Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: CWKKrxN9iUcZH0P1e5cJQXCtkzAZGW15Frtb8H/8zow=
Subject key identifier: 27:E2:1A:E4:39:93:DC:B6:7E:FA:58:C1:48:58:E4:E1:A3:E0:CB:68
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 0199FC8F3901DE1AEE8A16CB52B1FC43FAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 06C1
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: zF8/rxDDXNpk5XTDTEWLp9odIKzGETLuE2I2q2E8Vw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:39:01:de:1a:ee:8a:16:cb:52:b1:fc:43:fa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=27e21ae43993dcb67efa58c14858e4e1a3e0cb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:9a:1a:cd:09:f9:55:9c:0a:a3:13:7f:b1:
e2:17:39:ba:79:14:15:80:09:17:4d:c4:04:2f:d4:
7d:e1:ed:5d:df:eb:af:87:d6:78:8e:40:38:e5:b1:
d7:62:e7:e1:dd:42:4c:c1:b8:2b:d6:9e:98:3a:57:
99:d1:a2:75:42:c1:40:bc:81:11:b9:f9:77:94:f1:
5f:88:66:f8:79:db:c8:e0:45:f4:2f:73:49:6c:81:
5d:53:1b:8a:26:41:8a:f1:03:df:0c:d1:ec:1d:5a:
6e:7f:e3:f5:d4:aa:d2:86:7d:a3:05:a3:6c:77:71:
2e:81:ae:57:21:57:38:01:ae:ee:69:67:c9:14:b3:
f9:f1:95:fc:90:cc:e2:c9:56:32:d1:af:e0:d9:8b:
a3:84:42:50:10:aa:75:b2:2b:93:e2:ea:61:01:59:
74:4f:b8:d7:50:83:de:0d:07:10:f0:4e:70:d5:72:
3e:51:34:7f:bc:3c:aa:45:79:20:96:4d:b4:e5:6c:
22:dc:e9:03:3e:19:0f:dc:55:2b:ca:3c:51:7c:0a:
1d:fb:55:a1:81:82:f2:11:68:30:b9:40:ba:83:1d:
8e:97:43:66:8e:15:d5:93:29:19:a2:de:05:1b:84:
d6:d1:eb:d2:bf:c4:79:e6:42:ec:d6:5f:cc:31:4b:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:1A:E4:39:93:DC:B6:7E:FA:58:C1:48:58:E4:E1:A3:E0:CB:68
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:12:a4:90:2e:6e:de:35:8d:53:f8:a7:a6:68:87:08:75:5f:
a2:1a:50:e4:6a:ba:60:b4:9a:33:24:28:2d:14:66:3b:4c:9e:
83:5a:96:f4:48:78:6b:6e:83:da:2a:f4:0e:23:22:5d:2f:27:
62:b1:7d:3b:03:06:b4:41:43:cc:ee:ef:43:10:15:c0:a8:76:
5c:b5:07:bc:40:a0:95:2c:1c:db:be:9b:26:16:47:84:be:53:
c4:a2:52:74:4f:f8:60:28:a8:5b:1b:62:28:fe:1e:ca:7c:b5:
cd:6c:cd:63:b9:77:76:39:47:7a:a3:8e:b9:b7:b1:22:99:55:
6a:27:99:50:6e:df:a9:f0:91:bf:78:99:39:da:c1:84:29:84:
08:93:e0:73:1d:de:a6:25:9d:87:d5:07:b2:e2:66:2a:c9:b6:
41:39:77:6d:27:18:64:fd:45:a3:e2:5d:fc:7d:0f:e9:19:81:
f5:13:5c:1d:aa:41:69:55:78:69:6b:fa:17:9c:1d:15:98:53:
15:92:7d:76:29:b1:9a:62:bd:8e:2b:d3:16:c0:54:5f:c6:24:
83:b0:99:2f:28:42:09:b4:cc:fe:6d:5d:e9:21:4f:23:b1:c9:
62:36:e1:f5:7d:78:4e:2d:7c:be:f9:da:d9:2d:bd:13:0e:63:
b1:fb:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:17 2025 by rpki-client