Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
File: e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json)
Hash identifier: +XYWp+WOoyx4TYPfkSvALdNQfiNW0A9sdSmOijy18IM=
Subject key identifier: AF:6F:8E:94:69:59:C6:C4:A9:9C:36:5D:1A:95:97:73:A1:3D:54:45
Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
Certificate issuer: /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Certificate serial: 019A71B88251DBDD1BA76FC23E713B044FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
Manifest number: 0B86
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: PJ/KkrrWlAxB3v1v6uC6BrgelCWvGO9YG54KtuXCHd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:82:51:db:dd:1b:a7:6f:c2:3e:71:3b:04:4f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=af6f8e946959c6c4a99c365d1a959773a13d5445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:ec:30:d9:79:21:39:82:ae:32:e0:a1:e4:
16:b4:e7:28:3c:3c:10:fc:cf:f6:4d:73:d9:76:a6:
8a:79:3f:3c:68:6f:b8:25:a7:00:88:74:0c:a4:5b:
46:73:3d:f8:f3:06:a3:2d:86:e4:45:31:8f:82:e7:
c9:be:c4:37:6a:b0:99:e1:9b:d5:85:14:70:61:84:
d2:fb:19:6b:34:9b:95:18:57:66:30:f4:c8:e0:7a:
3b:0a:41:dd:3a:5b:16:06:bf:78:41:8a:49:5a:28:
4c:30:af:0e:ca:f2:50:69:7e:21:8e:aa:c2:44:7c:
12:1f:8c:1c:23:a6:04:19:d5:3e:7c:41:5d:e6:0f:
34:22:8c:3c:1e:0c:df:cc:0d:34:9b:c6:7a:ac:eb:
31:bf:e2:9e:6a:9e:e4:d2:2e:8e:e8:da:dc:02:03:
02:6f:84:98:d1:79:19:7a:e5:88:3d:15:3b:45:e9:
7b:d0:6c:91:f9:f3:1f:d9:e4:33:4c:57:5c:2a:ac:
50:4a:78:06:08:f2:33:27:85:c4:bd:0e:d7:4a:56:
3f:48:cf:b4:41:77:22:dc:37:26:26:eb:dc:c8:2b:
7b:46:7d:8b:0f:fe:3b:1a:e1:88:48:13:a6:fd:30:
54:88:67:c0:2d:cb:89:41:fc:65:01:d6:27:7c:16:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:8E:94:69:59:C6:C4:A9:9C:36:5D:1A:95:97:73:A1:3D:54:45
X509v3 Authority Key Identifier:
keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:06:f7:b4:c6:74:04:95:eb:e0:89:5b:f0:f7:dd:67:70:59:
3e:31:31:54:a3:ab:aa:67:24:4c:8d:c2:40:5d:be:7c:c4:e3:
15:9b:38:81:ea:f7:b5:b9:48:aa:4c:dd:bd:37:42:15:67:01:
f4:95:fc:7b:02:46:8a:cb:12:74:77:bd:54:6d:51:5f:47:0f:
84:bf:07:85:e7:dc:40:1b:59:93:d5:50:e8:7e:55:4a:1f:12:
8d:fb:bc:86:fc:08:ad:6f:87:39:94:e7:da:cb:85:5d:aa:dc:
1a:af:97:54:db:7a:81:1c:b0:0e:7d:a7:35:ac:b6:8a:44:76:
ce:b5:66:16:ef:1f:00:03:92:04:a0:02:31:12:00:c0:3f:3f:
a1:0d:85:2e:c0:3e:8b:e7:e4:64:7b:e1:b2:84:13:2d:a9:0c:
64:32:ee:10:2e:58:dc:14:58:3a:f2:bb:7a:09:f4:28:20:b7:
5c:03:71:2b:33:28:a0:20:ba:0c:c6:30:f4:0a:89:d8:ae:c3:
8b:56:01:8f:eb:f5:f0:73:d6:72:b3:d5:c5:8c:a5:a1:56:4a:
05:12:af:43:29:16:53:b6:69:e9:40:5e:0c:5f:6b:a3:5e:d0:
51:34:8c:bd:82:d2:7e:57:5c:a0:d3:3e:68:f8:e4:ff:be:df:
df:64:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:35 2025 by rpki-client