Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File: 7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier: UyboRYeSNhrIOCfLVmB3pXtn6xEg6gwxBxNQnQCMQ4w=
Subject key identifier: E4:91:D6:52:21:20:78:18:78:9A:A0:30:65:DD:66:AD:AB:2D:7E:CB
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer: /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial: 019A71B842BFF1E9A5A51DC988A8CCA50E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: HDxlFl71g5RQMVieZPiVWAkqkGvDXCOmoW3Aehvb8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:42:bf:f1:e9:a5:a5:1d:c9:88:a8:cc:a5:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=e491d65221207818789aa03065dd66adab2d7ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:c9:d0:03:80:a5:a8:25:1a:32:29:5c:71:
f0:83:af:cc:35:ee:cf:53:71:d2:bf:ba:9e:13:42:
a1:1c:26:2c:d1:52:ea:da:58:fb:73:8c:cf:d2:b3:
81:2c:1d:f2:7f:fe:5d:2b:03:2f:83:60:5c:25:44:
93:3c:15:fc:33:92:34:86:1f:25:6c:c9:99:e2:4a:
3e:10:62:2a:9e:84:e2:03:f1:ba:8a:dc:e0:48:8d:
d3:b5:10:2a:85:01:84:cd:6c:4c:65:16:af:c3:b4:
ad:45:3c:ff:b2:7b:dc:46:5f:f1:ad:5a:16:56:c2:
c3:03:4f:dd:a1:af:d9:e2:e6:cc:49:3b:15:00:88:
de:a4:23:48:e7:53:d8:01:2d:a6:2f:62:98:8d:2f:
2a:61:92:c4:97:22:1e:60:8e:44:99:81:1f:cd:31:
30:7b:c7:a2:d2:45:ab:04:18:b6:47:83:4e:ed:3c:
5d:36:6e:57:75:c1:9b:19:9e:1e:9b:db:7c:d4:48:
f2:4c:8b:1b:b7:05:1e:4e:6d:d9:e4:b7:8f:45:fe:
27:e0:74:ef:fb:ab:a3:66:b1:9a:8b:0e:db:67:d3:
79:05:bd:71:7e:98:5a:86:4c:02:aa:4b:46:4a:20:
09:71:08:e5:60:42:73:bf:68:6a:10:1b:31:33:88:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:D6:52:21:20:78:18:78:9A:A0:30:65:DD:66:AD:AB:2D:7E:CB
X509v3 Authority Key Identifier:
keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:27:f8:b7:46:40:70:de:4d:e2:3b:54:75:1e:82:da:7c:
0d:f6:7b:61:68:1f:ef:f7:15:82:6b:b1:e8:e6:ba:6a:0b:b5:
97:82:69:34:8c:bb:b5:e7:c6:8b:b0:20:61:e4:74:5d:2a:1e:
01:85:e1:b5:34:7a:ac:c2:95:eb:5b:fb:64:26:53:8a:17:ec:
14:33:a9:d7:97:91:17:41:9e:e4:d6:bd:85:13:aa:d0:62:bd:
15:92:57:32:3a:c9:04:e0:5e:f8:ca:ab:7b:f8:9a:d1:19:8c:
6c:c5:ac:d1:56:6e:23:b9:29:ce:0a:ce:ef:45:03:9f:44:c0:
51:c0:a0:16:3b:c4:b7:95:80:21:4c:53:b8:12:da:72:d1:f2:
9b:07:85:c9:5e:d0:a6:50:54:3f:ed:e2:c2:33:3d:c8:57:6e:
e8:8d:bf:3b:61:d5:9d:7d:b0:77:cc:d1:20:ed:82:30:ee:43:
37:c7:9e:0d:5d:a2:80:e3:bc:41:fb:fc:b5:51:8d:50:fc:94:
a6:ec:1e:24:e9:22:87:15:c0:d0:cf:94:28:75:2b:a8:bb:96:
f7:5c:7d:07:7c:6e:8a:84:a8:15:a1:d1:f8:f9:2f:fb:11:3b:
c4:64:4e:99:ed:e8:5d:41:e8:99:f5:ca:14:d0:da:59:e0:df:
87:a0:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:15 2025 by rpki-client