Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
File: _u7-64gyDdP1gKaLWxzwpiQxBcw.mft (raw, json)
Hash identifier: rNGN55LskXskwIvNtHIWcJb9wSfNH9vlbUD9BN9kFKc=
Subject key identifier: 21:D3:B3:54:88:2F:8F:70:8B:CF:12:C4:C3:AE:03:07:75:8E:50:E8
Authority key identifier: FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
Certificate issuer: /CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Certificate serial: 019A71B90218A99BAD6EEE2A6C13F8619047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
Manifest number: 0ABD
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: _u7-64gyDdP1gKaLWxzwpiQxBcw.crl (hash: umTtofKP0aWHqVV3p5r56Gpd/WGHRYp16f+464Te4lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:02:18:a9:9b:ad:6e:ee:2a:6c:13:f8:61:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=21d3b354882f8f708bcf12c4c3ae0307758e50e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:98:ef:db:e4:46:de:f4:36:89:11:10:e1:
2a:fe:c8:3d:2b:91:1f:52:56:68:98:55:ae:1e:8e:
71:5d:22:6d:92:78:b9:c9:25:d4:dd:21:ae:e5:c1:
9a:da:bd:b0:49:a1:b7:28:26:ad:06:d8:34:36:43:
2d:8d:5e:79:38:70:1e:10:1c:f3:ab:19:a9:87:4e:
56:e0:51:97:2b:03:2d:d9:ea:6b:78:7a:1d:7a:96:
71:aa:c6:c0:71:78:ca:c7:1c:21:9f:bf:39:82:f7:
e1:83:0f:bc:34:c0:be:7f:29:8d:e6:e8:85:be:50:
f9:75:0a:7c:68:ed:b7:6d:0c:86:a1:9f:31:a6:3a:
66:aa:bf:8e:e5:44:91:b7:a6:60:8f:51:28:76:94:
f1:98:f6:d5:0f:13:22:fd:2d:8f:e4:e8:58:d2:87:
37:7b:2a:04:56:46:d2:75:a3:6b:8f:7d:47:20:33:
e3:26:82:4b:b5:aa:65:66:99:32:97:8f:01:91:5a:
18:b8:09:c7:b5:32:38:a1:57:b8:3b:33:c1:86:0e:
32:d8:f8:c3:b4:41:63:59:b7:82:12:44:9b:d6:22:
26:3d:c9:5c:8a:af:de:08:d7:dc:4a:e5:29:af:dd:
ed:cb:bd:3d:71:4b:93:02:2b:b7:c5:8a:dc:d0:01:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:B3:54:88:2F:8F:70:8B:CF:12:C4:C3:AE:03:07:75:8E:50:E8
X509v3 Authority Key Identifier:
keyid:FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ec:cd:00:c2:7a:56:9a:65:9e:aa:c3:10:13:2b:70:de:11:
ae:51:c7:65:96:97:f2:6c:7a:2f:b9:b6:7f:87:28:ef:87:9c:
bf:7b:3d:a3:4f:5a:d8:ec:1c:38:85:ea:b9:5e:fb:4c:cd:14:
b9:e0:cf:bb:4c:1d:6f:de:9c:25:d2:77:42:d3:25:30:f1:60:
b5:6c:65:5a:dd:f4:d8:01:d1:f6:3e:20:81:e0:0a:45:86:7f:
3f:b1:a0:76:ac:65:5d:fb:8d:41:15:78:4b:9f:7b:33:32:5a:
16:0a:17:00:b1:15:c0:e3:a7:14:22:21:1e:8e:32:58:2c:39:
5b:f4:88:7a:c8:d9:ed:28:39:77:b0:6a:4e:5c:83:7e:9f:c6:
00:a4:97:2b:22:b0:2d:0e:42:4a:c2:03:16:57:34:1c:2c:4b:
14:bf:bc:dd:65:2b:0d:c4:b0:31:17:db:c3:48:96:30:22:83:
81:3d:b8:be:56:ab:0a:1b:f5:e4:76:05:dd:00:3f:f4:e6:20:
17:d5:01:c4:80:32:75:58:ae:23:1c:d8:88:ba:df:43:41:82:
c0:7e:2a:45:d2:e9:a5:ce:72:99:03:bc:0b:43:c2:27:1b:b1:
9b:4b:4b:9d:a7:09:ed:e3:a9:7f:a1:14:44:39:a4:e5:01:0f:
2d:11:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:18 2025 by rpki-client