Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: +Y9EtClh2PkO8Lg9uXwVV/WBzGEMf0iyeTsx72kOvEc=
Subject key identifier: 51:E3:3F:50:C8:50:49:A3:E5:81:53:9A:24:7A:CB:25:93:BA:FA:BD
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 0199FD343EFB979E34A197029A2714E7BC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 138A
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: vuEVec8/Xx4OAjYumuWdEp0521Hb4+ABQ8s0cj6+Zm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3e:fb:97:9e:34:a1:97:02:9a:27:14:e7:bc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=51e33f50c85049a3e581539a247acb2593bafabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:89:af:2c:e0:ac:36:a6:0b:11:1d:97:7e:
6e:85:1f:56:76:93:13:6d:48:74:f5:eb:1b:4f:a2:
f5:20:9e:60:56:88:12:95:e4:80:29:28:8c:5b:fb:
99:e0:65:29:82:fd:4e:08:be:ee:28:1a:09:31:b0:
c9:50:7b:a6:2a:25:fc:d4:ed:9c:44:5d:45:07:c2:
87:ba:14:e3:82:b3:a4:9d:f6:0c:e4:6e:ea:b5:6d:
68:88:af:64:a3:61:19:f9:35:03:ec:fd:3e:89:40:
fd:be:de:e9:b6:4d:e9:a4:42:ca:a8:f7:ee:0e:6e:
f9:6d:d7:25:59:71:02:d0:91:2f:f7:4f:f1:63:84:
66:70:2e:45:eb:c0:23:67:87:94:b7:85:ae:f1:09:
3b:5b:64:88:10:b0:c3:fb:46:8f:c4:2d:b2:c5:3c:
11:b7:d1:6a:87:1b:f6:d2:9f:73:e7:0f:58:7b:11:
d4:e0:78:fa:0d:3d:50:58:18:d4:58:74:f9:e9:2f:
d5:52:7d:c6:17:22:7b:11:e6:67:0f:5a:5e:ea:a7:
f0:4e:d4:0e:fc:a8:33:21:d3:2d:08:27:71:8a:7e:
0d:5a:36:7e:82:6a:58:9d:51:aa:73:44:25:0a:55:
8b:49:49:b5:d7:6e:12:e1:37:1d:b2:93:c3:0d:40:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:3F:50:C8:50:49:A3:E5:81:53:9A:24:7A:CB:25:93:BA:FA:BD
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:72:b0:13:88:fe:71:fa:45:d3:43:b1:d0:0f:8f:a3:3b:
99:e8:f4:68:4d:61:8d:6a:fc:48:95:ec:ce:4f:97:9e:90:b8:
00:4f:4f:e3:72:89:dd:08:74:e7:aa:a0:3b:e6:5f:97:d0:05:
c4:92:7a:6d:79:b1:f6:e5:3a:14:4f:28:c8:d1:8f:09:89:59:
a3:79:db:4c:12:3f:6d:93:47:c9:7e:16:d3:02:d9:20:e1:0f:
fe:2f:17:ec:e3:dc:aa:71:d4:71:f6:9a:cc:97:db:7f:07:01:
73:c9:73:91:31:45:b9:97:af:ef:8f:6b:10:a0:00:eb:b1:44:
14:b8:37:f2:7a:eb:27:04:06:67:70:a3:cf:66:2a:31:70:24:
d8:27:f0:26:bd:22:e8:af:f7:99:56:ec:98:6d:4e:ce:1a:20:
9a:63:2a:f6:c1:ec:27:d8:10:85:fe:67:8e:ed:42:07:64:6a:
94:a2:9a:cd:13:ab:d0:72:c0:c9:17:4b:83:49:0a:ee:74:44:
bd:82:cf:39:c3:c6:59:b0:55:12:77:77:15:ea:b3:a9:0b:4a:
93:b2:58:fb:a3:88:ae:58:96:5e:ed:0f:91:2d:de:c0:4b:1a:
32:4d:a9:b0:14:22:2d:a6:92:a2:8b:01:9b:89:b4:83:ad:b6:
eb:1a:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:20 2025 by rpki-client