Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: V4n/PmSfJIgRz8OXfhBAb9IeDRM1TmZKFCxkUA9ZpPU=
Subject key identifier: 20:0A:A5:CB:26:16:FA:4B:68:78:45:F1:AC:76:09:98:8D:08:DF:AD
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 0198D65F96B192D348C28B445F793E1FC177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 08BD
Signing time: Sat 23 Aug 2025 10:00:45 +0000
Manifest this update: Sat 23 Aug 2025 10:00:45 +0000
Manifest next update: Sun 24 Aug 2025 10:00:45 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: 9oFXi2VeeT1zJpxRCP9GcBBrJ55O87OXh3Sui9X54mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:96:b1:92:d3:48:c2:8b:44:5f:79:3e:1f:c1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Aug 23 10:00:45 2025 GMT
Not After : Aug 24 10:00:45 2025 GMT
Subject: CN=200aa5cb2616fa4b687845f1ac7609988d08dfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:23:76:b7:a7:cc:7e:40:f9:1a:1d:15:88:
ea:b9:b4:ba:24:97:0f:16:a6:5e:59:b7:1f:3c:9b:
8c:82:08:b5:0b:63:f9:1d:01:5d:ac:d3:45:69:de:
ed:4b:26:b4:4b:48:df:65:35:c7:c4:bc:8d:a0:ae:
cd:02:8c:65:b7:af:3f:d0:1e:d6:de:db:37:8d:7c:
da:ad:dc:89:30:07:6a:bc:55:59:9c:55:1d:d2:d4:
0d:e6:ef:49:3d:b6:f8:a0:4f:85:f4:36:8a:86:d0:
52:9e:f1:a2:1c:1b:71:62:85:41:f5:e6:51:3c:9f:
25:79:a3:fa:b4:5b:7b:31:28:34:41:31:00:89:5a:
02:aa:47:a8:cc:3b:1b:cd:c9:d7:15:1e:14:2b:8a:
c8:08:b5:31:e3:49:41:7c:cf:ae:72:c8:b9:7c:07:
47:31:fd:fe:c1:ad:1d:e9:88:f0:a7:1d:35:ef:e9:
11:83:c7:ba:f9:57:c9:72:96:12:74:6c:d7:aa:2b:
65:75:af:62:e6:8f:20:b9:01:e9:02:d0:c2:77:5c:
56:8e:00:d7:64:70:fa:48:9a:42:34:38:56:14:9a:
44:96:59:75:aa:e8:8e:f6:d4:ab:da:6c:7a:c4:1c:
bf:df:84:29:aa:40:00:e1:b9:13:78:a4:cf:3a:50:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:A5:CB:26:16:FA:4B:68:78:45:F1:AC:76:09:98:8D:08:DF:AD
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:c3:57:7d:4b:df:8f:0c:7e:4e:fc:92:b0:1c:7b:7d:68:
33:cf:74:e2:c1:9b:35:96:e5:21:43:a1:22:72:0f:08:3a:77:
03:c1:e0:eb:15:b2:3e:7e:cd:50:ee:aa:43:ba:22:cc:8f:d8:
d4:6d:74:9a:54:d3:51:f4:60:57:db:14:ec:8f:dc:1b:e8:70:
ce:82:0b:9d:94:eb:f8:fe:0d:34:43:b6:1b:2f:e5:b3:18:29:
b2:25:52:61:36:10:f9:83:d2:05:0f:ab:c4:a0:bc:88:dc:1c:
64:8d:bb:0f:b7:10:d5:95:41:06:b3:73:59:a7:a0:99:18:80:
32:56:96:8c:a1:02:af:f0:ec:eb:09:6a:37:36:2e:e1:8e:64:
1a:e0:95:dc:58:ae:62:ed:ae:46:5e:36:f7:a5:14:bc:86:44:
e1:06:76:91:82:b3:4a:31:4c:78:65:03:7c:32:88:1d:56:5a:
5e:b7:6e:68:0d:23:a9:30:65:17:de:76:1c:06:3e:f5:3b:b1:
a9:d3:ec:2f:1c:08:93:2f:ec:b6:3c:38:86:7b:50:10:aa:c7:
3a:5d:eb:cd:5d:42:95:e6:6d:91:84:6c:14:98:3d:64:2f:53:
c5:08:1a:1f:ce:da:16:e4:5c:fc:55:3e:18:58:e9:52:8f:5c:
25:55:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:25 2025 by rpki-client