Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: VMuK5mYZ7yDuKMVEQ7IiAKK/eRZCM7ixh/UdCPHGr1I=
Subject key identifier: 01:ED:7B:52:DF:06:82:4A:82:54:75:18:7D:FF:EA:C8:60:3F:C4:38
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 0199FC58A4EB3E125A3390E8CACC75CC7BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0DDF
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: oU57ASOEOwzF5YKJP3im+mHTSNtNBIMVmKIFVjRaSZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a4:eb:3e:12:5a:33:90:e8:ca:cc:75:cc:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=01ed7b52df06824a825475187dffeac8603fc438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:1f:d1:bf:d2:92:52:75:4d:e1:7b:da:9e:
78:d4:1a:b5:af:ff:4b:42:09:1b:6f:f0:e2:a9:b1:
4d:20:e6:ed:ae:22:32:70:5b:03:cb:00:c3:d6:47:
26:90:ab:ed:18:95:92:40:83:7b:58:d3:9d:b3:68:
bb:ff:09:0b:1c:df:17:de:ff:3c:58:15:23:d9:29:
0d:48:09:93:d2:7f:c4:e7:25:f4:d7:65:99:15:fb:
db:94:8f:15:72:5a:b9:14:80:71:5a:3d:76:fc:9a:
49:26:53:66:61:33:7c:14:2b:ab:2c:88:76:0e:d9:
9c:67:94:27:7b:60:a4:be:23:18:24:b4:e7:8f:9d:
c5:57:b3:34:d0:3d:cb:24:33:17:d6:52:37:14:39:
e1:86:4c:b5:59:c1:56:d6:69:c1:8d:0e:20:36:f0:
46:b2:45:d5:ba:46:76:42:56:d2:84:30:e0:fa:d3:
c7:cf:91:48:01:b9:ac:41:d5:7d:01:0a:09:26:5d:
63:b9:10:60:f5:22:03:53:e0:9b:26:2e:9b:a3:a3:
be:1a:b7:f3:ac:9a:40:aa:cb:b8:b2:76:fb:dd:b2:
c8:25:19:b3:a0:02:76:18:25:27:fe:de:7b:85:b3:
b8:51:9a:aa:50:02:4a:55:dc:28:6a:6a:e7:bc:d5:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:ED:7B:52:DF:06:82:4A:82:54:75:18:7D:FF:EA:C8:60:3F:C4:38
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:24:1c:3e:35:c9:dc:b4:a6:0c:75:00:5a:af:24:57:e8:4e:
5d:e7:e8:db:df:60:32:52:87:d1:88:04:08:17:05:fd:fa:02:
b6:7a:7f:da:e4:ae:8d:23:e5:b8:31:8b:2b:d6:b4:42:63:c7:
64:85:82:48:4b:50:4a:1b:f1:a7:22:d2:af:00:35:88:06:00:
4a:1b:aa:5a:61:55:6e:6c:b0:70:f2:c7:53:79:76:11:23:6a:
ff:05:1d:24:73:97:a0:10:fc:89:1c:07:03:4c:a1:01:b0:08:
f4:f8:33:c7:56:f1:0a:dd:51:e2:7f:98:6a:a7:32:a3:09:6c:
8e:83:24:d4:46:99:7a:8f:a9:2a:3a:f2:4f:4e:e8:aa:c1:08:
7c:cf:6c:57:98:95:4c:c8:89:d0:f0:42:3c:53:e5:5d:87:e7:
78:bb:d4:0a:63:7b:41:d3:6c:bf:66:cf:77:95:2f:42:ee:aa:
93:9f:75:4a:5c:07:af:aa:e4:f3:55:c5:76:69:c9:2c:8d:b7:
ff:2e:70:a6:e3:c8:c6:d6:79:b7:eb:c7:a5:bc:56:c1:b9:e2:
64:fa:9d:57:9c:84:a1:06:45:b4:c9:62:9d:20:82:25:2e:f0:
1e:7d:9f:76:49:78:65:45:86:7c:8e:81:aa:14:db:e4:0f:77:
61:36:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:42 2025 by rpki-client