Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: jPZ1HD2gO8Yea5WfC0hV7X9kA09ol3vwARpUvnBpKuE=
Subject key identifier: A5:FC:F6:F4:41:F5:56:34:EF:DB:41:5F:00:7A:C7:DA:EC:D5:6A:0F
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 0199FBEBB18781DB57B8DFDA94EA73E28326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: bHJEgi+2kooUTlQ8AEOErKwNxDjv9LMm6fcPfR79KQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b1:87:81:db:57:b8:df:da:94:ea:73:e2:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=a5fcf6f441f55634efdb415f007ac7daecd56a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:fa:a4:8d:9a:c2:99:19:2c:0e:46:54:09:
69:14:e9:70:be:01:70:dd:34:15:f3:d4:6f:19:59:
c5:3c:89:b1:30:75:d6:73:4d:1a:4d:fe:26:d7:4c:
45:78:f0:cf:4a:6e:9f:78:f1:85:13:7d:8a:48:62:
54:cc:97:eb:9e:23:cc:4b:53:4d:44:3c:7f:5a:f0:
d9:fa:a1:6a:b3:ce:ab:a1:60:65:02:60:62:8a:78:
4a:4a:a5:e7:fb:de:ff:62:c2:51:b6:ff:7e:9c:7f:
c7:aa:4c:35:d2:f2:ac:7d:26:55:1c:73:8e:ca:e0:
b4:a8:2b:14:a0:1e:e9:fd:0a:b4:93:bc:c3:a3:06:
54:8c:df:5f:7a:d7:8f:c0:0f:88:81:15:c2:77:a7:
11:99:8f:2c:c8:a0:e1:26:64:dd:c1:34:35:56:88:
a9:57:1e:0c:a1:72:34:8e:73:d7:92:52:56:5b:0e:
47:1d:fd:a7:b1:32:de:7b:2b:7b:d0:2b:05:ba:ca:
96:68:ea:b7:9d:31:64:2f:c8:49:36:dc:53:19:77:
9d:37:c4:e5:4b:dd:b7:60:eb:55:68:3c:4c:ef:d5:
5f:3f:42:b8:fd:04:9f:4f:31:b6:4f:1a:40:34:6b:
46:e5:ae:6b:f3:82:44:f7:50:cd:24:fb:bc:ef:3b:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:F6:F4:41:F5:56:34:EF:DB:41:5F:00:7A:C7:DA:EC:D5:6A:0F
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:48:bc:df:23:2b:33:cf:2d:54:82:39:72:69:af:1e:b5:66:
21:15:0f:38:4e:cd:b4:e9:32:ae:78:d2:dc:a8:f0:32:e0:de:
9f:0a:9b:61:ff:63:e3:84:ca:b0:d7:a1:db:f2:70:00:e5:18:
5f:af:1a:e1:f9:1a:6c:58:89:0a:4b:67:66:43:97:c8:64:51:
f0:2d:04:5d:6b:13:96:03:c9:ff:a7:ea:fc:77:b5:78:58:c0:
4c:0f:06:7b:2d:a9:02:3f:ee:68:0f:16:db:eb:a6:3e:53:52:
0a:21:10:3a:a0:52:bb:fc:37:58:8d:a3:37:78:41:0c:37:50:
e9:5f:5d:96:f0:32:3e:51:92:f2:bb:04:55:04:f9:8c:b2:99:
4b:de:e4:69:e7:90:7b:ac:03:06:30:15:70:c8:f6:2c:98:85:
cc:c9:6b:77:d3:32:51:a0:10:f7:28:38:e1:9e:f3:3b:3f:06:
2f:22:d6:8a:da:d8:25:d8:4b:49:cf:06:6b:21:20:ed:a2:4a:
b3:79:f2:b6:ac:32:39:b1:29:70:03:e4:bc:07:2a:77:6d:b5:
04:98:8f:2f:b6:38:28:8d:71:cf:cd:1f:14:ab:ab:73:8f:10:
05:97:65:55:71:c8:75:66:dc:53:88:3e:a9:f0:f9:20:da:eb:
aa:50:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:31 2025 by rpki-client