Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File: D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier: 7j9XbUA4nYETYhgt6mPWr6A27GfnorAhdUPaND0j+aA=
Subject key identifier: 4E:32:D5:C9:7F:57:6C:4F:55:40:BD:3A:75:40:05:4E:71:9C:6A:96
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer: /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial: 019A70A596D892E6C9F4E39F4C54B52F04B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number: 0879
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: UOSqMIChEf9AIbKHB7MEjgsyS0fLxLC/5mASC8c9kbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:96:d8:92:e6:c9:f4:e3:9f:4c:54:b5:2f:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=4e32d5c97f576c4f5540bd3a7540054e719c6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:87:81:51:e6:8a:73:e8:27:84:32:97:90:
fe:fe:10:57:fe:c2:2c:14:ca:fc:dd:96:03:90:79:
36:44:08:a2:b1:4a:5c:2e:4a:5e:72:4e:81:7b:3f:
92:01:2f:99:81:16:7c:30:99:c2:cb:4c:7f:7d:bf:
0d:b6:ab:f8:fe:7f:69:3b:b0:ea:6a:65:d5:d4:06:
f7:ed:dc:ce:b9:ef:c7:a1:cf:a7:f0:f9:d2:7b:cc:
3a:63:91:c6:30:ef:26:34:e8:b6:00:27:9e:70:29:
9a:19:8f:bf:36:62:69:33:cb:a3:81:fd:bd:d9:17:
77:34:71:67:28:d8:ae:93:e8:67:42:95:0d:16:c0:
e7:8e:59:3c:d5:ec:36:6e:4c:1f:33:80:66:68:55:
ac:41:e5:9f:39:de:b0:a2:00:cd:a7:4e:ec:94:f7:
75:cc:86:0b:2c:29:2b:78:07:da:6b:1a:54:5f:6c:
7f:bc:48:b5:0e:7f:13:17:a3:5c:9d:64:43:e3:37:
8c:24:e4:60:d6:ac:b7:bf:73:2b:bc:56:c7:11:76:
11:8c:9e:28:a7:b3:d0:98:39:32:1e:6d:54:80:8f:
d2:70:45:50:d2:eb:a8:97:96:03:95:b6:62:36:c2:
1c:39:5f:be:26:9d:99:53:be:4a:ec:d2:7c:96:f7:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:D5:C9:7F:57:6C:4F:55:40:BD:3A:75:40:05:4E:71:9C:6A:96
X509v3 Authority Key Identifier:
keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:1c:95:05:01:8c:e5:8e:30:90:ea:c1:af:40:0b:ff:ad:
96:f2:b7:2d:5c:05:27:7e:31:33:c8:b5:b7:2b:8f:8f:ed:67:
d2:2d:d2:37:82:55:fa:55:d0:18:3b:9d:30:32:1e:3f:f7:04:
aa:1a:6b:d8:d2:b2:f4:d0:c6:48:16:00:b1:a2:31:f0:f9:60:
a8:1f:87:2a:5f:dd:12:af:3d:c2:75:6e:63:34:f2:71:b8:dd:
08:7c:1c:8f:b4:82:98:de:47:85:bb:ee:95:50:c5:a7:da:21:
45:e9:33:1f:3c:28:35:d1:49:29:9a:88:1e:14:29:53:4a:5e:
92:19:0f:c2:f2:c6:5c:8c:c5:11:72:4c:bb:f9:5f:04:07:ae:
3a:94:c8:f7:01:ac:ed:b6:ca:9a:ee:8e:a5:2b:60:46:0a:4c:
6c:32:e1:07:7f:3d:68:e2:d0:87:2c:34:1f:04:92:d1:82:5e:
c5:7a:16:dc:d6:b4:f5:27:a8:a5:ad:a3:77:14:67:0b:8a:4a:
70:73:b1:0d:43:9e:ce:3e:8e:ea:40:fb:cc:6b:2f:3a:46:72:
0e:db:f2:07:b8:9c:bd:2e:62:98:b7:11:b3:9a:f6:f7:4a:39:
33:00:9e:3f:9b:f8:47:a2:bd:13:6d:01:e8:75:44:57:69:22:
dc:61:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:55 2025 by rpki-client