Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier: OQ5kS6z7vo21/uPidLpW8gbj1kG1tyZQXI0BGvLAi18=
Subject key identifier: 4F:91:FE:CF:23:4D:23:18:30:56:06:2B:37:64:6C:A1:12:7C:07:45
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial: 0199FC5891EB5632870A3B6F65588C6223B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: t3XchnT2c2UvnpfO13Tk4O/X1BUIr6PFppaRj5Dk6Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:91:eb:56:32:87:0a:3b:6f:65:58:8c:62:23:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=4f91fecf234d23183056062b37646ca1127c0745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:6c:07:95:5d:2e:dd:9b:d0:4c:bb:37:88:
c8:b7:6f:f5:34:ef:92:69:9b:e2:7d:d7:6a:41:31:
fc:8c:7e:0f:a2:1b:06:d7:07:ab:56:7b:0c:0d:40:
35:d3:41:31:bd:37:68:a0:14:05:78:70:d7:20:57:
42:ac:76:5e:b4:cc:2e:b0:49:ce:01:61:28:2b:53:
07:11:8b:59:84:0f:ff:24:aa:b5:cd:7f:bd:83:a1:
ac:79:c9:7e:47:05:38:63:c2:7a:64:96:e2:96:6f:
6d:07:78:45:50:60:73:ac:07:41:0d:5d:4d:02:e8:
a0:c1:e7:84:01:fc:96:b8:1d:3d:60:64:62:a7:d3:
f2:cb:8a:5d:00:83:0d:90:24:35:a8:36:57:d5:b7:
9b:64:a1:e6:ed:9a:ef:ee:0a:ec:d5:c5:c6:67:21:
e9:e6:df:a6:16:10:7a:0a:40:81:e8:47:d0:d5:79:
db:74:5f:75:31:fd:85:39:bb:07:c9:5c:3a:77:d7:
02:04:1f:4a:c8:94:12:ac:0a:f5:08:78:e3:ac:0d:
d1:da:00:cb:63:44:7b:36:23:ac:50:b0:d6:86:b3:
e4:7d:73:ce:84:bc:e2:e6:8d:95:ed:2b:93:7c:c9:
f9:e2:ea:b7:93:9b:30:60:f0:93:eb:41:85:74:f5:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:FE:CF:23:4D:23:18:30:56:06:2B:37:64:6C:A1:12:7C:07:45
X509v3 Authority Key Identifier:
keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:37:b0:4b:41:cc:fe:08:34:33:64:a8:a4:40:8a:d2:b4:bf:
ee:ff:9d:53:8b:ac:d3:88:13:eb:11:0a:f3:2d:82:a9:07:ee:
bb:e4:9e:28:d6:b8:1e:53:56:85:82:c3:3f:98:ee:b8:27:13:
ba:c5:21:27:98:a1:88:9d:f9:4c:60:fe:f5:93:4a:a9:05:b5:
f3:30:d8:fb:48:28:6a:a7:0a:52:c5:8a:03:34:42:e3:51:98:
0c:d4:e6:5b:04:e6:7c:4b:0b:fe:9b:af:4d:a4:be:eb:10:4b:
89:06:f1:6a:85:0a:40:65:19:28:31:e1:7f:df:23:37:cd:db:
89:75:74:c6:a1:b8:66:91:57:1e:60:f3:fb:f0:75:e8:d1:1f:
d0:31:66:c9:93:81:f8:56:06:fa:f7:d6:4a:30:62:46:e8:64:
eb:6b:ef:d0:e8:d0:c5:33:75:c6:e1:46:45:31:f2:fd:71:56:
86:c2:f7:25:db:4c:61:b4:03:32:ee:f3:dc:a6:5f:de:3c:38:
43:a3:69:4c:10:8c:d6:20:a0:63:11:b4:2d:e5:c4:5f:0c:18:
1e:63:76:30:ca:5d:21:87:d5:62:0a:67:62:73:9e:e2:0f:5c:
9e:62:50:59:31:f2:2e:33:ca:3f:11:70:a1:66:29:b1:02:87:
07:3f:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:07 2025 by rpki-client