Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier: KaUsOYF6dk1kycJo5i/6ha+nSpt3Mh+mHGgw7qfPq3I=
Subject key identifier: E3:B1:40:B0:9E:D1:B8:EE:72:71:E3:F4:92:F5:37:C3:B6:36:DC:58
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial: 0199FE46B3DFAF3968B4970B25DDD8D8235B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number: 09B1
Signing time: Sun 19 Oct 2025 21:01:10 +0000
Manifest this update: Sun 19 Oct 2025 21:01:10 +0000
Manifest next update: Mon 20 Oct 2025 21:01:10 +0000
Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: LXj7F89ijVVabEr/q5XaMT01tNGHpTtap22OzuJle+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b3:df:af:39:68:b4:97:0b:25:dd:d8:d8:23:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Validity
Not Before: Oct 19 21:01:10 2025 GMT
Not After : Oct 20 21:01:10 2025 GMT
Subject: CN=e3b140b09ed1b8ee7271e3f492f537c3b636dc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:81:7b:65:05:76:38:d0:9e:d6:cb:0d:8e:
d2:0e:dc:bf:72:78:57:8f:6d:9d:b1:39:5e:f4:2c:
ab:1e:fd:71:ea:a5:7f:a1:13:a3:b5:1b:c7:de:c6:
79:7a:73:47:6e:3d:9a:1f:95:21:33:05:7f:02:30:
ec:6b:0f:11:f3:25:3f:f0:57:67:cd:22:90:27:e4:
cb:9e:ec:5e:33:b5:48:85:1c:fd:0b:2a:cc:70:85:
be:33:07:0a:96:15:25:be:f4:d5:29:70:cb:39:c9:
34:26:23:fa:da:02:9f:9a:3e:d0:04:c7:ce:ce:f9:
2f:6b:90:f6:ab:f5:53:55:69:d8:ed:5e:93:ff:fc:
d9:3c:73:e2:43:c8:db:94:5a:37:3a:24:eb:b3:62:
12:e5:6a:22:15:14:d6:73:ac:11:9e:86:87:0e:53:
53:35:b5:65:3c:a3:77:18:4c:67:90:77:1b:02:df:
33:46:9b:34:13:60:24:2a:b0:61:11:ec:71:14:29:
be:cb:8f:57:b8:b5:15:af:9e:cf:fa:24:a8:86:e3:
9c:61:fa:16:e3:88:d1:80:1d:a8:64:1e:c8:0d:b1:
a4:59:1e:f2:e4:df:dd:79:0a:01:b4:94:ab:38:b2:
3d:cb:14:d4:66:54:87:86:e1:1c:46:5d:50:98:fc:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:40:B0:9E:D1:B8:EE:72:71:E3:F4:92:F5:37:C3:B6:36:DC:58
X509v3 Authority Key Identifier:
keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0e:68:2b:fd:69:7c:8f:7b:3b:99:4a:52:a0:a6:31:c4:df:
bb:27:a4:1d:a1:49:be:ff:1c:e9:9e:cf:b0:59:a2:98:79:ed:
61:00:fe:05:7a:b3:79:be:5f:26:d3:58:23:cb:6c:99:d1:54:
73:55:d1:02:27:08:14:c7:fc:a4:95:d7:af:ed:63:41:a4:1f:
50:1e:29:dc:87:bb:dc:71:ee:20:ea:64:ec:f4:97:ae:d2:9e:
be:39:23:df:1d:b8:2b:21:87:47:a2:98:1c:12:25:3f:90:db:
45:87:29:68:60:d0:55:cf:08:79:6d:b8:94:2b:5c:d4:84:13:
fa:b6:44:67:d9:33:5c:ae:46:1a:f4:ee:02:39:a9:11:15:d9:
98:e3:6f:95:ba:fd:53:20:f8:2e:40:35:c9:26:f5:9c:e3:4a:
8c:59:49:c8:aa:d4:15:49:a8:c7:0e:17:84:12:cb:62:40:4f:
8f:58:60:37:4d:3f:bd:97:f6:b1:96:e9:85:9c:65:22:c9:09:
b9:21:44:6d:ae:76:91:2c:0f:ca:b2:b8:16:ab:fd:4c:21:37:
a0:f2:77:47:3a:2a:f8:8b:5e:16:61:af:53:e0:56:b0:50:69:
27:7c:85:90:7f:0c:29:d5:8b:1e:38:ff:a9:b5:98:2f:77:4e:
40:e3:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:44 2025 by rpki-client