
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: Iu4kd6lzjp9ePyEaGARZDPuuaOkFS8OnLfTiWXbRNnE=
Subject key identifier: 77:55:56:4F:78:C2:D3:4E:B8:15:25:D9:C2:4B:28:F7:9E:F3:9D:3B
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 019923A01B2FE21E920B996A7881BA7FE2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:01:59 +0000
Manifest this update: Sun 07 Sep 2025 10:01:59 +0000
Manifest next update: Mon 08 Sep 2025 10:01:59 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: 3JYlecM4Gqkndnms1DWKoyU3+FPjyFdetbRo4aOEJYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:1b:2f:e2:1e:92:0b:99:6a:78:81:ba:7f:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Sep 7 10:01:59 2025 GMT
Not After : Sep 8 10:01:59 2025 GMT
Subject: CN=7755564f78c2d34eb81525d9c24b28f79ef39d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:a2:1a:48:94:1f:0f:dd:da:ce:a9:80:f0:
9d:33:6c:fb:1c:6b:cf:21:af:be:38:82:ed:ed:74:
22:fc:5c:6e:84:34:79:68:a0:b6:95:df:70:38:61:
2f:04:d9:e7:d1:aa:97:fd:6d:0c:d1:25:c2:de:37:
37:c2:d7:f9:a9:5e:6a:d5:79:34:3e:74:e6:4f:d1:
fc:f6:bb:6f:24:f0:fb:d4:9d:86:2b:c8:bc:01:52:
3f:64:15:a4:14:74:d9:97:df:87:8d:83:16:97:0f:
3c:f0:44:e3:0c:68:78:e9:99:3f:bf:06:2a:a8:b1:
86:52:ea:3e:8f:f2:10:42:bc:b5:3a:15:0e:1a:1e:
f8:63:35:a0:c4:d9:4e:d4:09:1e:77:1b:a3:db:14:
0d:e5:85:a6:39:c6:1b:ed:ef:75:ed:9a:9b:4b:0d:
91:fe:44:0f:18:63:08:2c:9f:dd:10:9d:dc:0b:cb:
3b:21:7d:e9:1c:a2:42:30:d3:2b:74:24:8e:50:49:
d2:a1:f3:27:b4:1d:f8:a9:61:a9:d2:31:da:c6:51:
8d:7a:28:1b:7a:8a:a1:e3:a9:a2:f6:0f:99:aa:8d:
4b:f6:55:97:66:8d:ea:0d:54:8a:a0:2f:7b:0d:d2:
5c:3c:b3:69:61:61:50:6a:94:2a:1c:8a:22:ae:27:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:55:56:4F:78:C2:D3:4E:B8:15:25:D9:C2:4B:28:F7:9E:F3:9D:3B
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:98:4a:2e:8d:75:b0:1d:7a:1d:47:5f:02:06:b8:5f:46:7d:
03:96:77:dc:39:1f:f5:64:96:32:94:ae:65:b0:f9:61:d3:8f:
26:51:a3:74:16:f2:76:3e:22:6a:03:1f:0c:8a:c0:cb:4c:d1:
54:c8:f5:40:ae:e4:3d:73:1e:dd:08:56:e0:8f:98:ba:25:68:
fe:17:b9:6b:46:e4:8c:31:ba:e7:4d:63:61:28:8a:70:2c:39:
ea:fa:90:ef:59:74:c9:ff:95:a7:86:3a:27:98:19:f3:2e:a7:
83:4e:a4:e3:b0:ed:3a:32:28:6e:ce:c8:2a:33:a5:c5:bc:37:
28:a8:7a:06:1b:94:56:a6:df:da:b3:b4:d0:51:a0:c1:7b:d6:
ec:2a:fc:03:74:9e:93:41:73:90:86:8b:36:ed:da:ff:41:78:
cc:39:63:de:c4:7a:7b:c4:c1:9e:ea:41:68:a3:59:f7:db:87:
1c:a7:6e:12:50:b9:bf:e3:96:f4:8a:9f:f0:32:d9:14:10:6b:
07:0e:82:70:ee:8d:b6:85:47:c7:10:0e:e0:9c:39:4d:09:5d:
f0:55:fc:24:5b:53:9a:2b:60:d2:c6:9c:30:d7:97:8c:d6:6e:
30:14:95:c2:3e:47:e6:68:8e:cd:bc:fd:f9:42:8d:38:e5:4d:
0d:7e:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:21 2025 by rpki-client