Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: UrDA0oCq/Xga0A1d/LaKrbETlh8iOI2ViFJgwcd8Dww=
Subject key identifier: 02:C1:36:8C:F5:0A:4C:27:D6:B1:66:82:69:54:46:F2:56:C9:E8:C2
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 019922FA26FED32BAADB917013F360321FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 13D1
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: izMyh2DNZCdVC2a9I+Wrb4hnjNXF4wb4swmykQHygiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:26:fe:d3:2b:aa:db:91:70:13:f3:60:32:1f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=02c1368cf50a4c27d6b16682695446f256c9e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:f8:92:0e:0c:a3:c8:44:35:36:85:d4:25:
d4:80:31:10:e1:f4:ec:a9:d7:6e:a9:8d:a5:3a:77:
c4:8f:4f:d7:30:8a:a0:04:c7:f5:c6:47:1d:d5:41:
28:e9:83:48:85:6f:79:53:cf:72:15:0b:69:23:11:
18:bb:2e:55:df:26:73:0d:7d:07:ee:d6:c2:60:8f:
2b:03:bb:55:ec:dc:1c:e9:68:3a:45:59:89:b6:a6:
c1:2a:b3:75:bb:42:a6:c0:2b:63:66:f0:51:93:5e:
e4:52:72:07:eb:d4:11:40:12:cd:78:aa:d4:81:bd:
30:9c:2a:b4:c5:7a:32:15:6c:08:f8:1d:e4:a4:91:
d0:8b:ed:89:ca:2c:06:14:df:b7:a6:b5:44:e6:5a:
b5:ce:b6:2e:ae:a9:96:3b:a4:75:41:a7:fb:cf:1b:
6b:db:ac:80:ca:d9:01:4f:9f:2e:1e:d7:99:4e:66:
09:3b:0a:42:cc:25:5b:d7:d5:9d:e0:bf:33:b7:14:
12:0f:00:68:38:a9:d3:fa:7d:ef:08:49:fb:4c:b1:
d9:b8:3e:cc:59:98:16:f3:eb:79:88:d2:ff:72:67:
d2:8a:81:2c:40:61:e5:a8:59:ec:d1:45:ed:98:28:
5a:0a:b4:e8:94:1b:ce:b6:6f:76:54:b9:5c:a5:8f:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:36:8C:F5:0A:4C:27:D6:B1:66:82:69:54:46:F2:56:C9:E8:C2
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:84:04:90:13:f5:e8:da:ba:56:ee:39:14:a2:25:91:0a:
1e:4d:c3:da:2d:4e:32:26:77:45:14:be:24:0f:e4:a4:e2:df:
60:e2:86:bd:43:54:45:06:cd:c2:4a:05:7d:ff:ea:c4:ea:55:
08:ce:cd:7c:ce:50:3a:a5:0f:9d:29:c6:bf:9e:2f:33:ae:18:
6b:17:04:4a:83:44:75:e8:10:27:48:8b:8b:98:67:14:16:ef:
db:b7:bb:9b:24:eb:81:30:23:c6:bb:08:81:8a:a8:04:92:c0:
c9:b7:25:b9:ca:d6:43:56:37:66:c0:dc:7c:06:fe:01:a8:90:
b6:ce:cb:71:47:d7:7c:bf:05:0f:6f:fc:d2:ec:40:d8:4a:d5:
96:6f:56:93:1f:23:a8:22:2a:87:b2:09:3a:d5:36:f7:1f:f0:
ff:44:e5:a5:1c:1f:e4:d4:6b:48:fe:13:86:0c:09:f7:9f:9f:
b6:2e:19:fe:ea:2a:f9:2e:e5:f2:ed:ef:07:db:73:d6:fd:ee:
2c:37:1d:20:85:a6:8e:30:ac:c1:a8:21:0e:0f:a6:f4:91:01:
83:97:ac:68:20:e4:89:40:76:02:39:aa:ef:1d:af:72:72:35:
5a:31:19:b8:23:61:82:9d:61:e3:50:54:fb:6c:56:7f:66:90:
d4:4e:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:20 2025 by rpki-client