Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: +NCFdcsOZ/QbcH4+QMHIoQYTOZ+2TYZ2qNJSg0j6uIk=
Subject key identifier: 5A:53:FF:42:7F:93:7A:A0:9B:B5:96:64:61:6C:5C:C4:EB:8A:3E:08
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019922FA54CF59146AD7939D2B3175C26CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 13C7
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: O82dMtm8+g232ZYE5MqKA8yxtDUo8M+UvzNEKoO7qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:54:cf:59:14:6a:d7:93:9d:2b:31:75:c2:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=5a53ff427f937aa09bb59664616c5cc4eb8a3e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:f9:c9:27:ef:e0:5f:fb:42:f5:55:e4:2c:
1a:60:ee:ed:17:5e:ad:25:fa:14:d7:8e:77:34:66:
70:71:a6:2c:09:59:19:0f:2e:c6:b4:5e:e3:c3:a9:
61:e9:cf:5d:e7:39:aa:fc:bd:d4:f2:43:86:00:f0:
92:04:23:c8:22:f2:cd:fd:05:e7:74:6f:6f:cc:b2:
d6:65:75:55:62:46:c3:35:e0:58:f3:ec:da:ed:9c:
38:af:81:d8:0e:0e:c0:f8:fa:0b:3d:63:48:c3:23:
a1:6b:e1:11:57:c9:c6:b2:da:31:f1:e8:ce:29:60:
18:0e:07:15:84:d5:38:7c:79:68:d9:64:98:59:ad:
49:ee:09:ec:d3:b6:04:b3:b6:5d:16:13:89:3a:d9:
a0:b4:ca:fd:99:7a:12:de:3c:48:79:79:1d:a5:cf:
5b:ae:83:61:fc:21:ee:d3:6c:1b:44:ab:0b:61:3f:
f8:27:a7:57:4c:b8:3b:cf:32:61:37:f3:f3:7e:63:
c1:67:98:96:d5:cc:00:45:8b:57:bb:7a:7a:d7:a8:
58:5a:8d:cd:63:af:6d:5d:7e:75:3e:d6:4d:06:cb:
88:03:18:1c:32:56:ac:23:a4:36:1f:21:8f:e6:48:
04:9c:4c:5c:1b:cf:27:0e:d0:33:33:bf:ea:8b:58:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:FF:42:7F:93:7A:A0:9B:B5:96:64:61:6C:5C:C4:EB:8A:3E:08
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:ae:71:6d:d6:cb:9b:ee:3a:ca:06:34:e1:96:8a:3c:ae:
c6:d0:54:67:90:ec:14:70:7c:b8:c0:b0:ef:c2:2d:f4:f1:0f:
93:86:dd:f7:fe:57:c2:12:b5:10:16:d1:03:00:54:12:76:a9:
5e:f3:e2:6f:76:04:b9:4a:96:3e:fb:d9:44:55:67:8b:e0:55:
e2:33:0f:c0:37:66:b3:f5:f8:f3:c4:1c:b6:0e:fa:41:6f:4a:
98:7f:61:f7:8b:4d:86:77:4b:07:5c:7a:80:23:47:b4:6d:e0:
5a:85:9a:1b:fa:8d:98:2c:e0:77:36:82:62:38:54:c8:21:76:
87:da:fd:77:d3:fd:5b:7f:4d:f1:70:95:52:9e:73:0f:8b:12:
18:88:8b:75:92:c4:49:92:fe:7a:07:7e:f9:c2:2a:85:15:51:
e5:9c:02:12:1f:92:bf:2c:95:75:c4:32:ea:4c:66:77:af:54:
7a:80:43:8f:da:4f:8b:2e:39:df:ca:a5:0b:a3:9f:c2:7b:d6:
cd:e0:b1:aa:fe:d8:b3:93:18:0b:45:79:30:75:59:16:8f:d5:
33:e8:f9:e0:73:38:05:6e:bc:1d:48:88:bc:b5:63:61:f1:56:
3d:66:97:65:78:16:15:60:7a:43:50:be:45:4e:82:dc:bf:97:
5a:f1:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:49 2025 by rpki-client