
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier: p5ZnDAOMs6TDGvPIiCY5BjXYnIVGL0qpDDu3d5vBA4w=
Subject key identifier: 48:86:2A:D9:26:BE:61:C2:AD:8F:BE:C1:09:A4:5E:C4:D2:D1:65:BB
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial: 019881D48C58586DA2A5D229C019307076EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number: 0F9A
Signing time: Thu 07 Aug 2025 00:00:46 +0000
Manifest this update: Thu 07 Aug 2025 00:00:46 +0000
Manifest next update: Fri 08 Aug 2025 00:00:46 +0000
Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: 47YWasSgbIbXB6RRbd6TDf9ipMml1m920wWHrGIV0Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:8c:58:58:6d:a2:a5:d2:29:c0:19:30:70:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Validity
Not Before: Aug 7 00:00:46 2025 GMT
Not After : Aug 8 00:00:46 2025 GMT
Subject: CN=48862ad926be61c2ad8fbec109a45ec4d2d165bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:72:c2:35:18:28:21:14:d1:75:8f:b7:c9:
5f:fe:55:68:64:74:5e:36:68:af:23:80:f0:de:45:
84:9f:38:83:d0:d9:c6:fe:e1:6b:56:a0:cc:f9:3f:
df:bf:3d:02:ec:9f:e9:60:9d:a4:6b:a3:d6:db:ed:
f2:83:19:bf:6e:68:86:ad:a7:20:95:a0:c7:38:4e:
6c:5f:a0:27:21:e5:e7:b5:a4:9d:da:77:f4:4c:fd:
3f:27:76:a9:56:7d:ce:c1:34:6f:9f:a3:fb:07:a5:
04:7b:8d:7c:be:4d:89:7b:d4:a2:78:7c:5c:92:43:
87:55:16:a0:68:bb:b6:e1:36:f0:04:ad:ad:18:40:
79:d0:f9:78:42:45:c7:bb:f5:32:7c:ea:96:f8:40:
ed:ec:60:da:f8:fd:a4:e8:c3:2c:28:fc:1c:51:d5:
fb:b5:99:c4:d7:b9:14:de:20:87:86:1e:41:fa:0d:
3b:b0:79:93:f5:42:26:20:14:b3:fb:ee:cb:cb:36:
c0:bd:f7:4d:e3:2b:fe:78:8d:31:30:4c:8f:89:61:
8c:94:77:93:04:58:0b:6d:ec:74:eb:06:8e:f6:20:
72:7a:8a:4b:cf:b8:d5:a3:fe:18:59:dc:8b:31:59:
f8:e0:c5:5a:50:c2:8a:b3:d9:bd:cb:57:25:2b:05:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:2A:D9:26:BE:61:C2:AD:8F:BE:C1:09:A4:5E:C4:D2:D1:65:BB
X509v3 Authority Key Identifier:
keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:99:66:b8:95:b0:90:98:26:d8:f1:10:9f:5b:d8:37:71:
8f:af:6f:04:ed:f0:28:70:c9:4c:a7:a1:77:79:5b:d4:a4:f5:
c4:a5:b2:7c:ec:3a:94:b4:84:46:13:1b:bd:24:d2:db:6a:68:
7c:e1:d3:16:67:a1:4a:25:ee:a4:3f:ff:50:5b:36:c4:14:77:
94:96:f4:7c:be:34:0a:4a:85:41:33:61:d3:17:a8:1a:6f:27:
c9:19:42:35:0d:c2:46:62:e6:77:eb:2a:b1:49:e2:1c:77:27:
e0:a6:ee:00:02:5a:c6:cd:22:31:2f:8a:9e:63:ea:48:e9:e6:
66:07:71:b6:20:06:a1:d5:94:70:30:0b:d8:e0:22:1f:c1:a1:
dc:79:c2:0e:95:49:6b:0d:a6:0e:9c:16:c1:81:bc:e3:62:6a:
41:8d:90:6e:0b:29:cd:43:f6:65:95:f1:51:ea:8c:92:75:29:
98:07:3a:1d:bb:df:e5:ed:fb:17:da:14:43:36:90:8d:cb:4e:
96:55:06:c2:74:ae:f5:ff:c8:3e:1a:99:57:22:84:83:e4:bb:
8b:70:21:71:78:85:c5:ca:c4:c2:e6:43:68:01:0d:1b:0e:27:
10:e3:07:5d:d4:ae:cd:92:e6:a5:d4:f1:ed:91:da:50:85:8c:
aa:25:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:28:52 2025 by rpki-client