Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: OhbXxoxl+nQ6074N93irl5jYklsdRw5wwPsp5dK3UKY=
Subject key identifier: 4E:69:DC:69:F1:AC:AF:47:A5:ED:74:A9:AD:B9:30:75:CE:E1:89:A1
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 019A4F994CB0DD8B139E818486E01A626FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 0502
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: BpT6sMeHZrbFOemFDEjAhv9c8j6TcF9fK+UEmrOwyVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4c:b0:dd:8b:13:9e:81:84:86:e0:1a:62:6f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=4e69dc69f1acaf47a5ed74a9adb93075cee189a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:06:84:87:02:79:f2:9a:c3:3d:86:59:3d:
c2:d2:3b:55:44:77:c5:b9:67:9b:5a:29:e8:d3:dc:
86:02:70:16:3e:43:23:61:6e:a8:37:f2:01:65:18:
68:cf:d6:49:74:27:37:83:d3:53:4d:ff:ca:34:4c:
70:f4:8a:59:ef:3b:d1:a0:7e:65:40:42:7e:73:b5:
4e:b9:62:fc:eb:5a:ef:e8:aa:53:68:b2:28:89:b2:
f6:70:74:43:3d:b1:27:3b:20:19:b7:be:75:a2:44:
b6:50:3e:1f:42:fb:be:89:d1:19:ca:9f:dd:64:63:
8e:66:90:08:f8:a4:0b:b9:f3:b6:30:1f:5d:0f:b7:
b5:6d:9a:c7:2b:d0:c3:26:24:e4:f2:62:6b:31:24:
f1:7c:88:28:63:5e:89:21:85:fd:0d:fb:ee:c4:00:
de:30:e0:41:41:25:f5:a7:da:0b:06:5f:d9:d4:4d:
aa:7e:aa:31:17:c6:60:a9:be:da:4b:a9:5f:28:2b:
ed:6a:eb:9d:cc:9d:14:be:74:6c:db:2e:8e:05:84:
83:f5:1e:cd:e2:b8:3e:1b:ae:85:63:4e:11:25:9c:
fb:d6:eb:e8:c4:a0:e1:3d:a9:db:96:a1:cc:50:87:
ac:52:9d:16:25:d8:8a:45:62:42:b4:1b:84:52:37:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:DC:69:F1:AC:AF:47:A5:ED:74:A9:AD:B9:30:75:CE:E1:89:A1
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2c:d2:16:a0:20:c0:09:bf:cf:bd:2b:50:ea:69:9d:b4:84:
5f:57:33:3f:55:14:4b:c7:91:a6:7e:45:5f:8f:1f:7b:75:3e:
b3:a2:fb:07:5d:d5:6e:b6:33:48:24:fc:c8:a7:1f:b1:d4:28:
e3:8a:a5:5c:92:a6:95:07:2f:7f:b7:9e:9a:38:09:aa:e7:95:
9f:e5:25:a3:9f:63:35:da:32:de:d1:00:9d:d3:bb:91:ae:d2:
a8:b6:6a:22:b9:e7:2c:a9:99:52:34:65:5a:e4:95:f2:6f:b9:
d3:8f:28:9c:61:8f:69:22:2d:77:4d:b2:34:3d:b3:87:a9:c4:
be:e9:ed:6c:f1:dd:23:67:91:7d:ff:f0:89:38:74:7d:ab:0a:
4c:e9:0f:8b:52:fc:0a:48:fd:4a:0b:fa:d7:a0:0d:77:71:42:
41:ed:44:f3:3a:0f:46:3b:6e:e0:cc:47:f7:59:f4:15:b4:72:
34:75:d0:63:26:2a:06:ac:85:26:5f:14:df:02:11:91:5a:75:
2f:72:19:52:54:33:c8:9f:43:14:32:ed:31:d6:f8:d6:00:87:
2c:e2:2d:eb:16:ce:ef:13:48:cf:a6:41:34:63:7b:52:81:f0:
e4:fe:cd:34:bb:92:a3:b6:9b:cc:e3:7f:fd:a6:97:d4:f1:8e:
23:70:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:11:46 2025 by rpki-client