Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: 8hoDVjTMQIDRJ78JEWxQ+NSwY7Avecemptc2k93JEJY=
Subject key identifier: 86:BB:6F:C5:93:A4:78:4D:44:77:8B:95:6B:24:4C:EA:B3:C2:3F:0A
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 0199FAD8179EC90FA46D8DBE638AE7F758F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 07C6
Signing time: Sun 19 Oct 2025 05:01:29 +0000
Manifest this update: Sun 19 Oct 2025 05:01:29 +0000
Manifest next update: Mon 20 Oct 2025 05:01:29 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: f1OKLy5750br8O16o0tflUmiEA8dVWUNBMGKLDv5mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:17:9e:c9:0f:a4:6d:8d:be:63:8a:e7:f7:58:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Oct 19 05:01:29 2025 GMT
Not After : Oct 20 05:01:29 2025 GMT
Subject: CN=86bb6fc593a4784d44778b956b244ceab3c23f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:dc:fc:ec:26:b0:0b:0c:b9:d8:46:d8:b8:
f9:5f:25:2b:80:42:8d:92:9a:5d:8d:b1:d0:58:04:
91:29:90:48:a0:45:db:e0:96:d9:8a:3e:d1:68:f4:
54:55:b7:3f:5c:b4:0b:35:b7:20:19:c2:dd:cf:70:
28:5d:ad:80:ca:bf:a4:79:5d:dc:04:a2:87:54:cb:
d3:0e:c6:f1:67:2c:a9:33:e3:b5:c5:4b:1f:92:0e:
af:40:6d:87:c4:f3:76:27:c1:5f:5b:85:d6:43:ab:
71:b3:84:33:06:67:fb:70:83:0f:55:fa:6c:8e:f3:
fc:c2:fe:9a:fa:cc:f8:4f:a1:1f:7a:35:00:9a:dd:
9a:40:5c:91:49:f4:24:77:54:49:d2:2a:59:91:34:
e4:0b:31:dd:3c:f2:9d:8c:0d:ca:ff:8f:e5:68:16:
a5:40:e7:ab:07:f5:12:81:16:af:95:59:75:a5:44:
27:a2:dc:0a:2d:32:98:0a:8e:e8:2e:06:18:0c:b3:
f8:aa:8e:62:5a:f7:0e:e6:8a:96:8f:f1:92:93:e7:
05:10:1e:60:ad:87:94:9e:fe:7d:bf:0e:dd:5f:53:
5d:33:8e:0f:e3:a2:24:7f:04:3b:73:8e:32:f3:ad:
7b:a2:35:c5:6f:e3:b5:98:4e:7a:0a:be:77:b0:ce:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:6F:C5:93:A4:78:4D:44:77:8B:95:6B:24:4C:EA:B3:C2:3F:0A
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8f:7b:d1:52:94:74:b8:71:ad:1a:cc:af:b8:1e:b3:25:c8:
f3:e7:d5:51:d8:82:2c:87:14:cd:77:68:8f:cc:c6:e7:f5:65:
60:56:e9:bb:67:32:f2:46:71:b5:65:19:97:0e:e7:1e:a6:59:
cf:e8:46:4a:bd:52:9a:24:18:a5:e3:13:54:cb:ed:24:b4:d8:
4b:a6:7a:7e:6f:b4:f1:c9:64:14:27:76:7f:4c:ad:1f:f2:6c:
7e:b1:8a:9c:9b:99:b1:4b:54:d9:86:0e:d9:59:d1:46:2e:ed:
f6:7a:34:3c:66:01:52:68:45:4a:c2:2e:85:fe:a3:54:ac:24:
42:0d:fb:ae:dc:a6:28:11:1d:a4:7b:69:3e:12:01:2d:52:0a:
5e:85:25:09:d8:cf:d8:22:5b:ab:96:98:a2:c2:64:4d:4c:7b:
2b:2f:d5:87:12:ad:72:03:69:32:59:2f:a9:04:1f:a3:b5:2b:
dd:ac:3f:fa:20:f6:2b:1e:6e:d2:fc:1f:45:62:2c:12:59:b6:
10:9d:12:cd:a7:fb:cf:dd:9d:9f:df:17:89:e8:16:6a:d9:4e:
92:0d:4a:20:e6:19:d3:9b:ed:12:fb:eb:06:66:03:d4:b3:9c:
a5:2a:4d:98:65:cd:8f:5c:a7:a4:10:2b:a4:ed:28:84:f5:ea:
4d:d1:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:14 2025 by rpki-client