Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: tjTBK3LJcYE/2vTtRaBgedZJ8Y7D3HdCpHxhl6LIDGY=
Subject key identifier: E6:E8:87:1B:13:F4:36:99:AA:32:C7:1F:3F:60:42:6E:5D:F1:DA:CF
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019A706E5C03F8F4A794F0EC95DD036ED22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 118F
Signing time: Tue 11 Nov 2025 01:01:11 +0000
Manifest this update: Tue 11 Nov 2025 01:01:11 +0000
Manifest next update: Wed 12 Nov 2025 01:01:11 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: tJ7PSMIE8xkYqc6eitj9s9BWRUwj4Du11m0vzAM/YF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:5c:03:f8:f4:a7:94:f0:ec:95:dd:03:6e:d2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Nov 11 01:01:11 2025 GMT
Not After : Nov 12 01:01:11 2025 GMT
Subject: CN=e6e8871b13f43699aa32c71f3f60426e5df1dacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:e8:ba:b8:60:c2:72:d9:2b:81:d8:78:ca:
c3:1d:2e:19:8b:70:c2:82:aa:b8:c9:95:d8:50:d6:
38:c4:f9:a5:2e:ea:84:80:c3:73:45:a5:ad:8c:65:
04:2b:7b:d4:59:a8:d1:b8:82:d0:ae:68:ef:e8:e4:
7d:d2:12:3b:86:e8:a6:01:3d:bf:04:aa:50:12:63:
01:22:15:2f:bd:39:7d:2e:01:f3:79:e4:8a:84:d7:
2d:08:12:bc:3d:cf:6a:1f:66:3f:f3:fc:e7:40:e6:
c0:17:33:0a:6a:04:8d:83:c9:87:98:5c:75:29:a8:
52:a9:0e:41:85:c3:30:98:ff:f7:01:90:0d:9d:83:
b7:5c:fc:5b:fc:cb:49:a6:af:d0:96:a3:a2:c6:96:
ff:af:2b:4c:36:30:bd:25:a4:5b:03:1f:dc:0b:a9:
53:7f:55:b5:d3:43:96:14:05:d0:3d:51:92:c3:98:
2e:47:92:16:2c:41:db:74:8d:82:28:26:65:ff:fb:
ab:f7:1b:bb:c4:3d:34:be:9b:7e:3a:3a:8e:ac:36:
d3:59:b8:ca:11:87:0a:7e:0a:73:d6:42:95:cb:08:
ab:ea:5d:33:47:2e:5d:ca:52:b1:32:e9:71:7c:aa:
01:92:0a:95:c7:8d:cf:f8:d4:6c:a6:58:44:b5:71:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E8:87:1B:13:F4:36:99:AA:32:C7:1F:3F:60:42:6E:5D:F1:DA:CF
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:2b:e0:80:8f:be:db:a4:f5:ec:fe:9a:84:16:f9:ce:93:
c9:74:9d:89:71:fc:53:e3:36:b1:ef:6e:3f:19:38:7c:82:a2:
2a:c5:e7:4f:e2:ad:b3:7e:92:b6:1b:eb:fa:27:e7:b6:c7:ca:
97:b8:9c:57:fe:bf:61:61:19:9d:e3:56:dc:87:a8:a7:64:40:
1e:09:eb:04:14:00:92:b3:21:8e:10:0b:84:50:ab:f0:41:7c:
c0:d3:d5:6a:9a:eb:10:67:b3:7b:c7:7e:c9:45:1c:04:b6:29:
6c:23:00:80:d6:93:9f:ed:cf:0b:9f:05:38:0b:bd:65:d3:f3:
05:0c:23:f9:5d:a4:b3:ca:5f:93:04:cf:bd:ff:a9:a5:68:77:
7e:60:c7:28:cf:56:3f:4d:d0:17:a7:48:f6:bc:03:bd:53:8b:
7c:09:64:9b:3c:70:a8:59:e0:17:1d:cc:a1:e2:be:ff:4e:27:
63:1a:71:fd:8c:a0:62:42:9a:1c:8f:42:17:47:c6:af:a7:56:
13:f2:e4:77:7e:43:52:f1:94:e2:3c:d1:76:3f:1a:05:09:94:
31:34:98:f5:41:60:e6:9f:2a:e8:a3:d9:4e:fd:0f:f0:ef:6e:
98:5b:8f:fe:3b:34:3c:1c:f9:10:1c:f7:31:66:a0:e5:0e:2a:
6a:d9:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:28 2025 by rpki-client