
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: WNjxLV61fxyE35UdHSsN1a9Yu4xiTAeV5jh+nx5e4Ds=
Subject key identifier: 7A:DB:18:AA:9B:5E:6E:3D:DF:94:9C:E2:1D:55:E1:A7:51:FF:2A:73
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 0199239F8CA59C7BCE97D10A45A8526016EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 08E5
Signing time: Sun 07 Sep 2025 10:01:22 +0000
Manifest this update: Sun 07 Sep 2025 10:01:22 +0000
Manifest next update: Mon 08 Sep 2025 10:01:22 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: +TrgGoI5GH3KiBlwkleq3sOPqM/De1V9yOd6GzoudD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:8c:a5:9c:7b:ce:97:d1:0a:45:a8:52:60:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Sep 7 10:01:22 2025 GMT
Not After : Sep 8 10:01:22 2025 GMT
Subject: CN=7adb18aa9b5e6e3ddf949ce21d55e1a751ff2a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:a1:84:c0:dc:45:69:2e:45:f6:c7:e2:41:
96:22:81:a2:04:8a:66:34:97:64:3a:dc:16:43:a2:
96:8e:df:c0:f3:67:7b:66:2c:9e:49:85:6d:2f:6b:
cf:8f:bd:00:ba:c5:18:42:c6:54:61:ba:28:2c:89:
84:07:ea:1b:33:85:63:6f:42:2b:b4:75:cb:32:50:
eb:9e:1a:32:83:5d:a6:40:ae:12:6a:cd:2c:e8:2f:
d1:3b:e9:e8:2b:5a:14:52:c0:af:12:b1:02:27:a3:
e3:9a:51:02:07:23:3d:c1:74:cd:91:58:f5:a2:52:
02:43:6e:67:cf:68:3d:fc:a4:ac:71:06:98:bc:f6:
f9:cf:58:46:ad:a0:42:a8:b4:9d:6b:9f:c2:52:e1:
a7:5f:a4:2f:62:01:d1:13:ec:80:e3:6f:b9:13:6e:
98:e5:9d:e4:07:6d:71:c6:ef:27:14:ce:2e:59:d0:
c3:68:37:02:4e:7f:66:b2:76:0e:51:58:78:8d:ad:
7b:89:bb:4a:3d:b5:ac:6d:6c:2e:10:5d:c4:9e:57:
ef:20:e2:39:66:0e:85:5a:6f:d5:b9:9b:46:08:8f:
0f:98:f7:c0:d7:7d:df:4b:0a:86:95:7d:55:82:0d:
06:22:37:4b:1c:12:28:c7:c7:5a:a1:3f:92:24:5b:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:18:AA:9B:5E:6E:3D:DF:94:9C:E2:1D:55:E1:A7:51:FF:2A:73
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f6:9e:ce:14:24:14:38:fd:67:21:0e:9c:c3:f9:b6:01:15:
4c:c8:ef:47:c6:a6:42:ed:80:ae:a5:8e:80:b1:0e:1a:75:ac:
c2:f0:0a:35:fa:a8:44:49:f4:36:46:12:c2:a8:56:bf:c3:0d:
da:dc:c4:92:e4:f3:9a:bd:88:c0:03:8c:9c:63:b7:74:52:9c:
23:9a:ae:46:aa:bf:1c:f8:55:fe:f2:05:6e:6e:f8:49:6f:c6:
86:48:94:45:49:da:3e:ad:7b:df:6d:ff:55:fe:10:b1:86:2c:
08:b4:e4:3b:99:cd:75:47:cc:4b:0c:43:3b:37:9c:4c:35:a4:
1d:6b:c2:89:7e:a1:33:e0:85:2c:72:24:51:46:c2:86:f9:b5:
a4:39:9c:d3:3e:9c:9b:93:59:99:2f:ec:ff:c1:aa:38:e1:b8:
44:af:eb:c1:0e:f0:d3:f7:db:b9:31:80:11:58:e2:79:78:bd:
8f:24:de:ed:2b:a0:b0:66:65:fb:41:53:8f:b6:18:b4:c3:1c:
45:e9:1e:f4:78:5d:28:b0:3f:fb:39:5c:f1:28:72:fb:28:51:
81:c9:18:13:66:1d:8a:42:f9:bf:0a:ed:26:e5:91:bf:67:ef:
65:49:2a:0f:1a:88:64:55:5b:1f:14:6c:4d:88:14:fb:a4:74:
30:dc:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:07 2025 by rpki-client