Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json)
Hash identifier: BfH7IOiFmIrGHjNRI1lv7hu3CLE/nuckz6Aesg2fnoE=
Subject key identifier: 16:27:91:62:89:F3:97:B0:CB:3B:D4:F7:31:82:C0:66:61:8E:3A:6C
Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Certificate issuer: /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Certificate serial: 019A706E34B02A7A8815560A0296C5C05979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
Manifest number: 4D
Signing time: Tue 11 Nov 2025 01:01:01 +0000
Manifest this update: Tue 11 Nov 2025 01:01:01 +0000
Manifest next update: Wed 12 Nov 2025 01:01:01 +0000
Files and hashes: 1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: uCIGWInpJ4Q910DjOXAe4a0NFRO42uFl42XIuVZyoNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:34:b0:2a:7a:88:15:56:0a:02:96:c5:c0:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Validity
Not Before: Nov 11 01:01:01 2025 GMT
Not After : Nov 12 01:01:01 2025 GMT
Subject: CN=1627916289f397b0cb3bd4f73182c066618e3a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:59:04:35:c8:0e:ab:75:e5:3b:47:71:27:
93:b7:5b:9f:f2:c8:90:36:93:68:91:f5:df:76:63:
b5:f0:45:7d:7e:21:d6:d2:d6:73:b7:6f:11:5a:5e:
13:61:d2:60:c5:b9:4d:a9:25:a2:4f:0b:fc:d7:b7:
bb:cb:ca:1f:b3:65:7c:d0:ef:ed:5b:d7:34:ef:cf:
97:b6:b7:23:de:3b:e4:88:98:44:3a:b1:65:ce:70:
7c:3f:17:01:57:9c:6b:8b:46:a5:13:e8:49:90:53:
75:ab:26:92:9a:3c:4e:21:8f:2e:89:cc:ad:90:27:
10:f6:3b:95:f8:c2:6a:db:1a:95:5c:6d:c1:75:58:
83:17:e0:ef:8d:b6:e7:e9:8b:2f:c8:5e:c2:4b:79:
ad:2c:25:d0:dc:d5:21:fb:cc:e3:f6:a4:cc:43:f3:
0e:ac:97:35:e2:45:b9:72:47:ba:59:60:63:41:31:
d0:76:70:0a:1f:48:e7:37:db:e7:15:1b:3f:90:bd:
eb:60:c7:e8:4a:11:af:9a:99:0a:e4:4f:a1:1b:09:
53:3c:30:52:d6:c8:3f:d5:1e:04:f9:80:10:50:49:
0a:4e:2a:06:dc:b5:44:f8:b6:bc:ff:2e:5f:13:2d:
b4:0b:df:fb:2a:ca:b4:b2:d9:7d:d9:5a:2d:39:cf:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:91:62:89:F3:97:B0:CB:3B:D4:F7:31:82:C0:66:61:8E:3A:6C
X509v3 Authority Key Identifier:
keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e1:3a:b7:6c:4e:70:d7:09:a5:e2:dd:e5:cc:7d:df:b4:26:
da:5f:0e:06:03:da:59:d6:e7:60:c6:22:68:c7:8b:55:d9:bc:
7c:d0:4c:de:32:0d:46:1f:37:b6:99:4f:c4:c1:a3:55:ab:5d:
fc:05:67:04:9f:f6:f6:5b:59:20:09:f7:c4:8c:82:b5:59:33:
15:19:d2:62:e8:7b:3f:49:0f:0e:8f:54:05:23:ab:f4:97:4f:
9b:5b:4d:2d:ed:30:8d:76:9c:da:ed:fc:74:4a:93:a1:60:a4:
ee:e8:75:8a:98:aa:6f:9f:f4:a1:1d:e6:a0:23:a1:d7:89:17:
db:54:71:48:79:83:c3:d7:20:ab:c4:26:6c:1f:25:fd:29:1e:
e6:09:16:81:3a:a1:8b:e2:69:a3:11:09:73:84:aa:94:4a:75:
15:e3:c2:ea:94:4c:8f:34:4f:06:cb:41:c8:13:16:4c:a8:37:
b3:3d:d0:f0:65:6d:7f:7e:39:ac:74:35:47:ed:28:84:fc:e9:
45:c0:96:b0:1c:0f:ca:b6:26:73:1d:59:f6:e9:0a:fc:24:0d:
96:93:15:c7:f4:aa:98:a3:83:68:fd:30:7c:6c:71:a5:65:62:
ee:ce:d1:19:2f:da:fd:6f:fb:61:43:4f:6e:d4:9d:15:b4:45:
4e:49:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:45 2025 by rpki-client