Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: MBSrs9EYOL/zCV49WXlpIWeS2k+dEHV1QALB4MET/74=
Subject key identifier: 82:5E:7F:C3:56:9B:C5:5C:A2:F8:57:6B:32:49:14:5A:D6:46:52:D0
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 019A73015F4535D1B63EC599145EAA13E1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 147F
Signing time: Tue 11 Nov 2025 13:01:00 +0000
Manifest this update: Tue 11 Nov 2025 13:01:00 +0000
Manifest next update: Wed 12 Nov 2025 13:01:00 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: MzE0xc+Ved9l4PpyctTBSLOZaVjkWfX3Luu2DbPXDOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5f:45:35:d1:b6:3e:c5:99:14:5e:aa:13:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Nov 11 13:01:00 2025 GMT
Not After : Nov 12 13:01:00 2025 GMT
Subject: CN=825e7fc3569bc55ca2f8576b3249145ad64652d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:6f:b8:0d:63:4d:99:fa:56:32:75:a1:d3:
f1:d5:8e:50:24:7c:dd:86:6b:e7:66:e5:e9:d4:2a:
ad:80:37:c3:1b:ca:3e:23:9a:90:da:60:f8:6f:f1:
1d:00:f5:d2:c8:ec:dc:01:f6:29:7e:b9:b2:65:66:
d7:6b:73:37:cd:60:ce:ff:71:9d:f1:61:2e:e9:8f:
af:84:d6:d8:8c:67:53:d0:75:7a:ac:d9:f1:d1:55:
d2:59:bb:f3:33:2e:87:9a:62:97:f4:a6:77:64:66:
14:c1:2f:58:2c:e4:ad:b6:9c:c7:70:eb:09:72:9e:
ad:24:b6:ff:1d:dd:a2:f9:c2:aa:25:77:59:48:7c:
1e:da:3d:e2:26:fa:eb:5b:96:c0:b0:91:72:70:43:
47:dc:90:26:a1:ac:d1:74:9b:b5:73:2c:00:e1:35:
92:19:55:05:3a:cb:84:45:02:ce:54:5b:c3:56:a4:
4c:b9:83:80:93:5d:1f:35:45:89:12:2a:43:db:a2:
41:36:65:6e:bb:5e:6f:a8:20:b7:fc:ce:30:ba:cf:
99:ad:37:60:87:ce:97:6a:9f:87:8a:39:be:13:44:
a0:30:a5:7d:ce:2a:d3:38:ab:64:f0:35:05:b8:fb:
70:b7:f7:4c:aa:2b:98:4e:a8:5e:d5:cc:c7:b8:09:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:7F:C3:56:9B:C5:5C:A2:F8:57:6B:32:49:14:5A:D6:46:52:D0
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:74:7a:c6:25:39:db:30:16:81:91:9a:39:21:77:ed:8c:a9:
59:50:69:cc:c9:b5:d8:0d:4a:ca:17:aa:cb:4d:aa:9e:1f:8d:
b9:37:b8:91:fe:bb:36:9a:25:f2:0b:9b:d4:12:59:86:b5:85:
a2:2c:9a:f6:6f:9e:cf:78:0a:02:6a:52:aa:e6:b3:21:1d:ab:
fb:db:fa:f8:b0:d2:b2:d7:a7:5c:85:18:61:0f:ec:c3:2e:dd:
42:0d:08:b8:a2:52:43:0e:1d:4e:d6:fd:12:c8:13:67:ef:e6:
5d:8a:bd:0f:95:38:d3:e6:3b:40:6a:3f:66:e6:9c:c9:7f:47:
8c:10:5a:8c:2f:aa:8e:e7:10:ef:38:cc:5c:f0:07:61:41:b4:
bf:b5:0f:13:54:aa:27:24:45:fd:7c:4b:f3:98:77:4e:6d:93:
88:c4:8c:7b:1a:26:9a:a3:03:fa:e7:a7:ae:e4:08:42:b1:d0:
05:81:b9:3d:84:0a:9b:a5:72:44:26:73:ec:01:fe:22:c8:e5:
dd:b0:9b:b2:0e:74:df:79:43:30:9a:47:bc:e2:ef:48:fb:18:
ff:42:7e:28:5f:74:e6:83:37:78:10:4a:f8:38:51:e6:4f:73:
b4:ce:ca:17:da:9c:50:36:5a:e9:3d:55:aa:a4:ff:33:1a:c6:
b0:47:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:19 2025 by rpki-client