Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: j7pAQaNAD0SBZGBuXO2JtUyA5hHv6fPH0/p+MSZLrf0=
Subject key identifier: D7:F9:42:25:FD:18:44:2D:67:C8:67:5F:4D:79:60:65:39:40:92:DB
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 0199FBEAC9AD96E07257974D692C96B5953B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: hNGgE3adTmoP4JrK0yU4u9Dm0VO07GtTS7n43HvJi0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c9:ad:96:e0:72:57:97:4d:69:2c:96:b5:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=d7f94225fd18442d67c8675f4d796065394092db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:a2:33:8f:b4:7e:c3:55:bd:f7:b2:42:83:
b3:ce:05:b2:2f:38:3b:54:e1:f3:90:44:ec:56:1f:
48:bb:79:57:1b:3e:e4:4e:10:b0:01:75:d2:f2:ee:
8b:ab:c6:69:54:76:cc:9c:9d:52:27:78:bc:ae:0d:
20:8a:f6:da:be:c9:dd:0f:a6:67:10:f2:de:48:53:
62:7d:98:32:6f:8b:24:79:b0:ea:a9:88:87:9f:f6:
88:e0:68:e5:9f:ec:57:ac:c1:a0:d0:f3:ea:a6:d7:
cc:ea:ac:ee:0d:2c:31:7e:38:61:a6:31:6d:10:2c:
55:32:39:68:04:79:66:08:8a:83:3c:68:00:40:e0:
aa:22:18:43:95:29:02:9a:27:2a:64:3d:96:cd:54:
cd:da:14:bf:b5:3d:21:a8:71:21:f8:48:94:97:e8:
6d:4a:16:66:14:d6:44:6c:b9:34:22:b4:8c:c8:07:
0e:e5:69:2a:69:1c:e6:fa:fb:e6:81:47:47:68:72:
12:29:25:d7:3b:8c:9d:03:32:15:e7:fa:8e:01:de:
3c:9c:84:08:26:e2:a7:c0:a3:c4:6f:1c:5a:a7:11:
6e:1d:4f:d2:0a:97:8c:cf:16:88:01:87:86:b5:c6:
e1:c2:43:83:08:f6:76:58:1f:44:96:b6:f4:89:47:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:42:25:FD:18:44:2D:67:C8:67:5F:4D:79:60:65:39:40:92:DB
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:1a:4f:94:33:b3:bd:9f:b6:73:5f:1f:b5:99:86:1e:96:
34:57:39:d6:81:41:ad:4a:85:19:e2:84:04:4d:51:4c:53:87:
15:6a:d4:2c:18:48:10:ad:22:99:de:e2:19:33:ff:20:dc:28:
05:e2:57:1a:06:8f:07:c3:b8:f7:d6:e4:fe:90:90:43:7f:26:
5b:73:1f:d6:cb:9a:9f:15:54:c4:28:12:0e:39:2f:19:67:df:
f7:bb:6c:ff:4c:eb:c5:92:de:45:e7:b1:10:95:a1:c2:d5:f0:
f7:63:ef:16:60:1e:42:3c:47:c2:b8:e0:1a:02:4b:a3:0f:00:
cb:60:f1:ae:e4:c2:4f:44:92:b9:5f:1c:83:f2:9b:e7:31:f1:
9f:91:18:37:9a:30:8f:b2:1a:a3:77:42:25:7b:7f:33:c0:55:
e0:d1:24:5e:28:ba:11:9b:c2:ff:c3:34:65:e4:a0:1c:fe:d5:
f6:0a:2e:99:82:ae:f0:64:01:2b:e0:38:29:f5:61:b2:34:e2:
46:71:f0:cb:f5:79:49:5b:f9:94:e0:4c:9d:c2:d3:27:4e:91:
9d:8f:5b:2d:81:f2:ea:6a:8e:47:41:c9:e5:d0:32:a6:30:cc:
8a:ad:d3:bf:8f:90:69:9a:6c:fe:31:bf:d8:51:05:8f:e5:c1:
78:e0:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:25:59 2025 by rpki-client