Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: XeRTXiQ9tMj3IFTdFvcErA0XcGv+euH6JRg14zZU2V4=
Subject key identifier: 81:8A:C5:58:2F:B2:39:B6:51:D5:7B:52:97:10:BC:19:8E:F5:29:2E
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 019A4DE20BF57EC1B86BF0EE6D59139AD96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0B82
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: B5m+CZKPzvTw6K0PAos/bOXBIUatT9Sqt8gV9m/BHqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0b:f5:7e:c1:b8:6b:f0:ee:6d:59:13:9a:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=818ac5582fb239b651d57b529710bc198ef5292e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:5a:22:f9:af:6b:14:52:91:18:35:74:7b:
4a:66:ad:88:31:c6:73:9e:c6:0b:cc:60:46:cd:dd:
13:ee:8f:78:44:31:a1:05:08:29:3f:57:5c:80:51:
45:c4:7d:9f:89:ba:ce:f9:da:c4:ae:30:17:58:66:
0b:c9:87:d6:44:92:1b:03:59:e9:c6:c3:16:6f:05:
94:fc:1f:08:8c:34:49:f6:12:e3:df:7a:22:23:78:
ee:b8:51:09:51:87:11:12:ce:1b:3e:5c:73:76:db:
ec:7a:f0:92:0a:02:03:75:e0:b2:36:9e:d4:25:f6:
c3:a3:86:c4:c8:4b:93:ae:1a:73:ad:06:c1:37:68:
89:14:e9:c7:23:50:9b:d3:27:38:eb:91:0b:fd:53:
55:28:3b:8f:b6:a1:a2:b0:82:9f:e7:ef:c7:cd:a2:
84:4d:f7:46:f3:78:5a:7b:d5:41:ba:e4:95:12:1b:
28:74:29:1c:80:0c:4e:1b:d3:db:c7:d1:74:50:6f:
5e:30:61:92:ac:90:2e:88:42:5e:cf:fe:bc:8d:9e:
2d:44:81:bf:90:22:c8:2d:4c:77:4e:21:43:f9:af:
b8:f6:28:0f:99:04:9e:b8:fa:23:ab:d7:96:1c:48:
56:de:2e:d0:15:8f:a5:62:e2:86:15:26:42:4d:55:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:C5:58:2F:B2:39:B6:51:D5:7B:52:97:10:BC:19:8E:F5:29:2E
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a1:80:ea:ca:73:3b:d2:6f:e5:fe:5b:61:b3:25:ad:f1:fd:
e5:6c:28:06:b4:26:7d:91:1e:0b:44:51:ef:3e:3b:52:f5:30:
3b:ee:99:b8:46:eb:b6:e9:b9:8e:67:e1:62:43:85:77:f0:00:
7a:10:fa:46:91:68:fb:7b:3e:78:ea:96:dd:64:72:bc:b1:ea:
70:70:b1:d4:5f:7f:31:49:53:2e:32:c6:eb:c9:2e:f2:5f:16:
9d:6a:47:90:4b:3b:c8:49:50:4d:a7:f1:c3:82:bf:b6:6b:5a:
64:47:d1:36:86:43:94:c9:a2:4b:61:9d:43:0c:e5:25:37:d4:
76:9d:28:b7:0b:32:c6:f4:bf:ca:b0:5e:ff:8d:8b:ad:78:61:
39:9d:6e:db:3f:01:68:a5:bb:96:3d:39:9e:cf:40:1a:ee:20:
64:64:f6:78:ba:57:d3:2f:b4:69:8a:4f:f2:74:f2:1c:e5:d5:
9a:b7:7e:43:fc:a0:45:ba:21:c1:38:cc:0a:4b:3a:30:3c:d6:
ba:51:4b:a3:54:93:12:9e:1b:52:33:c8:10:b8:ec:84:af:40:
e6:3e:d4:01:88:d7:49:e1:b3:d5:56:f6:5a:a2:13:8c:9b:0c:
d8:54:c9:df:e7:bc:44:ab:d6:3d:e2:9f:dc:d9:68:52:2c:e1:
c9:f9:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:58 2025 by rpki-client