Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier: fDp/agtLR4OBHqV0x7/tAUJa+ek8CkbsPOwmSTxg3Oo=
Subject key identifier: 99:74:2C:A5:AB:40:BC:11:65:76:12:C5:7D:37:BC:FB:83:DE:D0:4C
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial: 019921B19D69072606E4CEFE6A3B1E45DC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number: 09CF
Signing time: Sun 07 Sep 2025 01:01:52 +0000
Manifest this update: Sun 07 Sep 2025 01:01:52 +0000
Manifest next update: Mon 08 Sep 2025 01:01:52 +0000
Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: p8NoLkvIe8EKl/cvZYRNkEApGi6gM8MD0rWTzBdYilE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:9d:69:07:26:06:e4:ce:fe:6a:3b:1e:45:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Validity
Not Before: Sep 7 01:01:52 2025 GMT
Not After : Sep 8 01:01:52 2025 GMT
Subject: CN=99742ca5ab40bc11657612c57d37bcfb83ded04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:db:61:9b:9f:09:d6:63:17:ef:11:9f:90:
40:7e:60:5e:98:7c:3b:df:2f:7c:21:14:97:bc:2a:
7c:46:9f:63:ab:6e:dc:c7:20:09:8c:74:ec:5e:ff:
5e:6a:59:f5:c3:3d:33:86:94:6e:6a:99:21:8d:09:
7a:16:56:8f:f1:41:77:ea:f7:6e:e1:7e:8d:17:21:
89:83:66:16:b6:a9:a7:37:0d:b3:86:10:ca:75:f9:
36:63:3a:59:74:ea:6f:73:ef:fd:95:e7:18:47:c3:
0e:a9:db:4f:80:d1:94:d4:2c:c0:b1:4d:d9:aa:9f:
e1:f0:78:96:4e:ed:03:c4:e8:d1:c9:80:0f:4a:dc:
22:a0:a2:61:42:ef:1b:e3:dc:d6:aa:ab:ca:c9:5b:
76:11:84:bc:94:1a:d4:b4:0b:31:60:1d:53:1d:59:
e7:34:a2:1f:6f:2f:17:f9:84:7a:9b:79:f1:15:ba:
1c:5e:f5:7d:e7:f5:c6:58:a8:e6:88:a9:45:66:2e:
65:db:7b:c8:96:ef:80:5d:f7:e1:3f:38:52:0d:5a:
2f:0f:33:96:71:b0:fe:b0:1a:0c:bc:90:3c:d1:c6:
b0:ae:af:f2:d8:02:6f:eb:84:46:72:3a:43:66:47:
c5:0d:ac:08:b4:b7:ea:75:2e:73:38:ef:20:a1:52:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:74:2C:A5:AB:40:BC:11:65:76:12:C5:7D:37:BC:FB:83:DE:D0:4C
X509v3 Authority Key Identifier:
keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9c:36:a6:79:2e:fd:0e:1d:1f:47:24:6f:cc:70:63:42:9c:
a9:aa:be:84:3e:e8:6d:68:6b:93:1b:41:55:bd:46:b0:93:50:
21:8d:16:04:dc:1b:ab:d4:c5:d6:a7:ef:1a:cd:6b:95:95:af:
6b:f0:a7:79:84:46:47:40:ee:15:5f:b7:65:70:c1:ad:4b:dd:
45:06:82:f7:1a:c4:29:26:c8:ac:fd:1f:a6:30:37:8e:70:97:
59:93:0a:8a:04:31:3f:14:00:33:f4:d5:9f:5f:a3:f0:7c:bc:
ee:58:e9:3c:5b:c9:05:b1:82:7f:6a:88:ab:0e:1e:95:2c:61:
fb:31:8e:72:4c:56:75:ef:5c:c9:2c:b1:5d:de:e5:4e:4b:b1:
a0:a2:b8:28:27:35:96:a5:5d:7d:d7:9c:03:b9:dd:aa:57:a1:
42:44:60:28:67:1b:8d:69:1e:3d:e6:a7:ba:ec:8a:33:66:da:
16:c6:3a:7b:c3:73:f3:15:bc:c1:37:3b:95:3e:17:6f:55:c6:
b8:4c:f7:11:44:85:90:eb:1a:91:07:e6:a0:95:77:80:aa:d9:
da:cd:2b:f3:9c:75:93:9c:cd:a5:29:da:11:e2:ae:55:1f:7e:
2d:6a:b3:ea:bd:f1:12:1e:fa:1d:c2:e0:e9:bf:94:d5:ba:af:
36:8e:88:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:54 2025 by rpki-client