Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier: gKNyPmlg8AJWf6hywWHdtIf/6dxkUqHLAkiZ+xrwLEI=
Subject key identifier: CB:86:11:15:8A:24:8D:D8:EB:42:EF:67:57:E8:09:A1:FD:B2:DC:BE
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial: 019A4D742A22240BB538A9F97042AE2EFBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number: 1088
Signing time: Tue 04 Nov 2025 06:00:49 +0000
Manifest this update: Tue 04 Nov 2025 06:00:49 +0000
Manifest next update: Wed 05 Nov 2025 06:00:49 +0000
Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: UV0rJI7HCnlJhXp0bNEpA28CIe1Duseug5Bjm862aww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2a:22:24:0b:b5:38:a9:f9:70:42:ae:2e:fb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Validity
Not Before: Nov 4 06:00:49 2025 GMT
Not After : Nov 5 06:00:49 2025 GMT
Subject: CN=cb8611158a248dd8eb42ef6757e809a1fdb2dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:c2:5f:a2:61:9b:3b:55:2c:b7:a4:ca:fb:
5f:5f:86:14:21:46:73:5e:22:a1:6a:de:19:91:fd:
13:6c:fa:29:45:4f:b4:36:b2:9e:7d:0d:f4:4a:ef:
10:9a:6b:77:18:c3:97:e3:cd:e5:6f:4e:97:20:44:
5c:31:01:ab:14:b9:57:b9:1c:30:8a:12:cd:d0:d6:
dd:9a:52:ff:7c:66:6c:81:d0:dc:3b:91:1e:3b:b0:
9b:f9:32:54:36:ec:d2:5b:f3:3f:9c:d9:30:bd:11:
57:0e:50:ec:f9:80:1f:6f:56:01:72:93:28:3c:34:
99:15:44:ca:de:43:cd:4e:6f:99:05:f6:fc:1c:ad:
57:6c:71:f2:31:45:26:a1:90:92:be:18:d8:dc:29:
ab:8f:8b:86:08:2e:99:90:c0:00:8d:32:a0:8e:c0:
3e:60:c2:c5:08:47:c0:46:e1:01:a4:a3:41:cc:3e:
89:9a:e6:aa:0c:14:7c:23:c3:6a:f0:e0:c3:93:bd:
f1:dd:03:48:2d:29:fe:88:89:d6:8f:f9:c2:89:91:
81:bd:bb:5b:b7:5a:00:2b:0d:53:60:b7:39:9a:29:
f9:14:3a:67:e4:6d:6b:1d:cf:14:a0:89:33:ce:dc:
7b:18:ef:f2:d8:0c:8f:a9:f2:4e:10:f2:b8:8b:8a:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:86:11:15:8A:24:8D:D8:EB:42:EF:67:57:E8:09:A1:FD:B2:DC:BE
X509v3 Authority Key Identifier:
keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a5:b7:ec:58:5e:c1:72:97:34:3c:55:a5:d6:11:21:4c:ee:
2e:8c:cd:f6:87:ae:ad:30:83:45:bf:30:6b:c5:64:29:69:ee:
ee:b0:08:57:a4:b0:fa:ba:97:45:9b:84:2b:fd:65:76:40:9c:
e2:6a:ab:e9:c9:4e:b6:f6:bc:a2:3e:86:ee:9d:e1:40:c3:88:
fa:2f:6c:3d:2f:3f:04:dc:5b:79:2b:d5:88:fe:7c:a4:8f:a1:
f1:c1:45:37:be:9a:c3:ab:7a:73:94:ed:ce:89:1f:cb:bb:be:
0c:31:2b:d2:29:98:6a:91:f1:5a:1a:ce:49:c9:eb:ea:f6:4d:
1d:6d:ef:5f:81:74:c2:5f:b3:0d:ac:76:ee:8a:49:04:a8:4d:
0e:9d:f4:d3:f4:e2:f1:73:f9:94:1b:53:d3:22:67:6f:af:de:
ad:32:88:8e:25:72:bf:a7:68:2e:44:54:4a:fb:58:2d:8f:4a:
4d:4c:32:07:d3:bf:7e:ab:a8:dd:1f:9e:ae:7e:0f:38:15:07:
2f:72:46:75:d8:2b:9d:e3:9f:e9:98:27:f0:98:74:5c:2a:d9:
d8:74:2e:6c:fb:46:ca:f7:1d:66:b5:0f:9a:f4:06:bc:86:f3:
0d:46:10:c2:66:48:c4:88:32:3b:36:37:98:bd:49:af:e5:3f:
60:09:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:07 2025 by rpki-client