Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: kW+ZSZU+uckgr0tAyvnDJHo1fzIreOkIVZMlHmTI85U=
Subject key identifier: B0:68:48:51:27:1C:C2:ED:B2:E8:B8:2B:35:87:A3:88:20:14:1E:36
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 0199FCC6B2030698B0D8555B79D0B3D5BCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: 2dfTxuBOsvH3ABSZrgMYWT96kGNp6uHw1WaN9rZidpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b2:03:06:98:b0:d8:55:5b:79:d0:b3:d5:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=b0684851271cc2edb2e8b82b3587a38820141e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:67:c1:a2:e1:bf:48:a7:2a:14:b9:a8:8f:
8e:42:9b:a0:b7:a7:c2:db:4d:ca:b4:87:d6:85:b6:
78:da:64:56:cc:9a:81:d0:1d:56:53:73:22:09:61:
3a:35:9d:b6:31:8a:83:ac:28:b9:9a:80:1e:18:d1:
80:c1:27:3a:54:a4:ee:fe:e6:40:2b:96:87:97:dc:
d4:b3:f6:70:0c:b3:8b:9e:6b:d5:4a:2f:e2:45:fd:
08:c2:62:ce:51:30:e8:30:de:60:b0:b0:0d:23:d4:
b9:70:0d:bd:8d:62:d7:71:ce:f7:22:ec:bf:f4:ef:
ed:53:42:dd:4a:74:ad:2b:64:29:22:06:4f:d3:2b:
85:8a:f7:29:de:85:a1:83:d0:97:74:f1:a6:13:dc:
fa:67:c8:35:dd:33:4f:c2:61:e7:93:f3:0c:aa:7f:
65:0b:da:5d:85:f3:61:a3:00:dc:7c:13:5d:bc:2c:
6a:79:ea:39:a3:91:5b:df:1e:f9:47:90:02:5b:8f:
a0:fe:6f:21:50:db:e1:fb:62:b7:bc:83:b9:79:d6:
cb:9f:ae:19:93:f1:d8:00:32:d4:cd:21:e5:b0:74:
a1:93:b1:77:7f:02:63:f5:59:0b:4e:61:61:ac:fe:
dc:4f:a8:29:74:97:d4:a3:77:73:3b:ea:60:51:60:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:68:48:51:27:1C:C2:ED:B2:E8:B8:2B:35:87:A3:88:20:14:1E:36
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:c5:ac:40:21:94:e9:98:fa:96:73:1b:de:0d:b2:12:90:
36:c2:13:76:67:ce:1f:2d:08:53:25:16:96:24:16:f0:79:a2:
35:b3:51:32:a7:38:5f:4a:bc:c5:37:76:a9:61:4f:fb:8d:9a:
81:4b:a0:82:06:2b:a8:fa:b3:a9:c0:ad:55:66:a9:61:25:eb:
c2:f4:4b:27:1a:dd:dd:26:e2:e2:af:c1:00:08:3e:3e:27:50:
25:aa:5f:a2:79:2c:9a:36:d4:98:0c:c3:b2:74:8b:20:3e:68:
ad:2e:77:ef:d2:85:77:e0:49:1d:a3:41:f7:22:11:5f:d6:16:
bd:8f:db:a8:78:56:22:de:a0:db:28:1e:0e:2f:be:67:e7:d5:
e8:5b:2a:09:12:4e:44:44:65:1e:e0:cc:87:d3:2e:48:69:2b:
f3:ca:56:7c:e4:69:a7:34:c0:ba:80:9d:e8:0d:cf:e4:95:de:
2b:ea:af:6f:84:88:b9:bc:02:35:2f:91:d4:9d:f3:d1:17:7b:
9f:cc:57:d6:d9:49:bf:98:18:20:cd:4b:59:bf:b4:ef:c1:9e:
66:43:44:d6:73:20:56:fa:b4:cc:a7:6e:53:52:e5:49:d9:f8:
9b:c2:43:bc:86:6f:9e:8d:7a:69:a2:02:6f:29:1b:27:d1:c1:
5b:ce:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:32 2025 by rpki-client