Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: L7J7ZDax6BRJX8flrL03ojMbPbHswt3qDF5tfNWfh8o=
Subject key identifier: 7E:4C:91:B6:D8:A6:DF:08:6B:3D:52:CE:B4:D0:8E:63:14:C6:87:41
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 0199FFC807C11F0ADB0E6E67B46B3629B845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:02:03 +0000
Manifest this update: Mon 20 Oct 2025 04:02:03 +0000
Manifest next update: Tue 21 Oct 2025 04:02:03 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: rO3+aoeiDhvR12k2ABvc+Loo2+Von8QsMt3g8BoW2Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:07:c1:1f:0a:db:0e:6e:67:b4:6b:36:29:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Oct 20 04:02:03 2025 GMT
Not After : Oct 21 04:02:03 2025 GMT
Subject: CN=7e4c91b6d8a6df086b3d52ceb4d08e6314c68741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:52:74:e4:e4:46:05:52:83:1e:33:8f:47:
fb:87:54:3f:5e:aa:1f:cc:a0:7b:16:e1:e7:f8:49:
69:ab:f7:9d:e0:3e:ae:1f:67:96:44:08:d0:f0:b5:
ba:f8:71:83:97:f6:f2:90:eb:2d:2f:44:5a:3b:23:
c0:5f:6a:a3:5a:f1:8b:1c:9c:63:18:a0:2d:6d:5e:
94:2b:2c:0d:55:4c:2f:f0:00:39:b1:b4:6e:af:b3:
4c:b9:69:92:37:7a:42:51:e9:23:fd:82:51:34:3b:
78:3a:ef:4b:58:19:c7:c3:7d:ee:79:53:e4:99:e6:
fb:ff:45:3f:ed:4e:75:2c:b4:e3:aa:99:7d:53:06:
64:83:42:09:fe:96:2f:5f:18:58:62:33:51:67:62:
6b:91:56:c8:cf:1e:a7:e5:40:f4:d2:8d:b2:2a:7b:
cc:4b:80:6f:b6:29:c5:4e:f1:a9:fa:25:a5:b2:47:
24:49:e0:bd:34:6b:76:b0:93:fc:3c:da:0d:c6:c2:
e1:7f:b0:66:6d:24:c1:fb:43:56:af:4c:82:7e:79:
01:4b:a3:b3:ea:99:88:7c:eb:32:ad:d8:5e:32:70:
02:64:66:07:62:d8:aa:27:94:d6:3d:f0:59:25:cf:
fd:0f:48:2c:c0:04:23:4f:19:b1:e3:18:e4:6a:05:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:91:B6:D8:A6:DF:08:6B:3D:52:CE:B4:D0:8E:63:14:C6:87:41
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:65:32:1b:73:8f:c1:6e:f9:50:7e:10:17:05:7a:ce:b3:1a:
a9:bd:46:2e:21:73:91:90:9f:da:26:ca:72:89:b2:d6:d0:f6:
30:59:2a:8a:ab:f8:1f:55:3c:6a:09:f1:0f:c8:ff:41:c3:ec:
6c:e2:ef:a9:85:51:6c:3e:4a:d9:b2:c2:9f:bc:fd:65:41:cb:
3d:f7:23:ea:59:29:5e:19:13:c5:58:ed:9c:5e:67:8b:6a:2d:
1a:46:00:85:43:82:78:c9:6c:ad:4d:0a:06:ce:e1:20:42:e2:
42:38:3d:db:aa:b1:dc:54:22:b0:6c:b4:a5:8e:30:f1:84:1a:
ae:d2:c9:ba:b1:93:66:ed:c4:ca:26:d6:fa:c0:50:39:62:17:
51:6a:da:11:17:cc:b0:a7:68:f3:aa:1a:14:55:34:69:89:62:
71:b8:c8:60:30:fd:a8:24:94:e2:00:1b:41:e5:80:5a:17:df:
11:c1:a8:b8:6b:55:53:92:d4:74:66:10:1f:50:15:0b:31:c7:
72:63:db:b5:ab:f0:e8:39:ff:8c:f8:10:22:bf:f3:c2:da:94:
25:d7:cd:0a:5b:41:b9:36:51:18:76:3a:46:c3:9d:6a:76:67:
2d:db:80:7a:35:b0:82:88:bf:0e:32:56:45:ec:87:32:81:67:
33:8c:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:13 2025 by rpki-client