Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: qjJMD64sSnxGMwoPEOfIk4lhbrrmXsTWtXrIyQbmmrA=
Subject key identifier: BC:7A:D0:05:C5:6A:31:78:94:DF:53:7A:D0:53:7B:35:50:A9:E2:DE
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 0199FCC673CAFDD7D18DD94E5C045259050F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: zdVBYHBw7RwZmiZOUHBZUZNS/v8V8pvM+bctDFMzmgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:73:ca:fd:d7:d1:8d:d9:4e:5c:04:52:59:05:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=bc7ad005c56a317894df537ad0537b3550a9e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:92:40:3a:61:a5:b0:31:21:47:19:e5:2d:
bf:58:b2:e7:7a:07:7f:83:40:e9:4b:36:e0:4e:64:
96:ac:26:9c:27:2b:36:8a:ae:9b:84:b9:1b:d6:85:
cd:6e:f4:ff:8c:e0:c1:09:dc:58:cd:40:d0:05:ca:
c5:bc:f6:0c:1b:81:a3:54:7b:12:89:15:2a:4c:8e:
91:e4:00:99:f0:6d:20:90:06:6b:7e:82:00:cc:f2:
ee:bb:ca:09:4d:bb:36:2e:bf:56:3d:4f:95:86:61:
8b:8f:a6:f6:8a:7c:c8:39:92:1b:ab:e0:ae:b2:1f:
e6:31:11:d8:f6:a6:56:ac:e8:5f:12:c2:81:37:50:
1f:4c:77:a4:0c:df:23:c3:19:fc:ee:76:00:03:13:
4b:87:c9:b4:b6:cf:1a:2c:3c:0b:25:3e:8f:0d:95:
1d:0a:13:e5:2d:1f:49:2c:05:04:82:b8:ae:10:e5:
c7:99:28:f4:45:cb:f6:21:44:70:8a:60:96:71:8c:
d1:17:b5:77:50:ad:0b:4a:37:55:ca:40:3e:3a:21:
d6:17:96:92:31:f5:ed:52:e2:08:89:cf:6a:00:6d:
49:dc:1d:21:d6:c7:39:31:8d:2f:14:37:a0:b6:ad:
16:43:0a:de:d0:a6:38:52:d9:5b:0f:7b:99:f2:43:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:D0:05:C5:6A:31:78:94:DF:53:7A:D0:53:7B:35:50:A9:E2:DE
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a4:91:66:59:91:fe:3f:b3:06:3b:42:9d:43:6d:f8:a6:fc:
59:c1:af:fc:fa:2b:b7:ca:87:fd:89:72:bd:ed:e2:b0:fd:23:
01:60:be:4e:dd:eb:89:b1:3f:c6:fc:60:cf:9c:d9:c2:38:97:
93:ca:d0:64:2e:3e:69:34:d6:14:b0:d1:96:fb:7a:61:7b:67:
81:2a:37:44:e9:63:ee:62:b5:82:ac:d2:e0:95:9a:72:19:a7:
80:3a:f9:1c:9f:45:c1:84:47:b8:17:e5:34:d1:d0:68:24:dd:
dc:57:8d:0e:a8:14:73:88:c4:ff:c5:f4:02:f6:2d:15:cb:9d:
be:31:c3:a9:ef:72:51:ca:c7:2f:b7:7e:9e:3a:6c:a2:3c:0f:
51:06:b7:0c:ab:44:31:11:b6:bc:67:9b:ec:4e:c3:52:20:13:
6d:4c:e6:b8:60:62:12:1c:df:76:10:f7:44:7a:18:fb:36:3c:
be:8d:55:f7:ca:21:95:a7:ad:da:1e:20:d0:0d:34:bf:92:f7:
b7:19:55:b8:e9:2d:e4:7c:5a:9f:d0:96:07:80:b3:a1:da:4b:
95:a5:22:d7:18:ed:d4:8b:dc:b4:f7:ba:b1:43:10:a3:fa:63:
9e:9a:38:5e:e5:12:99:64:06:d9:f3:f1:85:d1:2a:1a:c5:d7:
a8:bc:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:25 2025 by rpki-client