Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier: 1C7O858xeMqUZOmKNyQQ7kjudftIQGnLNp9vmKGtI7w=
Subject key identifier: FB:DD:52:BA:05:B7:90:73:AA:91:AC:54:0D:8B:48:27:C5:E5:E1:7E
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial: 019A71133A7E91216AB44AB82DED107FC221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number: 05F5
Signing time: Tue 11 Nov 2025 04:01:16 +0000
Manifest this update: Tue 11 Nov 2025 04:01:16 +0000
Manifest next update: Wed 12 Nov 2025 04:01:16 +0000
Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: t03duBEnEDvYZRhTLG1hwPgNwS+Vtm8/MRIDNk8QTgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3a:7e:91:21:6a:b4:4a:b8:2d:ed:10:7f:c2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Validity
Not Before: Nov 11 04:01:16 2025 GMT
Not After : Nov 12 04:01:16 2025 GMT
Subject: CN=fbdd52ba05b79073aa91ac540d8b4827c5e5e17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:e4:6a:3f:c4:4b:80:79:90:1a:2e:db:93:
a1:5c:36:26:6a:1e:54:6f:f2:2f:8d:ab:54:ba:50:
c0:26:76:aa:db:da:fd:5c:b1:60:ad:6d:09:02:6c:
c8:21:be:a6:8b:d7:53:d5:59:23:b9:9e:e9:bb:fd:
de:f0:38:a3:be:12:61:88:8d:15:56:14:3a:73:7b:
f9:84:05:ec:48:50:f2:ef:cf:ce:eb:43:a5:96:53:
6d:68:86:d4:e8:8d:90:b9:b9:b6:7a:5b:06:67:bc:
d6:0c:52:1f:88:85:7b:b9:13:e9:81:ea:6c:10:f9:
15:75:ed:84:d6:c3:1c:07:9a:d8:7c:89:36:ed:33:
89:c6:bb:b2:bb:de:a1:88:9c:34:35:6b:c8:c4:eb:
8b:d0:8f:1e:a0:a3:0f:dc:c1:7a:ca:be:d1:b9:97:
db:6f:91:c0:ee:c9:6f:ab:8b:52:6e:66:61:f2:02:
1b:27:07:61:85:06:82:81:8e:f9:a1:42:19:2c:a5:
ea:f6:38:41:31:fe:ff:fb:20:88:ea:d9:43:1b:a0:
9e:82:7f:86:36:94:98:34:36:db:32:38:b5:e4:f4:
68:11:ac:69:53:46:b0:88:3d:d2:d8:de:98:69:68:
87:c4:6a:5d:0c:b3:a2:ed:39:87:a1:4c:76:87:0d:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:52:BA:05:B7:90:73:AA:91:AC:54:0D:8B:48:27:C5:E5:E1:7E
X509v3 Authority Key Identifier:
keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:08:05:19:09:15:91:74:3d:ff:c4:00:09:24:94:96:73:
43:56:5a:e4:da:bc:4e:6e:98:64:cc:db:ce:de:8e:a2:19:1e:
e3:ee:3a:18:ee:6e:81:32:9f:aa:2d:bb:e6:94:10:32:21:ce:
f1:4b:53:ba:90:26:18:5b:c3:be:08:13:75:27:fb:de:a9:bc:
6d:34:18:bc:4d:40:91:5f:46:39:fb:78:40:5b:4b:b7:95:c4:
23:9c:72:53:cd:52:14:4a:77:0e:f2:43:34:07:cf:af:b1:c2:
95:bf:2b:44:fc:e2:02:e5:95:d6:ae:53:e2:8b:ef:17:03:56:
2a:9e:b4:33:e5:86:e7:07:a0:f0:92:f2:46:0e:4e:c1:30:71:
a4:4a:03:39:94:be:f9:41:79:a2:59:c9:9e:90:e1:e5:af:fd:
7f:23:85:80:98:96:02:5b:3a:83:3b:32:a8:1e:27:0b:84:d1:
3f:04:e3:79:14:eb:5f:cd:25:1a:2e:58:44:7e:a3:f0:f8:ff:
5b:bb:af:8b:65:bb:7e:26:2c:6c:44:23:3b:39:0f:66:ea:b4:
15:6d:ec:f3:9e:35:25:de:50:b9:d3:ea:86:76:ed:bd:ce:8c:
6e:00:58:7a:2b:4b:44:07:e6:c6:56:9c:d4:ca:ea:80:d2:a2:
ff:7f:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:14 2025 by rpki-client