Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier: My968AMwyN44twlfoTtZVzKzwepi20qLcH8RvcQlH2c=
Subject key identifier: 7B:83:97:9F:F7:E2:47:C6:B1:76:D9:4B:61:B0:BB:F3:03:40:44:9C
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial: 0199FBEA7C40FE9EC7C53121BE56AAD99AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number: 0F3E
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: 3JWRnbZ10Mb8taSvmwkPwx9Zo4dQ1B49n/NMW0LAjl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7c:40:fe:9e:c7:c5:31:21:be:56:aa:d9:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=7b83979ff7e247c6b176d94b61b0bbf30340449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:f0:d0:bc:62:8c:c0:3b:d8:86:f8:57:e6:
a0:a6:8b:fc:12:93:dc:99:82:b5:b1:68:b7:dc:1f:
5c:14:67:e9:a1:b8:15:a9:fb:99:80:96:42:a0:be:
3c:e1:2f:c6:14:b9:a3:02:5f:f7:ad:cc:a0:89:52:
9d:58:79:da:33:bd:af:22:94:8a:4a:c0:ef:2d:d8:
f1:8c:45:1e:71:76:13:b2:69:55:8e:28:4f:c4:5d:
bd:9a:06:e1:2a:04:4a:c1:9a:88:28:95:9c:d4:0a:
b2:1a:3d:c2:49:24:a3:f4:41:84:cd:d4:75:37:96:
c8:80:40:d8:fa:5d:e4:72:f9:f9:97:b4:69:82:5f:
ba:2b:09:fd:b7:08:ba:17:eb:bd:dd:2d:d3:1e:f0:
cd:1a:68:35:f4:cc:1e:a0:65:72:d8:51:1c:35:58:
db:f1:91:3b:6f:05:22:ca:2f:03:f0:92:58:0f:25:
e5:07:c4:75:72:3e:58:8f:00:a0:a3:42:bc:3f:d6:
5f:e7:bc:e8:ec:eb:69:cc:75:29:39:b7:8c:1f:94:
43:d2:f2:21:a2:72:b3:bb:db:2e:35:6c:96:f3:ba:
91:e0:17:b5:14:6b:b4:71:70:29:43:7d:c5:16:56:
27:3b:97:b5:97:e6:5b:e2:b7:4b:76:f8:92:07:f0:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:97:9F:F7:E2:47:C6:B1:76:D9:4B:61:B0:BB:F3:03:40:44:9C
X509v3 Authority Key Identifier:
keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:44:31:13:ca:37:5e:4c:cf:25:4b:b5:90:96:fe:d0:1b:2c:
44:ff:31:f8:cd:b7:f7:65:31:76:69:bf:61:29:af:aa:aa:06:
53:0b:18:3b:87:73:a0:b6:89:36:72:8f:82:cc:51:d6:ab:c4:
07:c3:dd:71:c1:49:43:6f:3f:3f:09:1b:12:b6:d1:0d:1b:fc:
60:67:3b:07:f1:89:42:41:75:23:16:c3:d9:b1:27:8f:9c:13:
1c:cd:4b:52:66:b7:3a:85:e8:1e:c2:97:45:74:b2:84:72:74:
f9:fd:a6:7e:2c:09:fa:ef:55:e4:a9:b3:14:ee:70:38:22:04:
3f:71:95:f5:c6:48:15:63:02:69:89:2d:a7:b1:df:81:29:ca:
b3:19:ec:f7:a5:6a:fb:be:c6:7c:bb:20:76:e7:1c:76:dc:50:
36:99:73:0d:e5:93:23:54:32:21:75:cf:ae:aa:54:fa:3c:a9:
1a:0d:04:c4:39:0d:23:a4:d3:33:09:38:b8:9b:e8:2b:a6:5f:
e8:78:ff:78:f6:da:74:9d:d3:18:56:f6:d6:62:02:36:e6:50:
a0:e2:f1:c3:be:f0:74:44:70:d4:d4:52:b6:28:d4:e9:9e:3e:
90:17:09:36:bb:7c:25:d4:06:da:80:c3:2d:5f:a1:95:b9:b4:
cf:58:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:49 2025 by rpki-client