Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: S9MJjuz0ObJoyNigz5jLzZAuQwlJnMWeVOAcPc/Xzwo=
Subject key identifier: 90:73:64:42:19:58:1C:04:F1:83:2D:AB:D3:45:FA:C0:A2:D7:48:0D
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 0199FFC86A5AB2F9FA135BCA8389BD58BC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:28 +0000
Manifest this update: Mon 20 Oct 2025 04:02:28 +0000
Manifest next update: Tue 21 Oct 2025 04:02:28 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: cefzSezhBrHJq5kw16MABCeA/sOzyCsyMVmll2d38I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:6a:5a:b2:f9:fa:13:5b:ca:83:89:bd:58:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Oct 20 04:02:28 2025 GMT
Not After : Oct 21 04:02:28 2025 GMT
Subject: CN=9073644219581c04f1832dabd345fac0a2d7480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:82:fa:72:1f:a9:f2:fe:7d:1e:05:1e:38:
ef:85:44:b8:b5:98:58:75:91:9d:6f:15:40:6a:93:
2a:f1:56:c9:05:65:4f:f5:10:ff:96:4e:82:cd:c3:
79:fd:f6:7a:d5:00:cb:c1:90:b0:c9:85:3a:5e:c7:
cf:0b:9c:23:3f:d4:01:2b:b8:4f:87:e5:f1:94:79:
eb:6d:8d:05:58:8b:c4:6d:d1:7a:bb:ec:ee:5d:fb:
8c:bd:8d:07:2d:33:16:11:17:84:82:1d:41:70:e1:
b6:e0:37:19:3e:44:78:fd:75:a8:c6:48:ba:c8:2e:
3d:f6:c2:17:3f:c8:c3:9a:5b:69:7e:c8:f7:5f:7f:
63:19:48:79:9c:4d:25:fd:b0:fe:a6:00:f9:54:cf:
89:f4:67:df:51:f4:00:b6:55:7f:5a:c4:87:27:c4:
75:e3:8e:8c:b9:f4:6b:39:25:6b:a0:ba:d6:dc:f5:
2e:cc:c1:a0:a7:5b:9f:42:93:4d:b0:0d:3a:7f:52:
b5:7b:d6:1c:77:dc:cf:67:8e:0e:5e:6c:eb:c3:3d:
03:1a:bb:2b:74:c2:78:95:87:8d:5d:d3:45:e6:f6:
cb:cc:f6:0b:70:8c:85:bf:0a:f9:65:ba:3e:1a:d4:
3e:51:4a:7f:bf:7c:ce:97:66:a4:8a:30:9b:b6:4a:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:64:42:19:58:1C:04:F1:83:2D:AB:D3:45:FA:C0:A2:D7:48:0D
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:5f:d2:09:43:89:08:c1:39:f7:9c:4a:23:73:b5:ef:15:
36:0f:f3:32:6a:9d:15:c0:1a:c4:51:f7:ef:b2:35:43:3e:aa:
4a:c9:76:d8:f6:16:f4:e2:8c:95:ed:71:f6:4e:a6:07:88:f5:
40:c8:a0:7a:6e:6e:6c:54:52:22:ac:12:60:a3:0e:f8:15:9e:
3b:45:34:04:3c:d2:6d:f4:0d:f8:20:e0:11:8a:16:d9:25:e5:
50:ff:16:3f:07:50:1b:62:0b:ae:6d:8e:44:bb:73:20:6a:ef:
b8:82:b9:41:97:6f:8d:df:e7:f8:18:d5:c5:85:ce:e4:fd:80:
33:1c:6b:9e:75:ed:73:08:b0:08:77:4a:bd:7f:e7:80:c9:ad:
f8:fd:f1:20:d3:36:7c:df:5b:84:71:c8:23:37:db:3d:27:a9:
e0:39:b3:45:fb:92:9f:ec:f8:47:98:df:24:b4:b3:5f:4e:61:
60:f4:4f:d6:46:a9:0b:ad:70:fa:80:49:30:8f:eb:59:f0:ed:
ad:6c:d3:2c:af:5f:e1:48:a5:8b:95:46:ee:49:3f:b9:17:14:
8e:bf:54:9a:fb:06:4e:36:74:3e:8f:ec:7f:2a:e3:d8:66:11:
f0:9a:d4:66:08:ae:d3:ba:f0:d4:a5:e7:43:b8:23:1d:a7:a4:
7e:98:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:06 2025 by rpki-client