
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: 18B9+7WR2JYhr1mRO9m16M/4I4MYEK7pjxodJvQ8al4=
Subject key identifier: FA:7B:D5:5C:58:6F:BE:0B:00:0C:18:2D:B4:7A:67:D5:30:22:1B:FD
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 0199FBEAC00CACFDFFA1F0CBD9E70B29B96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: Ksk6NxRvpspcJTy21cFPdqYoPdJxUScgvRnj8yPNyH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c0:0c:ac:fd:ff:a1:f0:cb:d9:e7:0b:29:b9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=fa7bd55c586fbe0b000c182db47a67d530221bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:68:ba:e4:d6:4e:8c:fb:83:c6:00:9c:17:
a3:b7:ea:c8:92:fe:3c:c6:62:e9:a3:10:34:d5:2b:
22:3b:39:6f:42:85:37:d8:59:f7:5e:40:71:f1:36:
77:a9:d3:a0:02:35:9b:d8:c2:1e:c6:27:7f:4b:ff:
3d:b4:5b:6d:2e:e5:cc:dd:0b:6a:2a:ec:f5:1d:25:
f0:9c:ce:18:bc:42:69:38:d6:cd:39:e7:69:ee:da:
22:6e:d4:0a:a9:16:c3:0e:e1:19:8c:18:e2:44:71:
c8:f5:3a:67:39:00:aa:ea:eb:6c:1a:78:67:9a:c3:
41:4b:c9:72:17:03:30:9a:11:7b:b6:bb:b1:e9:eb:
63:55:2e:88:4b:a2:3f:fd:f8:74:df:f9:a0:ce:e3:
5f:7c:fb:0a:69:aa:a6:cd:53:4d:c7:6f:10:b5:fa:
3c:9c:1d:57:7a:48:ef:17:39:03:6d:85:03:51:63:
19:bf:3d:a5:f9:82:39:23:cb:1d:34:81:0e:cd:e2:
d2:f1:d1:d6:99:dd:51:6f:7e:68:39:5d:8d:e2:1a:
0a:29:3e:6c:b4:8e:e6:4c:76:6f:d9:55:f6:e2:76:
b9:70:99:8f:b6:93:00:99:38:86:76:8b:fd:6c:a6:
a3:ec:e3:d8:ae:fd:41:70:c1:8a:c1:e4:5b:a9:1e:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:D5:5C:58:6F:BE:0B:00:0C:18:2D:B4:7A:67:D5:30:22:1B:FD
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bc:89:35:97:35:01:b3:94:24:08:2c:5b:02:81:70:0e:6e:
10:d6:57:31:cc:7b:54:c8:b8:93:25:53:19:4b:3f:11:fe:3e:
47:2b:b2:71:84:c0:11:b2:20:74:80:ef:f4:66:35:17:12:99:
b1:75:8a:6a:a5:b9:8d:94:1e:71:57:c3:ca:9d:97:44:2d:49:
86:f6:dc:5e:ef:9c:cf:5c:e7:6e:29:45:ed:c8:80:6d:a7:9a:
3b:29:14:6d:9d:7d:8f:8c:70:65:53:99:ec:1a:fd:64:35:92:
d6:5a:f5:86:fd:47:8c:3e:8c:8e:f4:50:fc:c1:a2:79:6b:5e:
bd:e8:b3:0a:6f:c4:ea:62:9b:3c:2c:05:d8:a7:df:35:d3:f8:
55:9e:8e:01:dd:c2:eb:e0:cf:fb:cf:4a:00:3f:03:8e:aa:bb:
26:3b:99:bf:d8:2e:03:11:4f:23:5e:c4:83:1e:98:3b:ef:08:
66:45:1a:28:6f:91:15:d9:f5:04:44:c0:28:50:d1:95:fd:95:
3b:c7:dd:3a:c3:5b:77:60:e8:3a:5b:90:66:7d:8e:db:27:5e:
27:ff:06:1c:a7:e7:c4:f9:37:e9:55:30:d6:a8:89:e1:f0:3e:
fc:c0:36:18:6f:29:18:78:dd:47:c4:ec:6c:27:7c:09:76:e6:
06:2b:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:04 2025 by rpki-client