Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
File: De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json)
Hash identifier: zQNi2dDHzxFkE7aGG1ELwBTbjdfvIbH1xXuTsQ5ygeg=
Subject key identifier: 79:58:E0:8E:DC:19:B5:CD:7B:5E:EB:1A:05:24:01:F7:A2:07:9F:B8
Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
Certificate issuer: /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Certificate serial: 0199FC8FA3302A593DF4FF5E2F9335478675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
Manifest number: 1224
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: omtaYwq1GwBVAslO7mXKatIbZvNJHr+rSo9vT2U445M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a3:30:2a:59:3d:f4:ff:5e:2f:93:35:47:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=7958e08edc19b5cd7b5eeb1a052401f7a2079fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:4e:50:43:c9:45:8c:88:66:e7:4d:4e:6d:
a4:0a:0a:5f:72:1a:ed:62:68:6d:8d:88:dc:26:90:
81:27:44:4b:c7:e8:45:07:91:30:aa:2d:b9:a4:26:
0d:45:a4:2a:de:f9:fd:d4:d7:de:f6:08:86:31:e5:
81:a2:b4:00:03:5d:dc:75:bd:14:b4:04:78:1c:35:
d1:88:55:33:f9:0c:d0:ae:ff:d0:0e:ff:c0:03:94:
ec:73:2b:e7:a6:37:5d:18:25:2d:53:a2:e8:1a:69:
0e:f1:30:46:f0:65:79:bc:34:e7:e3:33:15:ea:2f:
9a:8b:96:a1:69:78:b8:e6:04:51:41:50:f1:cf:fd:
e5:e4:aa:fd:86:ff:cf:c2:34:9e:53:16:34:21:b6:
c7:28:ec:a2:fa:47:4a:87:aa:27:d3:f8:09:12:22:
95:b9:03:8e:e7:8a:a4:3b:d1:0a:70:1f:4e:ee:8c:
00:a7:7a:93:dc:c1:8b:a8:d9:cd:ea:30:00:c5:1b:
5c:e2:da:ae:2f:32:57:32:b8:f6:9d:9b:19:c3:fe:
af:ed:c7:88:4d:a4:ca:5e:ac:b5:65:0d:c5:2a:62:
f0:5a:fd:7e:a1:4f:12:82:82:7c:63:77:55:e0:d8:
ef:b4:ff:96:e3:c9:3a:c5:48:f4:ab:4f:92:2c:b5:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:E0:8E:DC:19:B5:CD:7B:5E:EB:1A:05:24:01:F7:A2:07:9F:B8
X509v3 Authority Key Identifier:
keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:06:b2:c4:52:03:13:5b:6a:00:e5:54:cb:70:40:e5:24:7c:
3b:b9:ac:59:7d:c3:cb:40:12:54:6a:47:c6:d8:5a:72:2b:36:
b8:66:42:0b:db:91:58:8b:e8:eb:77:3c:5f:c9:b1:12:59:76:
f7:4d:fc:69:d0:90:8a:66:b5:cc:c7:07:b4:7a:dc:24:9a:98:
c8:5a:4c:3e:54:b9:6d:0d:53:c7:06:7c:f5:5d:3a:82:5b:21:
bd:66:44:e7:34:18:1a:3f:50:3b:c9:de:01:9f:0a:8f:b5:5b:
b4:c4:db:f3:a7:2d:1f:d8:3c:e5:ff:36:8d:24:9c:91:7e:a5:
f2:6d:00:9a:30:ef:cf:29:54:8f:58:67:96:19:1a:87:9a:56:
4c:43:57:3a:15:b0:ed:5a:8b:ad:88:6c:37:b0:38:09:67:19:
90:72:0c:f0:72:8a:3d:a4:bd:be:ea:87:5d:c5:de:88:f7:be:
0a:23:e3:63:e5:5b:b9:b9:b3:5c:68:68:86:93:83:58:9e:bb:
d3:26:04:88:78:56:8d:3d:40:6d:82:8a:ce:56:fc:8d:11:d0:
47:0c:f3:a7:10:11:49:12:97:8c:2c:29:c5:d3:b7:1d:90:b5:
06:c8:18:b1:7b:64:6e:d0:f7:8f:cf:eb:ba:d3:2c:35:aa:2e:
d4:d9:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:46 2025 by rpki-client