Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier: PW2/HeN7hSCYiFRpEx2WxyDCIVxPTznnT99kJwQWU24=
Subject key identifier: E8:4D:71:26:2D:77:FF:68:FF:F9:C1:AA:DA:6A:1E:4B:69:6B:71:7B
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial: 0199FD34112B1EF38B5BBC67DC0C494B1D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number: 134F
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: Jeprp3/+a+Nps7/9+08CYO1TC6q1JlAOJXBn1nmH6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:11:2b:1e:f3:8b:5b:bc:67:dc:0c:49:4b:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=e84d71262d77ff68fff9c1aada6a1e4b696b717b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:aa:24:f8:68:09:da:82:a6:f0:17:b9:13:
63:de:3e:65:0c:99:91:d5:d6:18:92:60:17:ab:8d:
ca:6f:12:11:84:1d:d0:24:0b:87:f2:c2:46:53:cf:
2b:9d:84:1e:e5:e0:2d:e4:d1:a6:47:38:16:b7:6f:
91:2a:8b:98:cd:c7:97:b0:78:28:75:a1:e4:89:cd:
12:db:4d:28:97:ab:1c:77:ab:6a:d4:a8:f0:6b:e9:
34:b3:f0:38:b9:ea:1d:e4:ba:0d:63:dc:c5:42:d1:
20:54:a9:61:99:97:42:aa:a6:bb:43:ef:12:45:52:
47:34:ae:e2:9d:e9:d3:c2:02:83:25:ee:3d:a9:36:
c2:ce:a9:ee:74:5d:49:22:25:49:02:38:c3:12:fa:
ba:2a:c2:ca:fa:be:24:78:87:ad:6a:83:e1:e5:af:
ac:fc:d8:4d:a5:f9:79:36:03:8b:fc:2a:f9:b8:d3:
5b:f5:2f:0a:5d:dc:8c:4f:ee:b9:94:0c:ec:9e:4b:
ec:cc:cc:61:c0:38:10:f4:9d:18:d8:b7:d2:2a:ff:
07:1e:58:09:69:0d:13:84:bf:0d:5e:02:db:8a:96:
43:1b:83:a5:d0:07:46:e9:c3:ba:2f:d8:c0:56:24:
62:0f:f2:ab:3f:e1:ed:c2:bf:53:07:47:c3:ae:a9:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:71:26:2D:77:FF:68:FF:F9:C1:AA:DA:6A:1E:4B:69:6B:71:7B
X509v3 Authority Key Identifier:
keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:f5:da:29:91:4d:21:b0:79:70:1a:94:bd:d8:64:2b:be:
f9:a5:0d:3f:d7:26:61:c9:3c:5f:40:a6:47:5a:ba:c0:5b:86:
0e:b3:fe:aa:ac:63:a2:d2:00:c4:3c:23:d1:d8:de:ce:f4:0a:
31:c6:a7:65:3c:4e:4c:3d:0d:e3:a4:07:d0:3d:2e:40:41:79:
84:a8:2b:d2:82:b0:d0:c0:0a:37:e1:ed:23:ba:de:8d:b6:69:
99:e8:a0:0a:6d:23:0d:b4:90:96:1c:2d:b7:5e:08:4f:b3:7c:
c8:22:8a:40:de:90:40:40:44:67:da:f7:c9:d2:f0:b7:af:e9:
d0:86:20:74:21:c3:ef:fb:69:d3:0f:a0:a6:57:cc:82:ad:44:
40:dd:bc:50:94:ea:4c:c4:c7:9a:83:d9:af:ee:03:e9:6c:90:
a4:1a:1f:8f:55:a7:1f:71:5b:62:05:75:50:9f:dd:06:fd:8b:
8e:ef:6e:13:d5:e0:60:1c:d4:0f:e7:39:b7:1e:ce:4c:6d:06:
b5:5d:14:cd:09:9a:0a:21:46:61:d7:0b:20:ad:91:9d:ed:b6:
a0:b3:15:61:78:c2:4e:8a:83:b9:26:30:26:c5:20:b7:a7:ad:
1b:cf:86:d4:79:f0:96:e5:2d:f5:03:36:7d:db:74:59:43:0e:
3d:96:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:39 2025 by rpki-client