Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier: MjoZOfgelSs6hmasCfvsoxRLT7PwReS9uLg1sbbl1K0=
Subject key identifier: F3:7F:AA:1B:58:FB:32:07:9A:D4:E4:40:44:A3:85:63:DE:8A:2B:74
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial: 0199FBEBF051E4EE97D17C5877D62C680414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number: 0DB3
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: ub+Ead97AvLV7DKODgMokXU4vJJsoJ+AUkTB2nu6TbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f0:51:e4:ee:97:d1:7c:58:77:d6:2c:68:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=f37faa1b58fb32079ad4e44044a38563de8a2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:43:c4:05:0b:d5:d5:f3:8c:a2:3a:b2:8d:
8b:83:89:1b:a4:17:6a:dc:1c:f5:4d:14:14:a4:35:
95:57:f5:84:ea:4a:e7:4b:77:29:3a:9a:61:2f:45:
62:31:0f:06:d2:d9:63:af:32:84:3a:eb:54:01:1f:
00:53:12:48:ca:b7:91:dd:db:17:cf:41:fc:59:07:
66:9d:e9:7d:1e:ff:cb:32:02:05:00:a4:cd:66:5c:
fc:f6:3f:62:31:23:2e:76:81:d4:0d:50:99:ed:a3:
64:a3:23:75:04:16:14:14:e0:9f:c9:aa:0e:da:12:
17:76:03:f6:99:21:1e:3a:76:0e:af:a5:d2:24:fb:
52:8d:73:ad:f3:f9:13:d9:c5:a9:5c:d6:6f:e7:d0:
71:64:62:00:19:fe:06:af:e9:9e:a6:a4:db:09:ac:
9c:c3:c8:e6:a3:f4:d2:7a:0d:e6:2d:df:b7:e6:22:
ed:19:9a:03:ef:1f:fe:21:cf:3b:61:85:09:fe:b4:
9f:8c:b6:42:c6:cb:23:5a:30:cf:fe:12:aa:9d:44:
50:6a:cf:ff:c1:89:d0:48:8a:49:12:d0:7e:1d:a2:
b3:76:c0:1e:00:2d:2d:d7:6c:b4:85:25:13:12:10:
67:7c:79:e2:1f:e4:b4:44:74:65:b6:87:e8:62:9a:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:AA:1B:58:FB:32:07:9A:D4:E4:40:44:A3:85:63:DE:8A:2B:74
X509v3 Authority Key Identifier:
keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bf:2e:9b:4d:fe:e5:bc:3f:12:18:c6:b8:bf:6c:ac:a8:64:
1b:31:a9:b3:cf:4d:ad:c8:97:90:5d:7d:76:40:e0:d3:bc:80:
10:25:4b:ef:52:2a:6e:8b:29:e9:b5:ea:1a:36:7b:88:7b:17:
e2:97:d3:de:0d:02:a9:eb:a2:cf:e1:ba:8d:75:e8:0a:e4:87:
98:a2:6a:a7:ce:56:e4:3e:00:65:f5:65:36:60:73:49:3e:ec:
38:08:4e:cb:10:18:03:00:92:f8:b8:8f:94:da:c6:84:ae:86:
4a:a5:4a:81:ab:76:87:7a:0d:03:f7:ab:c4:88:e2:00:0c:c6:
f4:0f:1a:ad:f6:e3:af:ba:1e:5a:6d:be:97:9d:31:ed:38:40:
78:10:44:73:d1:ee:f8:64:d8:f1:b1:3c:fe:68:f8:f9:ec:40:
9b:78:05:29:64:80:d7:fb:fb:d5:37:f5:ee:1d:ff:0c:73:b5:
52:5e:49:79:23:3c:3c:a2:fa:c9:59:f5:e3:96:ca:8d:42:c7:
f5:73:29:c4:c0:50:80:b0:d1:54:63:1d:f3:af:d6:ea:44:b3:
ea:e0:11:6b:7c:8f:0f:5d:b1:85:30:c2:94:32:98:65:41:80:
69:41:2a:86:8b:31:4d:d8:c3:db:32:86:fc:b7:6b:0b:9b:1d:
29:86:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:19 2025 by rpki-client