Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier: o74e79cuQtEXhtXojjBiywJCH5WEe5DpGuVnIJDH5M0=
Subject key identifier: 5D:64:0E:7C:BF:1E:D3:FC:FC:9E:5C:E7:50:DE:06:20:8E:6B:A7:F8
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial: 0199221E8BE55B640CA7073AB5E2AB98B890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number: 093F
Signing time: Sun 07 Sep 2025 03:00:51 +0000
Manifest this update: Sun 07 Sep 2025 03:00:51 +0000
Manifest next update: Mon 08 Sep 2025 03:00:51 +0000
Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: /VpqglD1naNUzyuxzgi7qn/KeZtWdW3hmQbz+AouXf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:8b:e5:5b:64:0c:a7:07:3a:b5:e2:ab:98:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Validity
Not Before: Sep 7 03:00:51 2025 GMT
Not After : Sep 8 03:00:51 2025 GMT
Subject: CN=5d640e7cbf1ed3fcfc9e5ce750de06208e6ba7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:f8:c5:3c:63:84:5d:94:23:20:d5:f7:e9:
6a:a2:5b:b8:31:2e:37:32:3a:75:28:89:cb:1b:6d:
23:df:5d:e7:30:cf:ba:93:8b:fc:18:2d:07:a4:75:
c1:27:bb:42:f1:8b:07:8f:b5:0e:0e:a2:a5:0c:bc:
40:ce:ec:b5:32:3f:02:97:8b:d1:e0:18:2a:63:56:
f5:4a:79:d2:c9:aa:46:c5:9d:dd:13:f0:c5:3f:a4:
96:13:a0:57:f9:e7:28:3e:0f:f6:35:90:ed:63:5c:
c6:07:c0:a0:9e:dd:4b:a6:86:08:8f:6b:a5:f4:a7:
b3:83:ce:8c:4e:7b:25:8c:76:0a:8f:38:16:85:44:
2e:0d:07:b4:4f:26:9e:09:1c:13:9e:ee:86:3e:1d:
8c:66:c5:dd:2d:6c:75:22:6c:16:ee:07:14:a9:33:
e2:1b:4c:94:72:76:1f:7c:e5:94:7f:67:16:89:bf:
a9:da:b1:fa:c4:38:22:12:c5:e3:a0:68:24:a5:15:
76:04:a6:01:46:78:58:d7:43:93:8f:a4:6b:c7:4f:
70:e0:0e:89:70:ca:01:68:ce:db:1c:ff:f3:d1:e9:
20:d4:e8:13:3b:09:4a:da:8e:5e:0c:21:48:85:83:
85:2a:09:09:46:ec:b9:28:65:41:92:96:b3:f4:32:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:0E:7C:BF:1E:D3:FC:FC:9E:5C:E7:50:DE:06:20:8E:6B:A7:F8
X509v3 Authority Key Identifier:
keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:fd:90:d2:0d:f1:fe:0a:98:1e:45:63:b9:6c:eb:93:54:
22:46:ce:00:b8:53:72:9b:98:40:77:34:7b:bc:60:99:42:7a:
09:ef:b4:5e:36:4a:c7:79:c0:d0:55:2f:46:c4:c4:23:97:4e:
82:63:f6:50:6e:ed:69:fd:eb:e5:3d:b0:60:f1:21:78:3e:64:
3b:30:ca:89:99:1a:b7:c2:1a:d8:6f:ee:95:e8:ce:99:b2:d8:
6f:33:9c:b0:58:8b:a6:14:eb:6c:00:4c:be:01:2e:cf:f8:20:
5e:21:90:d0:f1:29:64:63:5c:98:a4:df:18:6a:17:9e:40:8e:
f8:cc:ea:1a:70:f7:26:2b:81:a3:85:5d:8b:60:ae:66:83:a4:
18:ec:94:3e:37:7b:79:cc:e3:7a:fc:ab:e7:9a:2f:64:85:fe:
8a:89:c7:ad:43:00:4b:1c:46:01:55:b6:04:ec:16:c8:5a:f2:
f9:ec:11:1a:e1:46:ce:f0:9d:b1:89:3e:69:98:2f:13:24:ec:
9c:21:ee:dc:62:7e:c9:40:c8:1d:5d:22:d3:eb:e7:19:c9:65:
81:73:5a:8f:94:ea:4f:2c:3a:c5:c4:53:97:fd:47:ab:fb:ca:
d2:8a:90:a3:5c:95:8e:d1:88:27:e7:be:a0:f7:5f:9f:8b:00:
5c:8f:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:38 2025 by rpki-client