Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: Kn+P1sqlDAfQlnvJsk1JHb3KcbMSt9rkm3TRXIoskJA=
Subject key identifier: CF:B7:65:87:64:D0:EA:41:9F:F2:45:FA:F3:74:2A:E5:74:21:93:82
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019A4DE1741F7683A3B2AB29BD8DA9908E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 09DB
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: nXNLN5WYf9RuzYpTHZx5PZo+/ylivP4exyDP6lrJ/NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:74:1f:76:83:a3:b2:ab:29:bd:8d:a9:90:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=cfb7658764d0ea419ff245faf3742ae574219382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:2c:14:e7:99:4c:7e:25:ad:9b:80:5c:ed:
51:2b:48:b9:99:6f:44:55:64:10:72:da:85:fb:9a:
66:d7:6a:6a:e9:60:91:d3:b5:73:63:74:1e:ad:98:
12:8f:40:52:5e:dd:b5:b5:4d:48:32:53:a3:34:d8:
4d:9a:63:de:5d:73:2a:12:1b:1d:8c:1c:ba:de:a8:
c6:f3:eb:57:99:90:01:0c:92:2f:da:ec:6f:74:ff:
59:39:ce:c9:2c:d2:f4:f8:58:1e:7c:96:cd:40:5b:
ed:6f:64:96:38:4f:22:33:d6:28:91:b3:ae:e8:59:
34:66:d4:a1:82:f4:f2:eb:3a:28:b2:9b:de:cb:93:
e0:d7:ae:9e:e8:46:4a:f7:c6:11:43:bb:93:f3:82:
6e:5e:b1:36:66:78:2b:1a:50:20:9c:43:cf:5a:be:
a9:f6:dd:9c:89:69:c5:59:70:c1:63:4d:7c:b6:e1:
59:73:46:39:79:0a:40:5a:0d:54:74:8e:29:1c:64:
d7:04:20:9c:9e:06:ab:51:3f:97:04:db:c3:9d:5e:
41:0d:f1:ba:46:c8:fe:4e:bd:93:28:b4:c9:2b:16:
1b:6a:52:1f:7f:0b:d3:d4:0d:17:19:c3:c3:cf:d7:
12:dd:e6:8a:12:40:f1:ab:4b:7e:bf:77:56:97:e5:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:65:87:64:D0:EA:41:9F:F2:45:FA:F3:74:2A:E5:74:21:93:82
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:9d:d0:89:3a:93:22:70:a2:8b:07:52:4c:1b:87:d4:db:
ac:3c:9e:60:ae:6e:71:ae:82:96:24:a8:e7:fb:ca:3e:f9:7e:
18:a5:f2:8d:8d:8b:4e:77:db:e6:6e:a6:06:6d:1c:b8:a5:95:
a8:d4:5b:87:cb:26:83:4e:42:bb:ff:f2:5b:9d:2b:c6:e0:97:
4c:01:06:30:e5:0f:6b:23:80:ab:34:e5:2c:11:77:40:8d:66:
9d:8c:31:e6:e3:d9:4c:6d:ce:b7:30:8a:85:f4:32:90:d1:8a:
09:8a:06:fa:d4:d0:86:8c:1f:92:5a:74:e9:bd:ce:c0:af:48:
0f:fb:a5:ca:2a:c7:fb:07:b4:8b:fd:e9:22:e3:78:d7:fe:90:
03:06:4a:8b:87:c0:f1:2e:36:85:1a:9f:1f:17:83:a8:99:45:
c1:d0:fc:16:c1:d3:7b:96:cb:de:4b:9b:42:f8:34:e3:e4:a9:
e2:21:fd:7f:fc:f7:2c:86:7d:a2:be:d3:17:b1:c0:e6:27:55:
d6:b8:0c:41:54:4e:a0:db:c9:c6:de:62:08:10:70:d0:91:22:
58:cb:e7:8e:6b:0b:d7:ec:23:d7:f0:28:ae:7d:f3:34:8d:e7:
7c:a3:be:6e:11:8c:1d:a1:8b:17:47:35:2c:bd:46:65:cd:98:
88:06:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:52 2025 by rpki-client