Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: k5UqKClb8TyaDwBP4gYISJo+ShSMXyBmVl496mzf9v8=
Subject key identifier: 20:5A:CE:C4:58:B4:02:78:64:9E:0E:96:18:8B:B1:F6:F2:07:A3:90
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019916F5E1F1246896670B7CF587AC21760D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 12FE
Signing time: Thu 04 Sep 2025 23:00:36 +0000
Manifest this update: Thu 04 Sep 2025 23:00:36 +0000
Manifest next update: Fri 05 Sep 2025 23:00:36 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: 4Wy7QRu3FjhHo3+A4Sp/qbP88X14wFN9UD/BuXyEMs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:e1:f1:24:68:96:67:0b:7c:f5:87:ac:21:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Sep 4 23:00:36 2025 GMT
Not After : Sep 5 23:00:36 2025 GMT
Subject: CN=205acec458b40278649e0e96188bb1f6f207a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:13:9c:db:78:31:b1:b9:4f:2d:b3:85:78:
5c:21:af:00:c2:27:a2:e9:0c:55:de:3d:97:08:23:
e1:0b:d3:29:58:76:ad:d6:ba:a1:47:81:9d:32:22:
5f:3f:73:2c:31:00:a9:6c:c6:36:b4:78:d2:fa:fb:
37:f0:85:7a:cf:c2:f2:7f:fd:e5:d8:a4:2b:a2:8f:
cf:06:c8:1c:af:78:c1:7d:cc:30:b7:fc:e7:d6:99:
af:90:80:63:a1:9c:71:f8:94:20:73:33:2a:0d:d4:
d9:e4:f6:43:d3:40:37:41:53:05:52:90:84:88:57:
65:2e:1a:5a:5e:5b:3f:ab:e7:d0:30:c5:14:05:12:
74:f5:79:0d:c5:36:02:9e:a2:47:85:d7:70:28:21:
68:b7:76:22:a5:33:67:ec:9f:03:d8:4d:5d:8f:84:
cf:9a:7e:a2:4f:0e:25:1e:7b:1c:cc:bd:f9:e8:6c:
4b:1e:1b:22:b6:70:58:0d:33:f1:79:3d:3f:89:4f:
33:be:23:11:c8:f3:37:f4:5e:39:54:97:85:2d:f9:
10:1e:6c:44:70:a8:1a:4b:27:82:c5:94:a9:87:24:
6c:9b:38:af:1a:ca:03:ba:6b:12:87:96:47:3d:3d:
82:08:f4:2f:4a:a1:12:b4:7e:c6:44:4b:b9:e5:6b:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:CE:C4:58:B4:02:78:64:9E:0E:96:18:8B:B1:F6:F2:07:A3:90
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0b:e9:28:0a:c4:32:15:e5:04:11:ab:72:4e:b1:ea:72:2a:
11:45:95:12:df:13:d1:66:c4:ca:4a:59:2f:3a:22:bc:64:1b:
f9:b3:24:5a:c7:77:99:23:62:05:71:9b:6d:e1:3d:6a:23:73:
4a:89:37:c9:bd:4a:dd:f9:60:d6:07:bc:37:2a:bc:ac:60:0a:
65:97:dd:50:48:02:f7:15:e0:db:56:6c:89:dc:9a:e4:c9:2e:
92:fb:de:60:48:91:80:fa:e6:38:4b:f0:ce:fa:cd:d1:7c:bf:
0b:e8:3f:39:2e:95:c1:65:1e:5d:36:1d:f1:b4:6b:da:b7:34:
af:49:46:9e:01:00:d2:15:aa:d7:6b:5b:ac:1a:18:65:9d:79:
6e:0a:05:40:7a:74:3b:25:41:f3:56:f6:f5:11:2d:d5:c3:82:
0a:b5:53:9c:91:e9:61:81:08:d3:a8:4a:1c:ef:5f:f5:e9:3b:
0c:6d:ed:f8:64:27:06:83:64:32:cc:97:c3:44:0d:67:ff:ae:
63:e4:dd:70:df:a7:7d:54:50:d6:9f:2b:47:91:89:9b:5b:2c:
2a:e9:78:0a:67:18:50:3f:d2:e8:c6:bb:96:f6:70:f2:e4:48:
90:7d:1e:8b:82:92:ca:03:e5:c5:4d:b6:8e:7d:df:1b:f8:88:
d9:da:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:47 2025 by rpki-client