
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier: SHLCyEl2ITCKDEnrh4Vber6s52xNy7M44fXEpenwJf8=
Subject key identifier: 48:5F:C5:A6:EA:1F:26:4D:AF:B8:38:5B:6A:36:EF:2A:AC:F7:C8:1F
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer: /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial: 0199240D2F5625D8050CEBCACA396CAA2ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number: 0EC9
Signing time: Sun 07 Sep 2025 12:01:07 +0000
Manifest this update: Sun 07 Sep 2025 12:01:07 +0000
Manifest next update: Mon 08 Sep 2025 12:01:07 +0000
Files and hashes: 1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: mih8JbyHGLheRH5uo7yUFMBCIfF500p6lMSMM9v7xmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:2f:56:25:d8:05:0c:eb:ca:ca:39:6c:aa:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Validity
Not Before: Sep 7 12:01:07 2025 GMT
Not After : Sep 8 12:01:07 2025 GMT
Subject: CN=485fc5a6ea1f264dafb8385b6a36ef2aacf7c81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:a8:52:0a:16:4b:f2:1f:7e:7a:45:49:ec:
af:7a:f2:fb:cf:c9:6d:06:5c:48:bd:8b:8d:6f:c1:
cb:bd:fe:2b:e1:e6:02:dc:82:ba:67:27:1c:99:4d:
1b:ea:66:59:21:f0:2f:ee:bc:d3:7b:3c:6a:ca:7c:
91:29:0d:e4:c7:7c:c8:56:03:c5:6c:bb:24:88:a1:
85:51:d4:f6:6e:1a:e3:55:50:8b:ea:02:7d:f7:6b:
6b:93:32:fc:6e:9f:71:e4:13:a9:e2:57:d8:0e:35:
dd:5f:78:67:55:1c:8c:db:e5:07:f6:9e:48:d7:63:
a2:7d:ff:d6:e3:31:7f:b2:ad:58:59:3d:5f:5c:79:
ad:72:33:08:3b:b8:37:07:67:5d:cc:25:cc:d7:4d:
5f:d9:49:ac:96:b8:20:6c:19:78:ad:80:f6:68:c4:
e2:c8:f7:fe:e9:da:8a:ba:82:ec:54:70:71:e4:fa:
1b:d4:c6:0b:cc:a1:6c:c8:1f:68:05:b4:96:9e:6b:
45:5b:35:21:c4:4c:10:02:df:29:2a:fb:36:59:56:
19:3b:eb:89:87:8d:2e:82:01:ce:02:1d:f5:23:18:
50:58:f1:e0:88:2e:6c:47:3b:a0:42:b2:35:0e:fc:
90:d1:d8:a5:71:1e:13:40:26:2c:e9:16:b9:63:f2:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5F:C5:A6:EA:1F:26:4D:AF:B8:38:5B:6A:36:EF:2A:AC:F7:C8:1F
X509v3 Authority Key Identifier:
keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:15:d8:48:5f:00:3f:62:30:46:0c:71:14:7b:0e:d2:f1:
1e:1d:ce:13:d2:67:af:18:b7:fc:5f:e8:b7:bf:95:50:c8:41:
b4:c4:4e:c0:6c:27:49:05:24:da:b5:5f:3b:b8:ec:65:23:6e:
a3:82:7e:2a:e6:f4:73:0c:1a:fd:8b:16:7a:62:f9:83:b6:67:
b3:d9:5b:1c:0c:18:80:7c:bd:40:16:12:d4:9d:13:c6:19:a8:
59:3c:1b:87:a9:0a:69:29:01:e5:5e:d2:cb:d1:8a:16:09:81:
64:9e:b4:4d:9d:37:31:1d:54:ef:40:ad:b2:50:f5:b6:cb:ad:
2f:2d:af:e9:eb:f3:b3:9a:1e:ce:69:d2:b9:1d:aa:18:0d:8c:
08:41:32:1d:3a:3b:c2:ff:70:11:45:22:03:6d:17:40:7a:12:
3b:23:3c:b8:3a:1a:2a:f1:b5:e2:00:86:07:a6:e1:44:be:7a:
ff:74:d9:59:6f:1f:27:c4:9e:00:17:2c:e9:16:d1:75:c3:db:
b7:cd:b7:51:88:bf:a8:7a:9b:0b:d5:bb:2b:d5:ad:ff:ff:77:
7e:ee:12:9d:de:fd:4b:4f:21:f0:f8:5c:c4:74:d2:10:84:5c:
b2:70:f3:99:c0:dc:35:1f:5e:aa:26:92:67:12:a0:7a:53:6d:
01:13:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:13 2025 by rpki-client