Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: u7SVfoM7sVOdDlWAVUBy+4ZvKrPM9eahf43uILB/1lY=
Subject key identifier: D7:16:C1:25:C4:1E:B3:1C:B0:75:5F:2B:70:12:1F:6C:E8:BE:93:11
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 019A71B7CB388AF67B9D4F44A076B6105B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 07A5
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: BBTB5RPujGl79ncImstqS3JwAhLj3nRez5Gqq3HDp5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cb:38:8a:f6:7b:9d:4f:44:a0:76:b6:10:5b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=d716c125c41eb31cb0755f2b70121f6ce8be9311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:49:26:aa:7d:fb:7e:13:62:de:e7:de:e4:
73:48:14:43:59:3d:32:88:a7:9f:08:52:12:82:cc:
a1:2a:bb:6b:e5:13:ea:f2:ae:93:68:eb:d3:f2:3c:
58:32:0d:36:36:23:21:48:62:ff:77:08:b2:13:4e:
10:b4:44:f1:8d:b5:18:8e:99:3a:9b:97:f0:d0:45:
52:d2:62:38:12:1f:65:f1:b9:4a:8d:e9:0a:63:99:
bd:06:ea:2f:64:19:69:72:88:22:fb:bb:fc:7a:72:
ff:11:05:d5:d5:42:b1:40:c3:66:2e:e4:ba:28:87:
30:7d:ec:c2:08:7b:0c:7b:b6:69:f4:c4:de:12:2a:
02:e8:14:53:63:0c:f1:b2:46:e9:9d:d7:48:38:66:
15:67:5c:92:1e:32:46:30:99:79:e7:d4:26:63:ea:
ff:f4:ac:7b:76:89:08:da:8f:21:84:c9:25:f7:e3:
a7:33:1b:5c:8b:6d:69:d6:b0:69:be:cd:eb:b5:63:
a1:3e:b7:6c:02:c1:79:30:a9:64:f8:b1:73:7d:29:
2d:38:d5:94:4d:ec:9a:32:cb:af:2e:1a:da:8a:34:
28:2b:0e:7f:4e:16:89:ca:c9:33:34:76:1c:6b:71:
63:18:90:d6:ae:08:63:29:41:1b:19:ec:b7:ac:92:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:16:C1:25:C4:1E:B3:1C:B0:75:5F:2B:70:12:1F:6C:E8:BE:93:11
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:c9:94:c8:17:77:ee:54:de:9a:e4:50:e0:1d:37:62:9e:
7b:5b:ed:ca:cc:ed:87:b7:7c:5a:3e:c3:0b:f2:30:d5:6d:fb:
0e:95:e8:db:90:0f:79:d5:d2:c9:1c:6a:45:59:8c:6a:49:04:
5c:b7:a2:b7:87:60:4d:73:cf:15:5e:0d:ff:61:5e:5a:3d:61:
3e:00:81:fd:c1:8f:6c:5b:33:fc:c0:ae:72:bc:f0:57:c4:d7:
40:c4:b6:b1:fa:c5:b8:76:a0:0e:be:5d:78:93:ad:8e:8d:b4:
c1:0a:cc:e2:fa:6e:5f:d1:b8:f2:5b:67:90:2d:fd:3f:9a:9c:
b6:2d:8b:c2:0c:01:99:b6:a7:50:cd:8e:b6:be:d3:ff:06:20:
0a:11:81:0c:8f:5a:97:ec:a4:12:5f:2c:40:25:9e:96:c0:bf:
71:ab:a8:d5:30:ec:9d:2a:eb:03:73:41:16:c5:6d:52:54:e3:
81:ef:71:e5:0a:8d:76:84:bb:f6:ed:96:cf:14:0c:2b:37:cc:
87:96:89:c2:89:f2:f0:3f:00:98:b5:0e:c7:1c:d6:59:42:29:
ce:a8:af:29:40:f0:5d:c5:90:71:5e:20:67:c2:bc:4f:1c:52:
2c:34:53:5b:d2:10:45:31:6e:31:9c:90:3a:9f:ee:fd:99:55:
01:a3:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:57 2025 by rpki-client