Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: t48WZiK2YuHPE9aFiD1QOPJSXJ6waI5Cjk/yiec21P8=
Subject key identifier: A3:26:D4:DB:20:C8:81:F5:0C:D5:2D:ED:BA:A7:F8:6C:11:43:E9:FB
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 0199FBEC104DED97D1E7872382DDBA13D6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: 1haS063XStNV7y5+cvliHYDS6q6Gws7RPbBH/AA7Hg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:10:4d:ed:97:d1:e7:87:23:82:dd:ba:13:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=a326d4db20c881f50cd52dedbaa7f86c1143e9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:35:da:36:4a:17:e3:39:f3:50:cd:d9:6d:
34:92:ec:d7:eb:d2:42:04:a5:ce:6a:93:5d:e2:95:
8d:12:9c:72:9e:84:55:a1:b9:c5:93:24:c1:d8:72:
50:16:b6:07:1e:63:8d:7d:ab:a5:f4:13:ba:6e:f3:
0b:98:4f:9c:d2:89:13:50:87:2e:f5:ee:8e:23:57:
8e:17:a0:cc:56:a9:b1:32:ca:a1:d8:9a:07:86:51:
87:de:75:a1:76:3b:d6:05:eb:09:ef:6f:32:d7:6c:
f0:fe:e7:09:b6:f7:d2:d1:58:20:33:93:d2:58:75:
8f:99:95:a0:6f:67:37:b0:13:22:33:4c:e0:09:1b:
76:1f:73:25:38:7f:78:11:fb:95:c0:9c:68:d1:40:
a9:77:00:d6:a4:be:60:d9:56:42:2a:c8:e6:d7:b6:
5d:a4:d6:49:12:9d:9c:d2:73:ba:28:18:ae:eb:f5:
96:77:ef:97:83:8b:d0:cc:b9:6a:48:95:6f:07:cd:
51:41:df:bd:c4:0d:00:57:68:39:4c:73:06:09:a0:
4a:6b:03:02:de:1d:36:a5:28:47:2d:95:2a:82:54:
99:a5:44:99:4e:07:ca:18:3e:40:9a:41:1a:9e:a3:
60:5d:3b:2a:97:51:76:3b:4c:6f:37:5c:0b:9e:c0:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:26:D4:DB:20:C8:81:F5:0C:D5:2D:ED:BA:A7:F8:6C:11:43:E9:FB
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e2:b5:4d:bf:1e:45:73:70:7d:cf:93:54:48:ce:e4:60:87:
b9:a4:87:1b:8d:f9:f5:46:f2:af:76:91:e6:63:64:c1:ab:57:
88:b9:8a:39:62:d2:9a:5a:f2:18:61:66:90:cc:ff:0e:c6:c2:
ec:25:e6:be:d1:d6:db:53:fa:32:ee:42:9a:dd:76:5c:8f:af:
7f:de:81:f1:18:72:5d:37:c4:71:5f:33:cc:64:a6:04:df:9b:
1f:53:51:d0:b5:f0:4a:24:72:a7:20:8c:03:8b:a0:4e:24:54:
bf:5f:86:57:5e:76:0f:31:b4:c5:ff:ca:af:84:48:2e:12:c8:
29:c8:24:bc:a0:59:87:89:13:2e:11:4b:f2:8b:b1:09:f2:9f:
a2:29:4c:fb:b2:dd:b7:b8:f1:55:bc:93:50:44:ef:9b:82:3f:
ae:86:cf:35:f6:8c:7f:66:cc:b6:4e:5a:1b:0c:d6:a2:cf:35:
aa:b9:3d:8c:4d:28:cf:4d:d7:d4:7a:71:3b:47:5c:40:71:55:
66:a9:5e:7c:e9:14:a4:86:52:28:9a:3c:e5:e1:74:39:0a:1d:
e9:0a:c4:79:d3:5e:ca:86:bd:20:f2:c8:1e:a6:db:88:f0:cb:
9d:43:06:37:7f:2a:2e:54:86:72:0d:74:9c:01:c2:e5:38:45:
12:de:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:56 2025 by rpki-client