
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier: hDw00qrlHT5LaPeeLDLe0RuLIETF1i7AFZY/HntmoNM=
Subject key identifier: 1E:B1:39:23:29:7A:A9:BB:64:4E:10:1D:06:56:4A:17:F2:69:A3:DB
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial: 019A4EF4DC1ECDA8FCEC854CCC8B8971E417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number: 1548
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: 3jrSDpUCfnhNNMUV4CuVOIUYx/UALxo5mkXGFYn27l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dc:1e:cd:a8:fc:ec:85:4c:cc:8b:89:71:e4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=1eb13923297aa9bb644e101d06564a17f269a3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:c9:de:a8:f7:55:84:ca:1d:74:6e:22:82:
b8:70:78:bd:12:a6:3d:e5:7a:2d:4e:df:5c:8f:73:
3f:a6:5e:0e:e5:46:09:c2:36:23:d7:53:a7:ff:df:
e4:36:ca:b5:5a:51:5a:9f:cc:e1:d5:be:92:a4:3a:
a7:e4:38:80:71:6c:5f:72:34:96:d8:72:cd:e0:4b:
cf:03:64:0d:47:8d:8e:47:45:8f:e0:67:09:79:28:
15:45:8e:bf:dd:44:fc:e5:4c:62:ea:fd:53:24:32:
d5:20:f9:7e:f7:9e:9f:c3:0d:28:e9:9d:69:be:1e:
2a:18:ab:75:22:5b:eb:70:0e:03:1f:c4:3d:b9:07:
94:5d:71:1e:8c:7c:8f:25:69:28:05:d1:be:a1:c9:
58:dd:89:c6:d9:fd:90:42:f6:57:c0:34:fc:58:78:
cc:17:b1:bd:a1:bd:92:83:9d:17:b1:e1:ae:99:3a:
76:d8:7c:dd:d2:ae:88:d6:76:c4:d0:fa:7d:c7:69:
4b:fe:4d:c9:cf:6f:6e:22:d8:33:5c:da:23:01:c4:
e6:8d:b2:43:2e:2f:65:08:73:48:7b:c1:a9:eb:2e:
53:fa:b1:49:63:4f:62:0a:5d:4b:f8:74:bc:f9:f1:
5d:b6:b8:38:6a:17:99:65:b0:77:b3:a0:0e:68:84:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:39:23:29:7A:A9:BB:64:4E:10:1D:06:56:4A:17:F2:69:A3:DB
X509v3 Authority Key Identifier:
keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:86:e9:b9:00:4f:d2:b6:fc:8b:6c:34:5a:2f:f4:e6:44:
85:4a:d5:68:2a:f5:de:83:ed:81:7f:ef:1f:61:aa:9b:a9:6e:
9d:a6:d8:1a:ad:2b:71:e7:c0:26:19:26:68:9b:75:82:df:66:
f0:10:50:fb:bc:b1:4e:16:d8:51:db:40:20:6f:17:95:61:c7:
74:80:e0:af:fd:1f:24:6d:a1:e0:c8:32:d4:17:6a:46:b2:32:
97:40:2e:d7:84:fb:4d:48:b8:a6:08:60:39:b2:fe:a7:11:fc:
28:b9:18:0d:83:d9:2e:7f:d5:fa:58:d3:e1:af:6e:39:ed:8b:
36:fe:12:0b:96:c1:94:9b:a7:85:19:47:04:ed:e3:e4:6b:4c:
4f:68:49:9f:d5:f0:79:8b:7e:ed:d0:12:05:1a:b0:a0:74:13:
e9:87:1b:cb:a9:65:f3:e8:04:3e:7f:a2:c6:16:9b:04:55:18:
d5:3f:42:79:c9:a6:2f:fa:9f:90:ae:ba:b6:3e:33:5b:32:c9:
7b:09:49:6b:7a:13:90:3f:08:c5:78:32:fe:f8:db:97:62:f3:
57:77:59:2d:7e:ac:d5:9b:29:7e:d4:4f:15:7f:7b:35:57:0b:
3c:4b:3c:f0:01:fb:0c:8e:0c:2c:8f:ad:a1:8a:6e:f1:fc:5c:
d8:14:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:13 2025 by rpki-client