Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: c01LxK41YjSlJ5/8WGcDbNWGqOIvC9GnZ+P4echZXCI=
Subject key identifier: C7:CE:88:C4:FA:F9:A1:E9:E8:3C:F6:5E:B3:54:C5:56:BA:26:5A:D3
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 0198D4731CB7B6D535E78D03CA989BCCF671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 12FB
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: Le0v8sAZlhoVWGnEnLDoD7D2O2TQ8bQ4Pbb0/VSHY5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1c:b7:b6:d5:35:e7:8d:03:ca:98:9b:cc:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=c7ce88c4faf9a1e9e83cf65eb354c556ba265ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:ca:eb:d2:0e:19:b5:4d:d4:d6:84:fd:18:
6a:13:68:02:1e:0d:03:1a:49:12:3d:ca:08:19:d1:
a8:3e:2a:3d:13:f7:00:af:d6:ae:0f:c0:9e:9a:aa:
54:6f:36:33:a8:c8:ac:0f:df:41:c2:3d:99:75:97:
c8:58:d6:a3:a8:2b:3f:58:60:f8:42:39:40:db:93:
e6:bb:57:f0:6b:7d:16:e5:d4:ea:28:9b:b2:5e:b0:
a0:b1:42:ed:36:44:c3:67:b9:b6:56:3f:c1:8e:76:
c0:e7:eb:83:23:13:39:7d:b7:d8:5d:17:18:ef:e7:
ec:27:e9:a0:e5:94:3b:55:2e:d8:b6:a1:93:a7:b1:
7e:ee:0f:f3:fe:77:1e:b7:cc:08:8a:54:dd:32:fb:
f6:7e:8a:60:8a:28:ea:4c:f5:71:4d:0b:4b:1b:0b:
e0:16:19:84:19:48:4b:87:21:19:26:7e:fd:af:1a:
61:7d:21:6d:56:23:e9:76:1e:e9:2a:af:f3:19:02:
ee:09:fe:39:30:36:be:03:0a:a5:65:43:99:95:3c:
a8:71:66:44:0b:3a:a6:55:ce:92:22:fc:35:d8:4d:
c8:60:ff:13:a3:19:49:bb:9a:53:9c:24:eb:14:f2:
04:bf:9e:97:ba:3e:01:72:9c:3b:9f:db:93:67:9d:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CE:88:C4:FA:F9:A1:E9:E8:3C:F6:5E:B3:54:C5:56:BA:26:5A:D3
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7d:2f:6c:07:1a:82:de:52:ef:08:50:28:79:df:47:a8:df:
be:eb:4c:5e:b6:6a:fc:35:8a:03:27:60:77:71:bf:84:f6:a3:
5d:26:92:0b:d5:a2:b0:b9:08:ea:ae:f6:b0:0d:cc:b9:ee:14:
f4:b4:ae:b9:0a:d6:14:31:b6:db:a6:d4:0f:00:16:37:08:12:
42:9f:ea:af:3c:44:9b:f2:26:98:29:82:39:c8:10:e8:63:9c:
b0:ef:a9:e4:a3:02:7e:11:9a:eb:17:7b:ff:27:0e:c2:60:0f:
44:32:87:f1:c4:4b:c2:29:e9:ca:52:b2:94:25:65:2b:be:5b:
fd:da:ec:c0:21:fb:f7:20:40:74:ec:09:d1:57:ca:41:a8:93:
66:1b:bc:ed:57:13:89:5f:30:e0:48:c4:83:77:14:41:c4:4e:
7c:80:e1:1c:50:ca:59:00:ed:35:3a:b2:e7:cb:06:7d:b3:2b:
86:b8:35:6d:c8:d1:a4:dc:2a:d2:75:9a:de:a8:b8:f4:52:c6:
2d:f2:20:18:7a:78:cf:e2:bb:4b:7c:94:b3:7d:f5:4a:99:d2:
b5:c0:16:ac:b8:29:b2:ad:38:f1:28:90:c1:c4:d7:3e:70:ea:
e3:1f:19:59:d1:83:4b:e4:a7:99:c3:29:b0:48:0d:64:b0:75:
5c:fd:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:55 2025 by rpki-client