Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: eLZp+yZuapgggNPpCF9YYfhmZY4BS0DdXP3DPzU9iG8=
Subject key identifier: 06:22:E5:D8:15:04:04:B2:5A:5E:19:C8:19:2E:8B:01:FD:65:6C:B5
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 0199FDD99882E4BECC3E32A7E1C24EA3424D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:59 +0000
Manifest this update: Sun 19 Oct 2025 19:01:59 +0000
Manifest next update: Mon 20 Oct 2025 19:01:59 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: GbDMgDnxI5Ubrh9f9fufjbj+U285C8P62nqZ8JyGK6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:98:82:e4:be:cc:3e:32:a7:e1:c2:4e:a3:42:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Oct 19 19:01:59 2025 GMT
Not After : Oct 20 19:01:59 2025 GMT
Subject: CN=0622e5d8150404b25a5e19c8192e8b01fd656cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:4b:e2:1f:79:80:97:46:33:93:7e:1f:ad:
22:bc:c9:59:74:ad:e5:8f:0d:c0:6d:c0:25:49:6d:
15:eb:9e:62:75:5e:f1:d7:21:a5:97:a7:c4:e1:23:
86:cd:d1:dd:d9:bc:46:fe:1f:86:12:6d:49:7f:e2:
87:8a:41:b9:8e:d8:4c:2b:e3:c3:ef:21:8a:c4:24:
ea:99:ff:79:d4:cb:4c:63:50:cf:4e:70:bd:fd:69:
1a:9f:8a:aa:9e:b0:4d:f4:6c:9f:84:09:1f:1f:8e:
15:07:d8:60:e5:3b:ba:db:cb:bb:09:59:ae:e1:15:
da:77:94:79:64:74:4c:86:06:16:e0:43:b2:63:0f:
88:cc:c4:6d:38:20:93:6a:0e:b3:a3:95:c3:71:12:
f2:d8:0e:ba:d3:d6:a1:cb:36:e1:f6:79:89:e6:cb:
13:0a:0c:b6:87:61:db:20:1e:2b:5a:e5:73:65:a8:
87:61:3b:35:36:f3:61:32:e5:d9:e9:d9:27:81:a7:
f2:09:11:bc:a5:4b:a8:00:b3:56:4b:b6:84:40:38:
18:a2:6b:14:ea:0d:4c:57:43:67:b9:d1:ee:39:21:
ed:43:4d:97:eb:62:aa:0e:1e:23:a0:4d:08:73:b1:
7f:e3:f2:b6:3a:c8:e4:c4:0b:4a:a4:3f:d8:73:69:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:22:E5:D8:15:04:04:B2:5A:5E:19:C8:19:2E:8B:01:FD:65:6C:B5
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:c9:43:07:dc:83:b8:f2:d0:41:af:0d:6c:1f:54:c1:04:
34:2f:19:6d:0e:72:27:d6:7f:b8:71:ef:5c:28:4d:81:60:3f:
15:5a:44:da:c1:ce:56:80:55:6e:c4:b5:51:6b:f0:25:32:0a:
d2:b6:91:1f:e0:c0:02:78:70:9c:bd:39:f6:8d:2b:dd:92:14:
61:c3:36:ba:75:1f:cb:5f:d5:a9:41:cf:0c:70:de:50:25:f4:
dc:ec:a0:bf:96:eb:20:cd:88:29:50:d4:12:8c:93:b0:ae:3d:
f5:d2:b2:6e:f5:ba:59:b9:51:d0:5d:0d:86:64:99:bc:e7:34:
13:36:f6:08:24:e4:a5:3f:26:ba:61:88:a5:13:8c:0a:cc:1d:
96:0c:33:af:69:4c:e0:88:b7:af:b8:7f:4a:10:dc:b5:f3:66:
18:ec:2a:43:1b:de:b6:9c:93:63:44:1d:d3:e8:85:b1:e8:76:
00:91:84:25:58:cf:fe:42:c2:53:2f:2d:34:b0:01:f3:bf:62:
5d:d2:ff:a4:6c:22:12:ae:89:ad:63:d0:5b:ab:81:11:d7:a0:
f7:13:e4:7f:db:d9:19:ff:b8:84:dd:2f:f7:07:19:a7:07:64:
85:16:d1:be:2f:a8:a0:99:3e:e0:be:b5:a2:26:93:45:70:41:
7a:d3:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:40 2025 by rpki-client