Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: 2tv5cwkAID7vR8yJ8ARQEOpx7z0e6Vq9vGr2Aq5x6CE=
Subject key identifier: 17:79:CE:38:E5:C9:2E:20:AC:6E:B6:57:18:01:6A:93:B6:75:FE:E5
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 019A2109320EE80799DA6A62878F07A076BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0DF2
Signing time: Sun 26 Oct 2025 15:00:41 +0000
Manifest this update: Sun 26 Oct 2025 15:00:41 +0000
Manifest next update: Mon 27 Oct 2025 15:00:41 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: cDNm2HvY6lgEAWFdvWugVSiz7dmmlCX/EFE+gXfh1CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:32:0e:e8:07:99:da:6a:62:87:8f:07:a0:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Oct 26 15:00:41 2025 GMT
Not After : Oct 27 15:00:41 2025 GMT
Subject: CN=1779ce38e5c92e20ac6eb65718016a93b675fee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:58:4b:91:38:1d:7b:f6:a4:8b:3e:ae:59:
57:3e:2e:fe:5d:d9:a3:ed:b5:50:30:85:4f:cf:ca:
48:6e:fe:d9:5c:3a:8d:9b:36:6a:c1:f0:7f:53:01:
80:c4:69:de:ef:61:78:dc:1a:e9:9e:1c:62:d4:8b:
32:da:59:89:5e:bf:25:8b:41:c4:ab:8b:84:72:63:
53:b7:04:e1:b0:1c:ae:dc:89:30:99:42:ab:95:59:
a9:a4:ce:b5:12:d7:1a:da:1c:df:36:03:85:ae:79:
49:67:50:80:d2:31:b4:8f:1b:8f:81:6b:3a:4d:a8:
33:d5:b5:f2:25:9a:73:2d:2a:c7:e5:38:23:57:25:
be:52:74:8c:a4:55:f1:a0:66:b9:77:ad:aa:57:ad:
77:5d:8d:7f:b5:4e:0b:c2:96:ee:14:1e:ac:6e:58:
b5:03:08:e7:d6:bf:fa:97:07:9e:0b:ea:4d:24:88:
19:1b:e2:1b:91:ed:f9:bc:de:4d:fc:0c:9c:ac:31:
3a:40:e7:d1:23:52:38:5c:54:d0:05:d5:10:ee:e0:
14:3a:18:9c:5e:9f:6c:d2:2f:31:7b:59:7a:1b:ae:
f2:c3:67:f3:de:2f:7a:3a:a0:24:25:3c:6f:14:f2:
79:30:e7:5f:b0:28:d7:7d:f0:32:03:04:fd:ac:c5:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:CE:38:E5:C9:2E:20:AC:6E:B6:57:18:01:6A:93:B6:75:FE:E5
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:cd:a1:f0:aa:7d:1d:3b:0d:4d:8f:d0:8d:ab:31:bf:3c:
82:06:a4:a5:54:76:4d:fd:f1:8b:6a:3a:2c:6d:1d:f1:3d:04:
a0:3e:3a:c1:2d:4a:df:97:5d:67:94:9e:24:9b:72:5a:6b:2c:
55:82:7f:53:7c:16:1b:a9:c1:e5:9d:e6:0e:07:4a:fc:3f:f3:
12:a4:fa:12:3c:26:14:74:67:62:c7:3c:b5:43:82:80:9b:30:
f5:44:8f:23:e2:89:89:2e:86:33:c2:a1:32:2b:b2:a3:16:41:
04:64:ac:44:1e:c9:c0:a6:01:c2:d6:23:f6:7e:2f:23:ff:56:
4d:31:d3:6d:34:c4:e7:d0:f1:b0:df:b3:75:35:0a:c3:07:0c:
5e:0f:c8:47:21:f7:42:75:ef:fe:8e:bb:33:f8:61:dc:ef:c9:
f1:c6:36:74:29:fa:35:53:d2:39:ed:02:4c:23:9c:ce:0c:15:
a3:b5:4b:80:25:c1:4e:9e:c9:62:bf:d6:a1:5b:09:6d:44:ce:
d9:31:9f:f2:a1:f8:e6:03:47:ad:70:ab:9c:61:e9:c0:73:c3:
40:fa:3d:bf:03:b2:b0:c9:95:82:52:81:73:d0:a2:8f:e3:7d:
2f:f7:52:ff:54:9c:81:e6:4a:5d:b6:0b:3a:9f:27:9d:50:43:
c8:68:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:50:25 2025 by rpki-client