Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: +2WFcO/z+oveHDEmAn1O7IAXdoi9IpHrmS71j7puwrU=
Subject key identifier: 7F:0E:1D:BA:A2:96:F8:77:7F:A3:41:56:A0:5B:CF:DC:6F:18:8B:D4
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 019A71B8DB02ED28CA5D367DD98D62DB247E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0E7F
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: 9iYkXOS+01LuUQ/ZxklNsMG+gArf0oTyJF0fF7Cqujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:db:02:ed:28:ca:5d:36:7d:d9:8d:62:db:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=7f0e1dbaa296f8777fa34156a05bcfdc6f188bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:7c:ee:5b:ce:07:c4:b6:3a:eb:84:0a:d9:
fc:dd:c8:40:80:ba:2d:65:4d:31:c3:98:f3:dd:b1:
e6:a3:20:c2:2b:0b:85:e7:cb:70:22:d7:4d:c9:e6:
19:15:bf:37:f2:4c:6d:ff:d1:7a:6c:8b:e9:71:6d:
70:aa:11:65:89:51:45:79:9a:cc:6c:cd:a6:f4:c5:
99:4a:a6:a5:4d:c0:f3:f5:47:5a:a5:1a:55:c5:2d:
6c:71:0b:86:70:89:98:21:a5:3e:a7:3b:f5:e5:5d:
3d:0e:c0:02:ec:4a:76:a1:11:1a:0b:ef:ce:61:f4:
e4:fb:47:e9:21:f6:da:56:73:d1:b2:07:3b:2f:3a:
bb:f7:86:86:80:82:dc:d6:f3:74:b9:79:94:af:ab:
d2:2c:03:5d:9c:f9:a0:ab:94:18:91:72:cb:1b:f7:
23:d5:f2:57:e6:af:26:73:ae:02:3e:7b:ad:8f:d0:
9f:51:3c:62:49:0c:b5:b7:cb:20:3e:16:96:69:5a:
cd:f4:5c:1b:91:11:b9:8c:61:0a:7a:32:c2:ae:52:
7b:1b:a3:ae:36:1e:5b:5b:08:b1:bf:9e:ab:e2:b2:
b6:d7:40:3b:b1:73:b2:2c:a2:4d:23:e9:26:5c:45:
d1:03:fe:0e:16:c3:bf:44:f0:82:8d:2d:d5:4a:86:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:1D:BA:A2:96:F8:77:7F:A3:41:56:A0:5B:CF:DC:6F:18:8B:D4
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e9:ca:7d:2c:6a:5f:5e:52:4b:81:c9:3f:e4:80:2f:0b:15:
08:58:fd:60:29:a2:d2:ea:09:31:7a:8b:6f:1f:0a:93:0f:f5:
c3:79:e6:73:ce:da:45:82:a9:30:ec:b8:5e:ab:a3:c1:08:c7:
eb:d5:c0:f7:59:05:15:06:24:0d:d0:0d:03:aa:da:e2:ab:68:
1b:4f:a7:f3:bb:1d:0c:54:73:a0:2a:6d:78:6f:71:3e:7f:db:
5c:a3:ac:b3:33:b4:ea:69:66:ed:fc:ad:34:94:51:8f:68:f6:
79:11:bb:63:67:c7:e2:58:ab:ae:b4:38:91:72:6b:81:3a:c3:
3f:86:a5:79:0a:d7:74:79:01:a4:e1:69:85:97:c0:0c:10:34:
53:c2:43:8d:65:e4:47:fb:86:b4:54:88:70:fc:ca:f3:c6:f0:
f3:58:52:eb:96:ae:ff:d9:bd:1e:33:72:2d:13:f4:2d:b9:1c:
73:f1:55:2e:8f:58:5d:a0:2e:25:f2:1f:a4:1a:a7:29:51:00:
1a:39:7b:f6:9d:ea:d4:47:5e:96:68:11:6e:e9:08:9d:df:88:
9c:9a:a2:99:75:79:27:93:c6:e5:c9:32:b2:79:6a:20:c1:a0:
45:f6:34:4b:36:82:73:58:89:b6:ff:f2:d4:f8:67:64:d9:d1:
9d:ec:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:49 2025 by rpki-client