Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: ix9QAl0UV/3bqHW2Fad2bGUGqdcvFPeNsM7xrpw8B6A=
Subject key identifier: C5:B7:3E:60:FB:59:F8:8A:CA:5F:7C:98:B5:2A:D9:34:37:D7:B9:63
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 01989FA7F760158F74A43B32DDB651E55E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 12D5
Signing time: Tue 12 Aug 2025 19:00:41 +0000
Manifest this update: Tue 12 Aug 2025 19:00:41 +0000
Manifest next update: Wed 13 Aug 2025 19:00:41 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: sc0EhxW8/fevIVs/NGGhp0oqvZrVIkYBaMH4TPGXkQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:f7:60:15:8f:74:a4:3b:32:dd:b6:51:e5:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Aug 12 19:00:41 2025 GMT
Not After : Aug 13 19:00:41 2025 GMT
Subject: CN=c5b73e60fb59f88aca5f7c98b52ad93437d7b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:9d:f0:f9:79:df:bd:f4:d3:19:c7:5b:96:
a1:55:52:3b:f6:a3:a9:5b:09:95:48:a0:3f:9a:7d:
fa:3f:0c:f3:32:6b:93:63:92:0a:0f:21:23:00:2f:
6a:0a:83:e3:70:aa:ab:aa:a8:49:bf:87:60:4f:b8:
80:63:55:d7:3d:2f:28:47:55:91:0b:4e:5c:5a:15:
7c:4e:48:d0:a7:98:34:9d:e7:2e:e0:9a:4d:e3:5b:
fc:c9:69:65:64:cd:ba:60:5b:b0:59:16:c7:58:1d:
16:82:5a:3f:94:b8:4d:20:6f:ab:78:11:66:7f:0d:
7c:89:29:c5:a5:64:48:0c:bc:31:1b:2a:b6:32:0a:
cc:a0:86:97:13:5d:97:6b:21:5e:90:98:d8:52:f0:
15:e2:07:68:1b:32:61:a1:3d:68:85:1f:cf:a0:03:
fd:aa:65:56:8d:84:21:f6:43:1e:41:e4:c8:54:a1:
94:b6:93:a4:90:6a:dc:24:b7:3f:da:58:67:0b:24:
74:3f:59:a1:29:a0:b4:60:0a:1e:bc:40:33:c9:8a:
05:38:7d:1b:8b:d3:43:2e:34:6f:ae:3d:8a:ce:54:
27:18:e9:74:ac:43:c6:bd:33:58:ea:75:1f:b2:7c:
3a:3f:57:8b:39:42:75:eb:4d:3d:7f:15:b1:8f:48:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:3E:60:FB:59:F8:8A:CA:5F:7C:98:B5:2A:D9:34:37:D7:B9:63
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1b:d0:a2:4c:90:23:9c:c1:e3:e2:a9:a9:2b:d5:9f:6c:15:
0f:5b:cf:45:15:9f:b2:d2:87:1f:b4:af:ef:0a:f5:a3:50:e3:
ec:c7:29:d4:ce:cf:a6:2b:b2:9f:97:e3:f7:42:96:7d:cd:0e:
53:04:70:b4:31:34:2c:90:70:b6:0d:ea:33:8f:fd:2f:22:42:
d8:6d:85:a5:a3:15:7f:14:f9:f9:55:98:13:10:16:49:2b:11:
52:34:66:a3:69:82:b5:1f:fc:69:d0:01:e3:69:33:f7:34:34:
b7:62:04:2c:b4:9c:48:de:84:bf:22:c2:78:f8:0f:1e:9e:b9:
fb:12:0d:0e:51:af:8b:8c:d0:8f:d0:c0:d2:3b:09:cb:db:dd:
9d:58:81:14:b0:36:38:cc:e4:94:6b:22:f9:22:3e:7a:9d:9e:
22:5e:d7:91:83:a1:bf:62:f3:1d:ee:ee:4d:af:15:d0:e2:6a:
94:c4:8c:63:b7:00:33:18:d1:8f:49:e4:9f:89:ea:f6:66:aa:
83:66:49:cb:fc:b0:25:35:16:a4:97:87:91:b8:09:97:b8:68:
4d:e2:55:7c:7a:ea:1f:44:62:36:98:04:97:db:bb:5a:4b:27:
d9:d6:05:af:b6:30:e8:a7:22:f8:74:09:92:28:11:68:7a:ba:
ec:be:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:39 2025 by rpki-client