Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File: j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier: XGupPGEoltAAM43CHHcMvHcwzjiSN5eEikQL4mEv0vA=
Subject key identifier: 1A:B1:1F:25:2C:60:85:1C:5C:86:D1:F7:E7:72:2D:45:DD:88:F2:75
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer: /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial: 019A71B86D6D47ABDC3A914A7A9695D3EA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: WhUtylTqdx8PP/KnN8PGMj+l8y3o2TBVMyTE/LmAKBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6d:6d:47:ab:dc:3a:91:4a:7a:96:95:d3:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=1ab11f252c60851c5c86d1f7e7722d45dd88f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:c6:e0:3c:6b:98:25:1e:9a:e6:04:e6:ad:
ac:17:9a:3c:80:d0:1a:62:cd:b9:60:95:0b:63:28:
63:32:65:2f:16:55:5e:f8:93:d5:b1:4a:75:2e:a5:
d9:fb:e0:71:b5:15:1e:88:66:6a:09:46:71:94:fd:
a5:49:2b:ce:a3:53:8d:56:43:27:fc:b3:e6:27:ef:
4c:d8:e6:f8:24:07:e1:bb:22:60:24:5c:05:79:ac:
86:30:ea:e1:27:a1:b2:5d:cb:8c:fb:5b:e0:6d:11:
36:e3:7f:1b:8a:d1:a6:67:d9:ce:76:16:07:51:f4:
45:ae:59:ef:5f:8c:34:35:34:f2:36:06:a7:6f:59:
60:0a:10:d6:3d:c2:a7:46:e0:e7:2c:64:f0:71:50:
f8:d4:a0:fa:a9:f1:e1:ee:54:86:85:66:25:44:ee:
6c:6a:d9:52:9e:e1:61:e1:4f:45:6a:9e:08:4f:6a:
4a:4f:58:c9:cb:6c:dd:08:ed:d3:61:82:31:8e:e0:
80:62:bf:6e:45:a1:71:6e:15:98:c0:04:5d:3e:3f:
bd:cf:89:24:66:bc:b1:bf:6a:88:91:ea:f0:36:c9:
e2:b4:fa:57:d9:7d:da:ff:e7:e8:38:3a:33:d8:63:
07:ac:87:bc:c6:77:37:df:d8:3a:eb:23:a7:74:06:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:1F:25:2C:60:85:1C:5C:86:D1:F7:E7:72:2D:45:DD:88:F2:75
X509v3 Authority Key Identifier:
keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fb:72:be:c8:1f:f7:8a:17:4d:59:89:23:ce:93:44:1f:6d:
53:05:65:55:b0:de:aa:01:87:ce:a7:fd:70:1b:13:1e:e1:79:
42:30:52:33:a6:95:6a:f4:08:04:cb:28:43:9c:14:89:d8:c8:
6a:53:c1:c7:c3:d6:1d:30:d8:c8:c3:34:53:ce:dd:fc:d3:4b:
df:e3:e4:51:d3:64:52:c2:3f:6e:e4:76:fb:0a:9c:fa:c8:c7:
6e:03:88:46:2b:37:20:fa:d7:74:47:48:9d:03:d1:ea:bf:09:
2a:25:66:98:f3:55:65:16:29:3d:2e:e0:78:59:d0:38:40:00:
80:54:73:07:19:91:00:55:1a:07:f6:ad:4e:7b:c8:bb:83:63:
cc:17:47:bd:d5:fc:ff:02:ce:10:0d:d8:70:5a:4f:89:81:04:
05:f2:38:94:b5:16:75:7b:36:b4:22:e4:a2:ff:8b:f8:79:60:
1d:f6:0c:58:fd:1f:c9:7f:96:b9:35:02:4e:78:86:a5:9f:ef:
b1:b0:96:a6:8a:b6:e2:36:c6:86:90:27:ef:16:bf:9b:c5:37:
f9:7c:65:8e:f1:43:a6:0c:76:61:fb:4d:97:da:74:83:80:ac:
ff:3a:95:70:69:14:ae:5f:04:5d:cc:56:c9:22:8b:15:66:ec:
1e:0b:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:06 2025 by rpki-client