Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: Somq4KOBrmbvUbZgvJlq/XWSdvzQpY57D1BzcG+bePU=
Subject key identifier: B6:37:2E:2A:D2:BA:78:22:5B:19:8F:B1:E1:CF:AE:34:72:25:CD:09
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 0199FAD80201EDCDCDB7E8677C86E1267DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: wfYCV2x8rBb8V+SGdT/1WyN5W3ESXCobKnC/wBpVHQk=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:02:01:ed:cd:cd:b7:e8:67:7c:86:e1:26:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=b6372e2ad2ba78225b198fb1e1cfae347225cd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:63:4d:95:8f:73:bd:e3:c4:7e:cd:17:33:
d1:bd:1b:38:c6:d0:c4:3f:e3:cf:6d:fe:70:47:ed:
a9:46:8a:87:fc:55:37:df:35:d0:67:01:2b:9a:1f:
f8:70:6a:ff:94:16:c9:91:77:66:ac:04:d2:13:5c:
9d:d0:fb:c4:44:7b:f3:f2:33:cf:0f:b3:4f:07:f5:
d8:35:2a:df:e3:ff:1c:20:e0:b6:2a:6d:c6:87:ef:
60:19:3e:89:20:8a:81:9e:b1:52:ca:92:e6:79:ab:
33:17:44:2c:97:42:00:71:4f:ec:9e:9f:17:a8:83:
f6:d2:2d:7a:27:4c:fc:b7:96:91:c6:e2:0c:d5:4d:
84:b3:c0:5c:83:2b:96:8d:21:2a:b9:f5:41:93:e0:
32:66:02:66:30:ab:30:87:9e:e0:46:db:0a:ac:75:
a2:a3:3b:e5:dd:37:03:17:80:3c:84:c5:15:1a:12:
2d:19:73:a3:77:fd:61:ea:bf:32:99:a9:02:a5:40:
62:70:af:d7:97:da:c1:2d:f0:19:67:2c:03:7d:a2:
30:fa:99:0e:de:41:44:be:49:58:4a:bb:22:06:90:
7a:96:14:d1:a5:af:3a:6f:e4:05:33:fd:c3:87:11:
ad:21:16:ce:3c:8b:2e:22:21:65:c1:4e:bf:76:a3:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:2E:2A:D2:BA:78:22:5B:19:8F:B1:E1:CF:AE:34:72:25:CD:09
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7b:3b:b3:03:7b:2f:0d:3d:bc:50:a6:6f:96:d9:83:6e:b8:
37:6d:af:d9:85:e8:4f:94:44:ac:db:8b:55:bc:20:24:e8:77:
b6:10:e1:3c:d2:ed:c6:bf:c8:d7:8a:30:6b:45:26:7b:61:a6:
36:f7:4f:e0:a7:83:e4:e0:41:b5:41:72:4f:4a:dc:c4:4f:86:
d9:d1:db:e3:0c:db:a0:49:0a:d8:81:45:d4:e6:80:0e:be:97:
23:65:a1:36:37:e5:29:d8:94:56:74:5a:82:1e:20:ca:67:27:
45:63:62:67:ca:13:f8:e2:22:54:11:73:3f:1a:79:23:d0:12:
74:31:e5:a1:30:25:a2:f5:ff:af:37:36:be:fc:9a:94:97:7a:
41:2f:da:7d:e2:9d:33:fe:d5:9d:6a:d5:59:ab:bb:27:1a:fa:
fe:f6:27:da:ee:d1:d2:2f:94:25:a2:c4:45:b2:7c:09:21:0d:
29:06:ef:f2:fc:91:3c:24:de:39:fd:82:2c:85:cb:4f:2a:c0:
c4:db:43:8e:e2:ed:3a:2a:3a:44:63:06:85:98:6d:98:21:75:
dd:7e:e1:c6:1e:9f:a2:59:7f:af:5f:44:6c:3f:78:f9:be:3b:
4d:06:86:47:6a:b4:3b:ac:da:90:05:64:96:8d:35:cf:d9:3f:
d4:e6:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:36 2025 by rpki-client