Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File: 7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier: wPrx3mx06U+MaZd+VbqvuLY0Ix6c531q8EHPCcLpWPQ=
Subject key identifier: 0E:A5:68:67:E1:A6:85:58:A9:69:F7:CC:69:98:D9:03:BB:40:12:89
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer: /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial: 019A2855F84E41E065D47051633719FC4BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number: 1127
Signing time: Tue 28 Oct 2025 01:01:53 +0000
Manifest this update: Tue 28 Oct 2025 01:01:53 +0000
Manifest next update: Wed 29 Oct 2025 01:01:53 +0000
Files and hashes: 1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: yH6m41Q7mPcjnB77CdcO8hEd7vNGn/KbMfP9ukagDUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:f8:4e:41:e0:65:d4:70:51:63:37:19:fc:4b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
Validity
Not Before: Oct 28 01:01:53 2025 GMT
Not After : Oct 29 01:01:53 2025 GMT
Subject: CN=0ea56867e1a68558a969f7cc6998d903bb401289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:fe:85:38:69:ad:ad:ba:91:99:39:1a:14:
c7:81:dc:9b:17:1b:9a:56:76:03:19:e0:b0:6b:ad:
8a:a7:77:cd:42:25:69:17:75:eb:c7:df:18:02:95:
b6:f2:e2:47:d4:8e:f4:20:38:36:d2:ff:a3:28:a0:
ec:31:83:c4:db:0d:7d:ca:61:75:ad:af:a6:fa:06:
48:41:84:98:94:93:62:6b:7f:e7:6d:71:98:9e:96:
80:bf:eb:bd:28:2a:6c:2b:31:1d:ad:2b:9a:70:bd:
b4:7e:7e:14:90:2d:ee:19:ec:39:b0:7c:14:8f:56:
2e:b4:64:13:8b:ca:49:b1:55:82:d9:a5:41:7f:bc:
d8:98:78:9e:2e:81:f4:d6:17:a2:67:bd:9d:76:1c:
37:25:78:33:82:88:ce:c1:7e:2f:e6:39:22:29:c8:
49:4c:9d:78:14:dd:b0:9e:3e:93:3e:61:df:87:65:
a8:98:e0:4c:e9:33:ec:0e:db:27:4e:41:c8:9a:9e:
bb:5d:f5:7b:d6:78:61:06:a1:6c:e3:d3:19:01:2e:
9f:dc:d4:0f:df:4d:c5:a9:a4:06:1b:7b:36:31:11:
8c:e2:c6:56:cc:61:b6:da:ee:e4:70:36:00:2e:3d:
63:dc:9c:2c:b0:8d:5b:2f:20:9f:32:00:1d:fa:12:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:68:67:E1:A6:85:58:A9:69:F7:CC:69:98:D9:03:BB:40:12:89
X509v3 Authority Key Identifier:
keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:87:59:be:67:44:86:2d:04:0d:dd:cf:18:14:45:26:25:b1:
26:30:4f:78:7d:d3:9e:90:ed:6e:7f:4f:b4:d6:ad:d1:66:16:
34:de:b6:3c:80:a9:f6:3d:72:e1:5b:9b:d9:0b:34:44:06:56:
78:c0:ac:bc:8e:62:f2:d4:02:a0:a1:e2:fc:3f:97:ac:de:df:
68:d6:0e:f6:07:09:bb:01:10:9d:ce:12:4d:aa:0f:74:df:e2:
4f:34:3e:2d:24:92:71:fe:e9:fa:82:fd:c3:ae:70:bb:e0:b3:
a5:ef:a8:8f:bd:f8:3c:f5:d3:3a:50:41:cb:72:4b:6a:05:f1:
04:f2:83:04:cd:f2:25:59:10:0f:68:aa:27:68:a0:cf:fe:5d:
33:df:97:3f:2a:95:64:0b:c3:69:0f:fb:71:cc:5a:3a:0b:ce:
71:1e:e2:5b:d7:94:72:ea:7e:0f:88:3c:c7:0e:3f:35:5d:50:
f5:ba:4d:b9:35:9c:f5:57:c0:b9:f6:49:1b:d2:f2:82:9f:55:
3b:94:9c:8f:8c:b7:7d:79:2a:e8:ca:c9:47:16:db:80:62:47:
f2:1d:17:de:e0:f9:5e:0e:72:7f:93:11:f5:80:8a:23:38:ae:
9f:b4:7b:f9:62:f4:3e:ed:ac:84:0d:bc:18:a9:11:8c:c1:35:
8f:d7:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:56 2025 by rpki-client