Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: gLN5kM6sjQiHntn5GvsuHPykd99ZqgUvLRAjCnjH6uM=
Subject key identifier: 29:A4:C9:FB:7C:1F:DC:BC:0C:FC:6D:71:80:25:DD:CB:4E:A2:16:6B
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 019A71B8B06B6806763DC43AA1865B7CF716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 07D0
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: XXijynDEDIpcoLWUlKxXAM7Tujw48MtJEPeyuSQ8jN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b0:6b:68:06:76:3d:c4:3a:a1:86:5b:7c:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=29a4c9fb7c1fdcbc0cfc6d718025ddcb4ea2166b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:86:0c:7f:c6:0a:e0:4b:35:08:04:bb:89:
63:a4:19:55:96:c2:59:4f:fe:80:0b:9b:51:60:e3:
7d:36:8f:bd:a0:0e:40:c4:26:20:a7:d4:12:95:03:
29:98:c0:59:59:ad:c7:97:b5:ab:9b:9f:99:cc:d1:
66:dc:b8:a0:d1:02:4b:a5:48:84:2e:78:ec:9a:5e:
b5:20:a1:cf:84:79:24:82:a5:5a:40:76:0c:2c:17:
a7:61:ab:cd:a6:ce:cd:fe:ed:01:cc:b4:7c:7b:8d:
41:28:48:c4:6b:b1:d1:1f:7d:a9:57:02:93:73:1f:
c2:ec:79:07:da:f9:20:bb:c3:e8:c3:94:e4:84:38:
fa:a0:f8:19:58:86:60:3b:ff:5b:9f:4f:26:70:92:
ea:e5:4e:a8:c5:70:7e:1e:eb:36:2a:ff:98:7a:02:
10:f2:ae:78:a4:2a:8d:97:10:67:44:11:b5:69:27:
b1:43:6c:61:5f:78:3b:f2:d7:7d:f7:5d:ed:b7:e0:
28:77:86:d7:e8:33:6e:dd:50:35:b2:77:39:7b:c6:
65:e4:c1:2c:cb:5a:dd:62:8a:7a:57:35:98:02:47:
47:bc:08:36:a3:f0:18:b0:75:fa:b2:31:22:45:7f:
5e:0c:98:1a:f9:07:a9:72:4a:33:34:07:0d:4c:4c:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:C9:FB:7C:1F:DC:BC:0C:FC:6D:71:80:25:DD:CB:4E:A2:16:6B
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:70:89:7a:bb:e3:a2:fb:b9:61:1d:dd:5d:c4:c9:93:50:f1:
de:c8:1e:4b:1a:4d:3a:a8:de:78:39:ec:3a:97:86:8c:f0:ba:
26:5f:df:d5:31:4c:29:4b:5f:ec:78:cd:24:66:c4:65:57:81:
49:43:a1:10:ad:0e:74:a6:8d:e6:40:f5:22:a5:44:85:dc:9d:
c5:65:fd:8e:6e:96:56:ed:14:77:63:ba:bd:4f:b5:90:0c:36:
67:64:a1:16:50:ca:3c:26:bf:d8:19:ac:b3:65:f3:80:8c:53:
76:30:23:fa:70:f2:80:9e:0e:76:e1:69:5a:ab:10:65:29:48:
7d:8e:87:bf:d9:df:92:6c:e0:d2:91:03:4f:e5:6a:da:f9:d3:
e3:d2:d9:c5:95:32:d8:32:ec:4f:cd:56:4f:b0:be:6d:97:aa:
4f:76:bf:f2:44:bd:65:5d:09:d2:20:5e:f8:17:69:54:c4:0b:
3b:0d:7e:a3:6e:6c:ef:3c:02:5c:2a:47:5d:79:a1:80:5e:0f:
36:44:e1:36:23:46:8b:79:20:5f:c0:4c:a6:a2:6c:4a:0d:a9:
1b:42:f4:dc:7a:c6:2f:5d:6e:e8:9b:b5:b3:e9:19:f2:64:88:
39:b3:f1:15:e0:2a:3b:72:24:02:14:0a:7d:25:84:d3:1b:ba:
12:91:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client