Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: HtjPjZM3AqTiOeswjEs+8juqtuWWnl+vLU8QGNi9w0I=
Subject key identifier: F4:1F:2A:E1:D2:63:D1:61:26:D1:EF:D3:82:13:83:CD:66:86:92:C3
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 0199FC582B7D52B7FBB379BAB4102105181F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0B64
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: vubACQv8UCaAE9hzuBw4venJoAsDyf5pMleUQSw1V+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2b:7d:52:b7:fb:b3:79:ba:b4:10:21:05:18:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=f41f2ae1d263d16126d1efd3821383cd668692c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:b3:a2:84:bc:c5:34:df:06:38:af:10:c4:
a4:02:cf:b8:bc:2e:38:b7:f8:06:82:e2:eb:f3:89:
eb:ac:b7:db:90:45:6f:ae:51:88:a6:c0:37:c4:dd:
dd:18:07:3d:a9:90:7f:99:73:76:d7:c3:62:a6:79:
68:1b:b4:1e:04:3c:db:22:b1:b1:67:5f:cc:02:19:
de:a6:28:a5:d1:5d:37:39:34:0d:68:19:6f:c2:0d:
2b:0d:9d:9c:49:39:1a:b8:db:bb:48:2b:a4:0f:b5:
18:0f:17:56:54:15:e7:66:aa:25:88:9d:b1:62:6c:
e0:e1:bf:b5:c0:f5:72:2f:79:6e:f8:f3:5e:57:98:
3c:84:55:96:c4:48:0c:da:97:1b:f3:22:6a:ff:ea:
d9:53:9b:ab:39:86:73:5a:65:14:6b:fb:e4:58:73:
8e:f8:99:0e:75:0c:b1:4e:a0:0a:cf:56:53:60:c6:
64:3c:98:c6:11:c3:5c:f6:26:c5:47:58:28:12:ac:
9d:a3:3e:70:58:e1:b1:b1:f0:2d:88:76:98:b0:ef:
7d:fb:10:9a:8c:75:5a:7a:29:c5:40:26:4d:bb:cd:
e7:b9:8d:02:6c:1f:51:cd:81:b9:64:02:f3:74:10:
f3:79:c7:7a:5f:4d:2b:13:6a:6e:ed:2c:31:8e:ec:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:2A:E1:D2:63:D1:61:26:D1:EF:D3:82:13:83:CD:66:86:92:C3
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6b:5f:81:e4:fa:49:c3:e0:95:3d:97:92:92:4d:8b:3d:c9:
97:cc:36:ca:c9:bd:d8:a6:cf:80:e1:f2:de:ee:18:70:51:ce:
bf:28:b8:5c:39:e1:a0:92:a9:57:44:c7:5c:7a:5c:e5:fe:53:
c4:a5:e7:78:8d:3b:e8:15:12:17:c5:df:c6:ba:86:5e:09:dc:
e0:ca:6a:e9:44:99:3e:a3:44:11:19:c6:4c:f4:ca:af:8a:52:
bc:38:e4:28:64:89:1a:43:a3:54:04:aa:d1:c6:b7:c8:05:ed:
f3:ef:e2:c5:ec:da:b3:93:1b:8e:de:28:ba:cd:81:bd:02:66:
af:9a:9d:02:51:88:33:86:9f:6d:24:e5:19:74:70:c5:c0:4b:
b5:5b:34:2b:8d:69:53:4d:0a:c0:db:10:aa:66:18:0c:e1:5e:
7c:dc:3d:99:e8:8f:6f:c1:1b:41:fa:a0:a2:f5:b8:0a:72:cd:
c7:1d:dc:0c:43:0e:b6:c0:be:b7:be:7d:c4:99:5b:b9:37:f4:
54:32:d8:b1:95:56:4e:af:af:9d:8f:9d:f7:5c:fb:c7:09:ff:
54:1c:48:af:7e:10:eb:92:8f:92:88:9d:19:5a:2d:48:c4:59:
1e:b6:d2:60:c2:00:78:1e:84:a1:c4:0d:2e:7a:2c:9f:51:15:
4b:84:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:57 2025 by rpki-client