
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File: 7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier: /+M8GOSREQx0oaC7LW3DNQ8TWKxVKs9JqU1VIH6yKmk=
Subject key identifier: AB:22:9D:29:78:84:90:E5:16:10:B8:1F:F2:10:27:FF:49:77:31:30
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer: /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial: 019A4EF432DD836D89B17D6FC405CEEB79A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number: 16FA
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: 3y803dMWjGzzSuO48Z3AQPCzSby7Yy4insipRoXmq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:dd:83:6d:89:b1:7d:6f:c4:05:ce:eb:79:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=ab229d29788490e51610b81ff21027ff49773130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:b6:b1:09:42:37:3a:4f:6c:ca:04:83:6d:
bc:01:d5:ab:af:3f:fe:f4:84:c3:d8:b3:cf:13:a1:
a0:99:48:ae:36:ff:e6:ac:64:68:0c:7d:db:46:d9:
57:66:a3:06:5b:9a:5a:36:ff:43:e9:31:5c:0b:28:
c7:6e:3e:b3:a7:12:77:7a:29:fa:4f:e9:01:58:d4:
2f:c3:da:24:13:1a:d2:06:b7:9a:ca:69:7f:80:61:
73:c2:04:23:96:fa:62:ce:17:c3:54:41:c7:62:46:
06:ae:48:57:40:bc:2d:f0:22:77:35:c5:fe:6c:bf:
3a:87:bd:2e:02:2a:dc:16:ce:99:54:8c:0a:21:5c:
ca:e7:6a:2d:81:fa:58:a5:d4:20:0b:15:5a:e6:a4:
4a:26:a3:7b:fa:56:56:e9:d2:15:a9:ac:c6:3b:a6:
eb:75:5f:c1:77:58:eb:7d:2d:47:2b:03:7e:51:c2:
ec:c0:36:2b:c1:bc:4a:9e:bb:3a:56:a2:dc:99:e6:
83:15:e9:7a:89:fd:c6:8e:db:7e:e9:2d:83:82:76:
ef:f6:a0:f1:e7:fb:b4:3a:39:0f:3b:0c:4a:50:ea:
8a:20:be:d5:0a:89:8b:31:be:8d:6f:86:1f:37:bd:
fb:bb:11:66:e6:28:c8:b5:7f:12:19:04:8e:dc:26:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:22:9D:29:78:84:90:E5:16:10:B8:1F:F2:10:27:FF:49:77:31:30
X509v3 Authority Key Identifier:
keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:51:4b:92:b5:ef:9d:b0:48:94:da:be:52:39:c7:bf:f6:39:
e5:64:b2:ba:d2:e0:52:22:ae:4a:bf:e3:bc:fd:19:f8:c6:f9:
e5:d8:95:56:85:35:b9:cf:bf:34:4a:55:1f:7c:68:e7:13:93:
ab:38:8a:e8:92:5a:b6:78:10:2e:fc:80:f1:68:05:d9:6b:76:
23:08:9b:56:9b:ef:5f:6f:ab:23:ef:ab:cf:5d:98:9b:cb:28:
f6:84:7f:71:c2:27:19:d0:3b:83:60:db:19:88:46:c6:78:8a:
bb:e0:aa:d2:41:0d:0e:6e:5f:41:1d:18:50:48:ce:e0:c5:c5:
d3:b6:22:6a:a0:d0:16:ce:11:8a:30:3d:11:10:ff:b1:26:20:
01:2c:69:d5:9d:6e:ce:15:c8:a0:13:b5:53:f5:5b:29:56:f6:
c7:a0:67:3e:b3:ec:ef:1d:bd:af:54:e9:4a:ad:c7:16:05:52:
65:d3:2f:63:aa:b1:b7:a9:00:e6:ff:ae:c4:b4:ac:81:8f:7b:
5d:84:71:cf:a6:38:ad:75:a3:8d:cd:23:38:ff:f7:bb:77:58:
e1:e5:a0:be:ef:4e:1c:da:fc:1e:eb:57:16:ea:12:e5:ea:c3:
b9:7a:9f:8d:70:2a:1f:04:72:df:48:7e:09:0b:80:ab:2f:e6:
b3:97:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:14 2025 by rpki-client