Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: Y6mYjkPNGN14Q69u2Ct01TVLYVG08i6tOmno32zqAdg=
Subject key identifier: 71:E3:44:D5:E0:1B:2A:E8:87:07:9F:C4:7A:99:CF:73:73:54:ED:FC
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 01987C0A55220AB6A977CDB22DCED479DAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0D18
Signing time: Tue 05 Aug 2025 21:01:48 +0000
Manifest this update: Tue 05 Aug 2025 21:01:48 +0000
Manifest next update: Wed 06 Aug 2025 21:01:48 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: UP5JKibSAxaa8bbQtyV6kW4dEGfqxDt6puPp6uj1BxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:55:22:0a:b6:a9:77:cd:b2:2d:ce:d4:79:da:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Aug 5 21:01:48 2025 GMT
Not After : Aug 6 21:01:48 2025 GMT
Subject: CN=71e344d5e01b2ae887079fc47a99cf737354edfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:ef:14:3c:fa:5e:9b:7a:25:fb:d9:da:67:
d7:01:1b:6d:b6:a5:f8:fe:de:79:e2:60:09:35:5f:
87:1a:c0:a9:fe:dd:31:e4:b2:4a:da:97:07:72:54:
b3:ca:6f:3e:91:66:71:f7:24:6a:83:06:19:43:4a:
2d:c6:39:16:d0:14:29:18:8e:58:aa:71:e1:6c:16:
93:14:a2:1d:47:39:e6:da:07:2d:d0:67:ef:b2:92:
7a:56:7d:34:d4:7c:7c:91:d2:6b:9c:ad:94:a1:fd:
ff:4e:fd:5e:09:2b:cf:f7:bd:b8:8c:08:dd:79:43:
3c:72:0f:4b:e9:0a:02:70:24:e3:63:60:d3:85:82:
77:a8:d8:eb:11:19:e5:ee:a9:ea:f6:f7:f6:52:49:
b6:d6:58:fb:a7:35:2e:3e:ae:cf:5f:8a:bf:5c:e5:
53:cc:51:9a:cc:ae:ae:fc:56:49:72:82:fd:eb:c3:
48:20:11:88:40:df:da:74:c4:1f:c2:a3:57:23:08:
1b:f8:fb:bc:4c:2b:e6:4c:b5:f8:20:98:1e:d9:36:
8f:b6:42:be:38:1b:14:c8:90:ce:15:2c:c0:91:13:
4d:ec:b3:eb:f9:9d:f1:2e:c4:6d:7a:66:c4:3e:8b:
b8:cd:24:93:b4:be:06:02:03:89:28:51:5c:36:e6:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:44:D5:E0:1B:2A:E8:87:07:9F:C4:7A:99:CF:73:73:54:ED:FC
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:f0:05:30:e4:01:d0:ca:83:35:4a:d3:8f:0b:74:84:02:
d9:25:57:c5:73:29:76:ec:64:4f:b7:09:43:f1:4e:81:cc:04:
48:a3:15:2b:5b:fb:b1:28:a5:7a:3d:7a:36:b8:9b:a9:89:72:
61:a3:67:55:ae:06:41:c7:3d:21:2e:39:2c:f4:5a:1e:43:2e:
a6:12:8e:10:d9:dd:6f:3d:ff:af:a1:36:18:cc:a7:6d:58:07:
3a:8e:20:51:ca:54:e5:9c:57:d5:a4:bb:84:81:7c:2e:1e:a6:
f4:bd:a4:5d:f7:b2:6f:f3:f5:81:26:46:a6:3a:dd:d8:53:58:
76:c2:a5:b3:aa:c5:6f:cd:77:5a:91:06:22:57:ce:2a:87:d6:
a7:73:d3:96:1c:95:0d:26:62:ed:ab:c3:ae:b7:c4:66:91:bc:
25:99:9e:0f:49:44:3a:e5:c2:be:06:02:83:47:26:bb:84:ce:
04:0e:cc:f9:04:7c:5e:83:41:90:9f:76:ed:dc:b3:e3:25:3e:
5e:ab:c5:05:0c:ec:66:59:eb:92:52:f9:11:45:6b:74:1b:cc:
73:be:86:f6:25:1f:72:e8:c9:09:33:44:89:da:a5:fd:65:ce:
5e:49:57:8b:63:70:89:7d:1b:7f:59:31:cc:bc:be:39:e7:21:
08:f0:d2:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8ClUiCrapd82yLc7UedrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGVlMjg2YWMyNGM1ZjI1OWYwYTcyYjNiNDhjMjQzNmRk
MzRjZjcwHhcNMjUwODA1MjEwMTQ4WhcNMjUwODA2MjEwMTQ4WjAzMTEwLwYDVQQD
Eyg3MWUzNDRkNWUwMWIyYWU4ODcwNzlmYzQ3YTk5Y2Y3MzczNTRlZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGHvFDz6Xpt6JfvZ2mfXARtttqX4
/t554mAJNV+HGsCp/t0x5LJK2pcHclSzym8+kWZx9yRqgwYZQ0otxjkW0BQpGI5Y
qnHhbBaTFKIdRznm2gct0GfvspJ6Vn001Hx8kdJrnK2Uof3/Tv1eCSvP9724jAjd
eUM8cg9L6QoCcCTjY2DThYJ3qNjrERnl7qnq9vf2Ukm21lj7pzUuPq7PX4q/XOVT
zFGazK6u/FZJcoL968NIIBGIQN/adMQfwqNXIwgb+Pu8TCvmTLX4IJge2TaPtkK+
OBsUyJDOFSzAkRNN7LPr+Z3xLsRtembEPou4zSSTtL4GAgOJKFFcNubzWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHjRNXgGyrohwefxHqZz3NzVO38MB8GA1UdIwQY
MBaAFHxO4oasJMXyWfCnKztIwkNt00z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUt
MGIxNDFjOGY1YTNiLzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUtMGIxNDFjOGY1YTNi
LzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVXwBTDk
AdDKgzVK048LdIQC2SVXxXMpduxkT7cJQ/FOgcwESKMVK1v7sSilej16NribqYly
YaNnVa4GQcc9IS45LPRaHkMuphKOENndbz3/r6E2GMynbVgHOo4gUcpU5ZxX1aS7
hIF8Lh6m9L2kXfeyb/P1gSZGpjrd2FNYdsKls6rFb813WpEGIlfOKofWp3PTlhyV
DSZi7avDrrfEZpG8JZmeD0lEOuXCvgYCg0cmu4TOBA7M+QR8XoNBkJ927dyz4yU+
XqvFBQzsZlnrklL5EUVrdBvMc76G9iUfcujJCTNEidql/WXOXklXi2NwiX0bf1kx
zLy+OechCPDSFA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:39:26 2025 by rpki-client