Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: cGJC/K+HSwPBsSDqPvsf+/eyci0toMILv3IyjH6wATM=
Subject key identifier: 63:3F:66:21:05:72:39:5D:1E:0B:8F:FB:0E:1B:E0:CA:74:7F:E5:38
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 0199FBEB541581D3FD5A6174D5EE96BD1F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: svMe0BmhomL8+ZmkCukucpQfGGdaFaMk8lXqpZEwGt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:54:15:81:d3:fd:5a:61:74:d5:ee:96:bd:1f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=633f66210572395d1e0b8ffb0e1be0ca747fe538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:59:82:5f:51:4f:4c:37:6d:66:89:e6:19:
2e:5a:c6:ab:8d:c6:4c:00:3a:a1:eb:8d:a2:ae:8c:
6e:62:65:b0:34:a3:81:e1:57:01:96:f1:b4:9e:d1:
6a:0d:bd:69:86:4f:c7:2b:85:f0:c5:e4:d4:56:10:
e0:73:ae:ba:b1:18:22:81:b7:f2:8e:0b:7d:6b:32:
69:73:be:95:4a:29:23:1a:10:e2:20:4d:21:ce:4f:
b5:cd:4c:e2:89:a1:07:72:83:32:c3:4e:06:19:82:
bd:cd:26:df:26:70:b4:d9:fc:8d:f7:df:62:5c:a6:
31:49:3b:d8:82:ff:ba:90:ac:9b:34:1a:ec:29:88:
86:be:19:61:53:d7:db:da:a2:78:cf:1f:ab:47:71:
0f:9c:11:59:75:5c:bf:80:12:b1:c7:78:82:f2:f0:
62:6e:7a:54:37:21:99:1f:82:68:6a:fa:b0:bb:1c:
31:1b:d3:e6:73:ea:be:1b:a2:cd:0c:21:d1:72:63:
2f:0d:5b:b2:37:e5:03:88:8d:37:d0:f4:a4:ac:e7:
f4:49:f1:be:65:17:e9:1a:d1:49:05:d9:1e:61:e8:
66:49:eb:d8:83:af:ed:cf:08:bf:23:09:68:f5:18:
62:67:9b:34:3d:da:30:5e:3f:18:e8:27:62:ab:ce:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:66:21:05:72:39:5D:1E:0B:8F:FB:0E:1B:E0:CA:74:7F:E5:38
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:7a:ce:fa:cc:ae:c8:8d:96:44:f9:a4:26:ee:51:55:1d:
a7:4d:93:63:53:5d:04:6a:9c:6f:6e:00:1c:0d:03:58:46:6c:
53:f3:b4:24:2b:76:e3:bf:79:6b:1a:41:dc:47:48:31:a1:9f:
3c:88:9c:ef:36:95:03:fa:ac:3b:08:bc:b1:36:32:8b:5b:e6:
92:92:9b:de:ed:0c:da:b1:62:7f:e3:6a:15:3c:33:c4:58:d7:
97:c7:cd:fc:e0:bc:87:10:76:b2:4e:02:ca:ac:90:2f:73:30:
98:3b:2b:92:7c:cd:31:54:95:89:08:ff:78:c8:44:43:c6:61:
32:50:0e:50:81:d0:62:7b:64:c8:bc:74:a9:f3:cd:71:e4:2d:
fa:43:70:a1:5c:5a:98:97:0b:f3:d4:bd:14:0f:34:db:31:92:
78:8a:40:7e:8d:d2:9b:fb:c3:5b:1e:51:94:19:72:be:7b:a6:
30:4b:b3:02:fe:be:80:b1:b0:52:cf:c0:b4:56:d8:f2:a5:d8:
d8:31:a4:01:c8:f5:4a:58:10:26:9f:e4:5a:b9:e5:8b:08:49:
17:53:94:02:4f:57:77:a8:22:d6:eb:29:0e:ea:51:02:87:7f:
ac:ff:93:27:05:69:da:01:fb:c5:d1:d7:cc:64:00:20:a8:bb:
38:30:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:11 2025 by rpki-client