Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File: 18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier: Fyt808A85UGA9bNd879CTFrstTcnD1vx9/Md24yvUKg=
Subject key identifier: E4:90:CB:4F:83:E2:4D:C1:B8:25:BF:7E:8F:F0:65:BE:D6:3E:2C:3F
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 0199FEB4DF3DB0F62FB095BFF2755D4538B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number: 0CE0
Signing time: Sun 19 Oct 2025 23:01:30 +0000
Manifest this update: Sun 19 Oct 2025 23:01:30 +0000
Manifest next update: Mon 20 Oct 2025 23:01:30 +0000
Files and hashes: 1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: KXrAcLcpVmHTcpeoHsdNi508r3AEF6EuEd5lpWqq9KM=)
2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:df:3d:b0:f6:2f:b0:95:bf:f2:75:5d:45:38:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Oct 19 23:01:30 2025 GMT
Not After : Oct 20 23:01:30 2025 GMT
Subject: CN=e490cb4f83e24dc1b825bf7e8ff065bed63e2c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:cc:18:29:57:7f:50:1e:ad:8e:29:53:74:
3d:8f:02:53:63:b9:2e:00:a8:85:50:52:fb:68:c3:
34:9f:36:0e:e0:4d:0a:aa:64:f6:79:2a:18:48:aa:
60:a2:b9:7e:17:55:fc:7a:5e:51:6e:0d:e9:97:91:
4f:1d:81:ac:bc:ff:c1:66:de:a0:6a:01:45:7b:b7:
72:21:ad:fa:64:67:d7:55:80:4c:bf:87:aa:0e:c1:
b5:1d:1b:c3:93:a7:a6:e2:bc:e1:3e:ed:b7:ee:9b:
88:41:b2:99:c0:c0:0e:5d:68:9a:bf:00:70:1b:04:
81:5d:be:81:42:1d:9b:98:55:ee:44:ae:42:b7:e1:
98:11:43:f8:66:49:76:63:22:0b:24:0f:9f:49:a9:
0e:ea:e1:f1:71:4e:f4:95:57:3d:30:93:68:56:30:
0f:1e:35:e5:00:c3:19:75:69:b8:67:02:d0:5c:b8:
26:7e:7b:5c:ec:f7:89:de:69:73:f3:f4:db:be:da:
57:2c:bd:79:bc:12:40:7f:b9:ed:33:e1:b9:85:6c:
97:9b:09:75:94:17:0a:f2:5d:1c:c2:40:fa:8e:f0:
58:cb:9a:fb:60:58:41:a5:60:b0:3b:d3:3c:0a:be:
2c:51:0a:e2:ee:c1:1d:c8:b7:9c:cf:76:84:70:ba:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:CB:4F:83:E2:4D:C1:B8:25:BF:7E:8F:F0:65:BE:D6:3E:2C:3F
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:86:d8:06:dd:4f:fc:09:27:ed:fb:0f:cc:53:84:27:30:2a:
82:18:36:e6:b3:33:b1:1f:cf:db:20:b8:48:8a:a2:dd:ba:1f:
1f:8d:06:36:d6:2a:85:65:79:52:fe:e8:da:f6:88:e7:a9:12:
b8:02:d1:c4:54:ab:ed:1c:ef:14:2d:ed:23:a5:24:c4:8f:32:
2d:5b:b1:50:f6:67:3f:84:15:b8:13:01:ff:d0:eb:85:97:e4:
a2:2f:11:f6:8d:23:2e:29:5c:0b:7a:45:09:0c:4d:f7:e8:8f:
c5:3f:09:ad:e9:1c:72:d0:2e:3c:fe:2c:25:11:d8:26:e9:c5:
2e:5f:41:04:3e:15:fb:f1:06:20:b0:a2:7a:97:6f:65:8e:4a:
c0:43:93:fb:04:66:21:c6:3a:c3:8f:5a:80:b6:20:6f:7c:6d:
6d:91:be:93:08:e6:2d:26:70:b2:d7:f6:10:88:0d:18:71:c7:
24:d0:f8:82:b8:1c:1d:47:e2:af:84:dc:7a:8c:2f:b9:52:5f:
6a:61:eb:ea:cc:1f:14:25:fc:42:2b:1a:d2:36:1e:6d:10:49:
f7:38:97:7d:d6:ed:0f:fc:20:f1:f0:3b:cc:de:97:54:e8:6d:
93:88:77:dc:4b:92:0b:40:5d:bb:11:af:48:06:0b:5d:ca:b3:
8e:0c:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:03 2025 by rpki-client