Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: 0cBelDLpaCwJyR7EzGcFzLCMmh6K95FbGgkeXSJPdUo=
Subject key identifier: B7:D0:76:9D:65:EA:7D:66:79:2A:B5:25:CE:E8:82:E7:DE:FC:DF:44
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 0199221EB0420804A41563E666FC09DC4448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0D6E
Signing time: Sun 07 Sep 2025 03:01:00 +0000
Manifest this update: Sun 07 Sep 2025 03:01:00 +0000
Manifest next update: Mon 08 Sep 2025 03:01:00 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: 0cijwhWXOdTrryhL5fpHLQUQ2BI6vNktgcJ+W23VOd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b0:42:08:04:a4:15:63:e6:66:fc:09:dc:44:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Sep 7 03:01:00 2025 GMT
Not After : Sep 8 03:01:00 2025 GMT
Subject: CN=b7d0769d65ea7d66792ab525cee882e7defcdf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:35:fb:60:17:e9:a9:fb:10:32:62:21:f4:
3b:07:65:aa:89:c8:74:a5:7d:a4:50:36:e7:93:7f:
95:ad:8f:b3:80:cd:7e:35:a0:53:b5:be:d5:90:da:
02:81:89:3e:1a:88:ad:31:2f:86:dc:a4:da:42:0e:
79:29:b5:14:fa:92:d3:8d:fa:fb:5d:b5:2f:55:9e:
5d:24:54:33:e3:53:ae:42:c5:fe:6d:82:3e:8b:8b:
19:c1:67:08:a9:99:1f:2f:d3:67:dd:64:e3:ef:83:
c0:a8:9f:d6:c7:98:da:12:be:77:83:71:f2:92:dd:
32:3a:4e:38:60:be:4e:57:8f:75:72:27:b9:e5:4f:
b3:2f:53:e5:be:28:55:be:9e:2e:f9:23:20:b5:19:
d1:cf:5b:8f:a3:4a:6a:87:b1:3d:92:46:97:b0:37:
70:94:e3:fa:aa:c5:15:dd:be:66:71:10:7d:33:40:
dd:d0:76:4f:1d:77:8b:2a:cb:96:35:4c:1e:20:25:
8b:c5:6c:d2:0a:27:36:66:e4:a7:1d:9b:fe:a8:bb:
c6:ef:77:c8:36:aa:00:ef:1b:59:f5:4d:31:e3:93:
96:e2:6a:9a:5b:13:de:2f:71:76:4c:ba:bc:e9:8b:
3f:59:56:f6:51:c4:07:ab:6d:f5:93:1a:81:49:5c:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:76:9D:65:EA:7D:66:79:2A:B5:25:CE:E8:82:E7:DE:FC:DF:44
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:cd:ab:b8:36:93:c4:ea:ae:87:73:02:05:93:6c:01:c2:
ae:9b:68:dc:b4:35:da:30:d0:66:fd:99:47:d0:39:d7:e3:65:
e5:e2:23:a0:7a:1b:88:a4:15:b8:cf:7b:c6:cb:8b:46:d6:6b:
0c:67:0e:b4:95:9c:77:63:c4:fa:b6:1a:64:d4:d2:c4:cf:df:
5c:66:90:a3:aa:03:a9:7c:ba:1e:c8:92:a6:ba:45:30:40:d0:
97:cf:38:5d:52:f5:84:56:72:33:99:50:81:b8:db:a0:66:63:
62:71:37:62:7e:f0:af:f7:dc:e3:13:bf:f3:6b:b8:ab:db:e7:
7d:6e:b5:c1:40:25:f9:29:a0:ed:3d:41:00:b5:d4:4f:c9:bc:
6b:e9:ff:3a:e9:a2:af:d5:f4:fc:82:62:5a:76:46:83:ea:3b:
66:96:2b:85:a8:8b:55:db:ea:f0:79:3c:2e:3c:e4:9c:c5:b8:
39:53:59:90:8b:43:6e:61:a0:96:12:99:ee:27:f1:1b:b5:4e:
3b:83:78:b7:58:35:03:24:46:c7:98:09:6a:b6:e8:a8:e4:90:
4c:57:05:21:e3:73:0d:b5:a6:e2:a8:65:1e:a7:99:c6:05:cd:
14:11:53:79:5d:8d:3b:c0:1e:ee:c0:31:59:b4:1e:7c:14:a6:
35:b2:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:50 2025 by rpki-client