Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: gpA+TT+r7ccXHsJhQ5dWBaisTB7HLm19HXpCVl6bXw8=
Subject key identifier: EC:4A:0E:52:A1:17:37:93:D6:B9:66:B4:42:B7:49:EF:28:44:07:61
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 0199FC589C50E19D87D0E0B03D943C57528A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 0507
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: pQSkGC+G4AJSMD9fOw5uaMHo9R7XRZIgQcSeAUOF/R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9c:50:e1:9d:87:d0:e0:b0:3d:94:3c:57:52:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=ec4a0e52a1173793d6b966b442b749ef28440761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:08:79:b9:a4:64:3a:42:b0:41:24:70:39:
7d:ce:c3:05:0a:51:7a:35:56:7f:aa:04:75:aa:df:
d8:49:03:6c:a4:32:70:6b:42:45:fb:d8:b0:71:23:
9d:3c:26:ff:36:cd:0c:55:1c:36:f4:55:56:20:be:
c9:ed:dc:c0:fc:3c:2b:83:79:e7:39:22:38:86:6b:
37:61:92:db:f3:e2:4a:1b:71:b1:6c:69:cc:16:14:
a3:4f:f5:57:c7:c8:82:89:9a:58:7f:d3:87:36:4f:
4d:58:fa:04:5a:d8:eb:62:a4:8c:f1:9e:7a:38:a7:
a2:1e:ef:8b:5a:06:0c:97:5d:fd:61:6c:01:7f:c0:
78:04:08:05:79:6d:42:5d:dc:f6:64:77:31:f7:ac:
57:ee:1c:f0:70:05:81:78:d8:db:fc:eb:f0:f1:b9:
ac:5e:51:bd:da:ea:91:90:1d:ab:d5:9e:d5:ae:c1:
32:43:48:c3:7e:6c:e8:82:ae:bb:66:a4:73:2c:07:
de:85:00:6f:cc:0c:53:d2:2c:c3:6f:f4:0b:d8:29:
e2:f7:ae:9e:73:65:6b:11:0e:e1:58:81:a7:58:50:
53:3f:65:70:c3:eb:8f:31:05:58:56:37:cc:c0:d2:
12:6b:a3:c7:b6:40:db:b0:b5:13:1c:4d:52:d8:10:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4A:0E:52:A1:17:37:93:D6:B9:66:B4:42:B7:49:EF:28:44:07:61
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1c:2d:a2:b7:c8:49:74:d2:fb:6b:42:41:f5:43:e3:72:b7:
f6:22:78:cb:b0:4f:9e:29:43:ea:6f:9d:74:1c:b6:16:11:c6:
d3:ea:f2:f0:8e:69:af:b0:c2:ae:c8:1b:1c:e3:42:23:02:51:
7f:36:70:a4:be:6a:65:d3:4e:5a:9b:5a:f7:94:ed:d5:b4:2c:
cc:20:b5:b4:06:fb:b5:10:02:03:0f:10:77:d4:3b:6c:54:ba:
c9:bd:55:a2:a0:97:59:2e:28:96:ba:3b:89:7d:05:21:9f:eb:
78:da:77:55:c8:ed:ca:d9:13:bc:cc:49:20:49:ea:a6:78:ec:
7b:ef:83:2d:b7:89:7e:46:6d:d2:37:65:3b:08:43:04:11:67:
2b:d8:02:0f:69:f7:f7:39:b2:f8:71:23:f9:e6:44:f5:28:9f:
f8:5f:35:60:67:75:79:52:20:68:61:46:9d:b5:af:3f:b9:4e:
ac:4c:48:34:c7:fe:cd:54:b2:2f:c8:ae:51:92:a1:70:fa:3a:
dd:4c:07:67:28:8b:ad:44:ac:58:35:98:db:09:26:16:5a:71:
aa:28:45:e3:89:ee:7c:43:c2:80:87:22:50:87:12:e0:9b:18:
48:94:d9:d1:70:90:b2:36:b3:fe:19:8b:a8:94:0e:96:05:c6:
2f:4e:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:40 2025 by rpki-client