Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: 2+OpQ0FVzEVuOTFGoP4pY6gndJbojo7y8dpRWYCTXmk=
Subject key identifier: 5E:00:8B:28:6D:6C:0F:5D:BF:86:A2:7B:14:1E:EB:D8:B9:8B:69:36
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 0199FDDA44F639F4134797CAD286F7CFE4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0A67
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: 2fVBGkx4vOCQMFFen0ZyqUaR8mgYpuH9/n29AVIjcWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:44:f6:39:f4:13:47:97:ca:d2:86:f7:cf:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=5e008b286d6c0f5dbf86a27b141eebd8b98b6936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:f0:4d:aa:bb:34:a0:18:64:50:29:56:de:
c4:e4:55:cb:f1:d2:3a:38:dd:cf:e5:39:0a:80:08:
eb:3d:3d:d2:9e:d1:05:b6:c0:92:33:09:17:eb:a8:
8a:11:5f:f7:fb:58:55:68:54:75:0c:5d:86:4e:50:
2f:a9:cc:6c:b6:d8:f8:39:ee:69:c9:76:af:90:96:
2e:da:5a:4c:22:75:ad:7a:65:39:4d:a7:12:df:5e:
fa:15:15:d6:19:1d:d3:d0:b0:4e:40:44:f9:73:a7:
80:f0:64:72:47:df:47:4e:24:cb:6a:14:c1:f3:6d:
ba:a0:1e:8d:f8:dc:ab:4c:83:e8:5f:7f:98:93:17:
14:85:65:3b:5a:1a:35:15:66:79:e6:bd:98:32:7d:
8e:ec:2b:eb:9c:88:95:92:7b:0f:4e:2f:8e:32:91:
8f:f7:28:28:9e:a1:30:05:53:dd:90:72:91:da:42:
cc:77:8f:2d:e5:b5:05:71:b9:62:a4:f6:c9:5d:1e:
a9:ce:82:97:01:02:76:7b:1d:65:89:c3:e4:78:e5:
5b:62:1d:79:96:6e:9d:60:3f:40:ab:0b:ae:59:c3:
83:a2:64:ca:76:81:c1:ad:25:15:44:37:1d:e4:36:
95:00:fb:35:8b:84:be:55:b0:e0:e4:8a:ba:1f:a3:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:8B:28:6D:6C:0F:5D:BF:86:A2:7B:14:1E:EB:D8:B9:8B:69:36
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5c:aa:9d:e9:cd:36:61:32:e9:8e:74:ae:cd:89:c6:1f:de:
9d:c2:a7:19:b9:0b:7e:1a:64:5c:41:03:6d:d9:80:b4:5f:69:
45:06:8c:4d:46:0e:85:08:a9:50:41:5c:38:30:8b:39:c3:0a:
d5:3f:84:9e:82:56:c1:dd:7c:04:dc:50:a2:bc:0a:26:51:fa:
47:8f:64:c7:40:e2:6a:f6:ba:88:d4:14:e5:cf:ef:e3:48:45:
ac:79:04:a1:31:87:bd:92:ec:ee:4f:54:79:14:8a:01:73:5d:
08:ee:05:28:50:52:94:dd:07:87:a9:e2:2b:f4:f5:27:9d:e3:
36:bf:49:33:7f:87:e6:cf:4d:84:f2:e3:54:a4:ca:0d:68:25:
d6:e0:09:69:44:b7:87:d9:1c:3d:d9:2e:0a:de:29:4d:bb:d2:
92:3b:07:e1:5f:ab:20:73:7d:3a:fa:0d:76:32:fa:63:d3:a2:
6a:6f:39:d8:54:6d:c0:3d:65:99:06:46:5e:fa:26:2f:4e:1b:
de:81:ad:86:4f:29:34:01:44:63:e1:b4:55:be:69:86:34:e0:
b8:85:10:d4:24:8d:b3:6f:dd:6a:01:d0:7b:75:40:77:76:0d:
ed:ff:fc:4d:0d:15:4b:f0:85:af:83:7e:0c:79:99:db:cf:10:
3f:f2:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:32 2025 by rpki-client