Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier: 1CCQ/7aPGjKkCRlgalhxBIJk0aMvBkiprk7SSLlF78M=
Subject key identifier: CD:D6:94:4D:8F:E4:25:54:F2:87:F0:C5:DB:DF:ED:4C:46:7E:C5:D6
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer: /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial: 0199FCC6BDF257AE098BB28C3D328D181D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number: 068C
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: Jr/Q6iqdcx9Dnlf1Ryhtw3SZcxfWHPVZi3+wh7krb/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bd:f2:57:ae:09:8b:b2:8c:3d:32:8d:18:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=cdd6944d8fe42554f287f0c5dbdfed4c467ec5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:b4:92:7a:80:ad:99:8f:53:4d:2b:0c:58:
31:f0:64:a8:86:6a:75:f9:6c:a1:1a:b0:53:e6:41:
f4:e1:1b:97:6f:9d:a4:cf:43:46:43:64:9c:41:77:
18:fc:b9:4f:7f:d0:3c:9f:a1:5c:d3:c7:ee:50:43:
64:bf:15:4f:89:5b:89:8d:7b:ad:67:b1:f3:d2:bc:
bc:11:f4:d2:cd:e4:35:c9:ba:1b:e2:8e:8b:67:5d:
ec:c5:da:ea:8f:04:92:22:9c:7d:24:cc:f9:08:aa:
9c:e1:66:96:6b:c0:67:c5:01:0c:ba:75:3f:82:c1:
08:41:91:fa:9f:ce:95:49:f8:54:ee:f9:24:c2:2a:
9e:72:10:70:03:39:c4:f6:cb:ed:3d:c6:5d:f3:a8:
ed:a0:62:00:d0:33:b7:c5:43:18:f0:9c:47:6d:99:
5b:7f:02:02:e1:a4:42:c3:9f:c3:49:5b:e4:bc:2c:
88:e8:9b:c9:3c:28:64:39:d5:67:87:4b:43:15:dd:
a1:d4:69:4a:cd:9d:9f:73:20:2f:d5:c5:73:e5:97:
ae:a6:8b:ce:c2:43:60:59:f4:9e:b4:06:67:fb:82:
d8:67:fb:52:74:5c:6c:44:73:46:9b:29:2a:a3:87:
95:6f:55:08:c8:67:07:a2:1b:ff:c3:5b:75:99:d4:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:94:4D:8F:E4:25:54:F2:87:F0:C5:DB:DF:ED:4C:46:7E:C5:D6
X509v3 Authority Key Identifier:
keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:41:bb:60:30:96:a6:a4:78:1a:09:5d:42:f2:23:d5:2c:84:
08:7e:4b:56:1f:a7:5d:94:d3:dd:63:30:f7:23:ac:af:ab:7e:
c2:36:1a:e2:2a:e4:d6:f3:9d:4e:80:12:26:62:54:68:15:f8:
25:f4:02:78:f7:f0:ea:eb:bb:64:bd:c5:02:40:c8:e0:d9:0e:
29:b8:88:5b:bc:bb:20:eb:7d:38:4b:d9:c8:6e:01:32:1b:3e:
2e:77:9e:74:a1:08:d4:a5:3e:6d:3d:63:43:7f:78:a3:50:f3:
df:5e:24:a1:e7:48:77:c3:5b:09:12:10:92:b4:43:00:be:4d:
5f:67:a1:60:63:a6:d5:3b:40:b8:b4:08:9e:c6:e7:a9:90:61:
01:50:d5:ba:2b:14:37:ef:76:0d:96:ca:fe:6d:b1:ad:69:15:
5e:b2:d0:1d:bf:1b:27:80:f1:49:9a:31:6e:9c:56:48:6d:bb:
1f:f2:51:09:57:d5:d3:1e:ea:b8:07:5f:f7:b6:53:aa:29:b4:
d8:58:d2:0a:67:af:c3:d4:12:0e:b9:fd:47:af:d2:18:0f:16:
55:a0:47:22:c3:26:56:8f:61:84:f6:49:4f:73:f0:15:47:b5:
3e:56:70:4b:a1:d4:a7:02:ff:93:ff:62:69:09:d1:90:08:55:
76:8e:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:34 2025 by rpki-client