Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier: jBWiwq44Yv3y77QFMQkRFyEaQ2M0pCtCzv6BJpK8FZ0=
Subject key identifier: AF:25:0A:DC:C1:D6:38:A5:B1:0B:B5:D0:15:3D:0E:49:90:52:3A:27
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer: /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial: 0199FBEB626BA875803C1BAE52FDF32E3DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number: 68
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: wZgFWnlEMll/cr4GFf64d3S23BX2/JVBsU98Od8BX44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:62:6b:a8:75:80:3c:1b:ae:52:fd:f3:2e:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda8529160585381f07801656ffc4c551298449f
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=af250adcc1d638a5b10bb5d0153d0e4990523a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:12:60:4c:d2:d1:21:3b:e7:76:4b:82:39:
5f:35:c6:a0:6a:67:b9:5a:59:b2:22:24:90:37:17:
f3:fa:cb:ab:57:6a:f6:7c:28:b1:52:81:ed:6c:a3:
71:5a:4c:11:f6:4c:d7:31:ef:eb:23:04:42:2e:f8:
fd:c5:73:6f:0c:da:3b:21:59:6a:9f:9f:d4:27:f6:
7a:cf:2b:21:f9:24:9d:ab:45:a3:13:f6:ea:3f:d6:
6c:28:1c:28:ec:33:0e:21:12:28:07:32:36:bd:16:
50:1b:7b:3c:40:b8:56:3c:80:e3:4d:10:61:99:cd:
25:4f:b3:b0:ef:1d:c1:a5:d4:77:5e:8b:67:85:9a:
ad:6c:69:e0:42:05:0d:ba:6f:a5:81:aa:56:ff:21:
94:96:55:48:1d:8f:66:06:5a:31:1f:97:73:f6:e0:
30:b4:63:9d:2d:64:a1:d0:27:f0:f7:64:e6:91:50:
d2:08:82:98:63:50:f8:fc:d1:05:d0:e7:3a:ec:8c:
95:80:8b:a6:e6:43:f3:bc:75:c3:b1:8f:12:88:57:
02:97:2d:00:b4:b2:38:2f:7c:04:fb:93:1a:a3:59:
a4:4b:60:1d:a1:c2:69:64:b0:45:45:8f:07:f8:cd:
19:92:cf:3a:e4:92:40:0c:38:56:ad:d1:61:a1:c7:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:0A:DC:C1:D6:38:A5:B1:0B:B5:D0:15:3D:0E:49:90:52:3A:27
X509v3 Authority Key Identifier:
keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:a7:3f:07:c9:1f:44:24:53:84:6e:d3:b7:de:f3:87:5a:
32:77:95:81:89:06:f0:a2:4b:0f:e3:9f:d9:c3:02:6d:53:dd:
1a:92:0c:3b:65:7f:71:59:72:84:06:8f:c6:98:87:a3:ac:db:
5e:07:99:68:25:be:71:fa:28:70:1d:af:e2:5c:f8:41:f1:6c:
bf:c1:02:21:e3:5e:2d:c0:94:0d:95:41:e1:e5:85:f5:ad:39:
76:ad:67:24:83:a7:cb:33:bd:55:da:aa:cd:76:79:d1:3d:10:
be:76:3b:d3:a4:cd:51:5b:7a:ae:ee:d9:e5:91:4b:59:98:e5:
17:99:af:ce:9d:2f:87:0e:e6:bc:d1:b7:09:a0:4b:b0:46:d6:
45:05:de:f9:20:50:7f:70:9a:e6:28:dd:8d:23:cf:c0:d9:2e:
7c:3e:f9:2f:7a:2e:a3:14:a6:6f:f0:ec:0a:e8:66:b7:b0:dd:
de:2b:75:55:4a:ae:af:ff:6f:f6:5d:84:fe:51:d7:ed:c8:9a:
e0:2e:a5:cb:13:25:7b:42:83:a0:5c:8a:12:84:79:34:01:71:
07:ae:06:c4:28:b7:44:76:0e:00:b8:18:ec:e5:9d:51:f1:44:
3b:a7:d5:d1:11:5b:c8:f3:1b:eb:e0:73:b4:50:b1:2e:7f:b8:
8b:4d:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:49 2025 by rpki-client