69:36:
17:12:4b:26:57:dc:b7:75:cc:c1:d2:fa:ed:84:64:4f:cd:f4:
cd:08:aa:39:59:56:7e:8a:9c:76:df:2e:f8:01:62:c5:0b:08:
3d:fe:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:13 2025 by rpki-client