Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: BwY4hBX3IdoDR9s9jao58wyET2XKOFxvuZsZhnm1bfc=
Subject key identifier: 07:66:81:20:9E:0F:68:C6:15:28:08:8F:2F:C6:39:C0:E8:C1:E9:DA
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 0199FC8F795EEA45E2FFCBAF0AB91174E0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0A53
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: byBEY9yVj5J0PBuBFpzZGCT3cPj2vTncxHnAmNsb87M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:79:5e:ea:45:e2:ff:cb:af:0a:b9:11:74:e0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=076681209e0f68c61528088f2fc639c0e8c1e9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:97:91:3e:da:1f:74:af:bf:bd:84:56:b6:
62:1c:15:88:f2:1f:41:0f:53:66:a3:89:a9:ac:9a:
54:ed:73:98:37:dd:b5:9e:b5:91:c1:b3:54:56:e0:
39:bb:cc:9c:8a:52:de:e1:87:3a:63:6b:b1:cd:59:
8c:be:3c:8b:00:04:d6:90:15:ef:2f:fe:45:85:01:
7a:fc:29:af:d0:08:59:ca:14:4e:53:92:8e:48:a8:
bb:a5:bb:57:3b:e8:b7:3b:7e:be:5b:c3:ea:22:f8:
df:29:b2:b6:2f:14:3d:79:1d:47:2f:db:c5:84:35:
5d:9b:ec:4e:5d:2f:e8:74:d0:ea:5a:ae:69:f7:92:
b5:f7:fd:95:35:a4:ed:c0:c1:68:ec:4e:0a:b5:53:
2a:f7:6c:78:3f:09:40:f5:89:bd:35:1b:9e:e3:fe:
4d:3b:32:ee:f2:da:1f:69:45:f1:8b:7f:1b:2e:23:
25:92:05:d5:1c:0c:84:3f:81:00:b8:e1:d4:47:5f:
a1:d5:e7:4a:3d:2b:f8:b3:35:c2:58:89:09:b2:03:
59:7c:63:81:5b:b9:37:13:15:f3:4c:6b:56:ea:5a:
cd:73:f6:32:56:0d:3c:46:a7:21:42:c4:9f:23:de:
6a:22:80:17:58:d3:5b:80:b3:7e:b1:ea:b7:47:ac:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:66:81:20:9E:0F:68:C6:15:28:08:8F:2F:C6:39:C0:E8:C1:E9:DA
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:38:9c:e8:04:a2:f9:cb:59:c0:06:1f:b1:1f:42:f2:d2:
de:bc:f6:cb:bc:49:c1:86:61:4e:92:b1:7c:9c:8b:4a:c5:41:
22:64:af:13:ce:c8:0d:41:48:e9:93:ce:93:74:ed:36:76:7d:
08:ae:cd:47:e8:9a:3b:79:bc:28:27:a6:42:66:4e:c8:ef:45:
48:11:d7:61:12:c4:fa:37:e7:65:30:fc:92:cc:0e:f1:b7:6f:
b2:5f:34:a0:33:89:8b:91:1e:40:6e:4e:7e:ac:02:dd:75:b9:
bb:6a:a8:03:d3:1b:5f:d0:30:9c:b0:fa:95:18:b3:47:cc:5f:
11:9b:6d:f3:fa:8d:20:d5:ef:3c:93:6e:0e:95:e1:81:d6:29:
ec:e0:32:30:ca:29:ea:16:de:31:7a:b4:49:dd:e5:5e:29:3a:
db:96:e2:3a:b4:48:96:10:98:03:5e:4f:b2:c3:90:e3:4d:c1:
80:30:7f:9a:85:82:70:23:49:ce:2b:63:91:a1:f7:63:f3:2b:
96:ab:64:f6:1a:d6:cd:95:26:9a:c7:7b:bf:df:01:0b:de:8b:
5f:c1:bd:3f:57:68:ae:8b:6d:8f:98:a4:87:e1:06:ba:28:30:
65:eb:6e:69:63:34:81:fe:5e:df:43:4b:e1:9f:a1:f0:c6:38:
25:49:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:20 2025 by rpki-client