Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier: JESKQLdihDsewNprZXuAjvCmVde/h1DDxn3wP3KGVrg=
Subject key identifier: DD:BC:46:3F:9D:77:32:EF:64:8B:15:9E:FF:92:E8:73:68:AB:02:0E
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial: 019A71B91F37933885F3C84BC2236EAE8223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number: 03BE
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: /z1skO67vAGPJX7I7nEm+xPL+W/FWPOsxogYqL3+L1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1f:37:93:38:85:f3:c8:4b:c2:23:6e:ae:82:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=ddbc463f9d7732ef648b159eff92e87368ab020e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:16:58:b3:ea:e9:fd:47:8c:16:09:fe:a2:
9d:f9:43:44:76:04:5b:4c:e5:4b:d7:3c:5d:33:b4:
9c:f7:f9:34:09:10:0d:19:05:cf:32:91:97:2e:0d:
aa:4a:bd:cb:fd:99:92:3f:34:64:e6:61:04:3b:ac:
71:fa:7f:d1:e9:b8:3c:ec:7d:ee:ba:a2:03:57:e2:
19:35:66:2c:bb:98:55:f8:83:88:60:1c:d6:8a:ad:
85:00:b4:82:d6:c4:79:0c:ca:1c:96:46:93:6a:43:
a7:46:ea:67:0f:80:4c:11:f2:9c:32:06:4b:a8:c4:
12:f7:a9:ca:9c:69:8a:ec:3f:9c:c5:54:29:97:fd:
45:63:33:fa:c3:a8:6d:f1:05:c6:5c:74:85:cf:2e:
c5:15:b0:91:f6:8b:1f:70:2e:29:1f:2c:f7:93:03:
32:4f:87:1a:5a:25:ac:63:8c:23:70:0c:ff:e6:18:
56:ed:18:50:17:0f:10:96:a8:43:b5:13:d5:e4:73:
fa:26:66:03:ad:b8:4c:f0:76:b6:7c:51:c2:c0:bf:
08:0b:12:d7:97:40:e7:95:62:89:15:71:e4:f0:5d:
70:bc:31:ed:e1:57:dd:25:b7:66:c6:20:9c:a8:ef:
79:98:5d:55:7a:ac:26:e2:44:b3:17:dd:4f:7f:42:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:46:3F:9D:77:32:EF:64:8B:15:9E:FF:92:E8:73:68:AB:02:0E
X509v3 Authority Key Identifier:
keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ff:76:93:b3:5d:4a:91:85:ed:53:68:9e:06:cf:b9:82:bc:
31:de:fb:32:81:2a:05:f2:d8:8a:9a:ab:66:8c:13:5e:23:a2:
68:51:bc:f9:74:13:30:9c:23:cc:af:ad:62:69:47:d9:a4:b8:
c2:46:80:8a:89:50:b5:eb:ca:7d:dc:b4:05:51:5f:9b:f1:fb:
50:cc:95:f5:5a:0b:79:94:8d:7a:ba:f8:60:95:bd:43:47:e7:
76:d1:6a:4e:b8:c9:a8:18:15:2f:fe:5c:ee:6a:81:d4:01:20:
dd:c6:e6:2e:f2:05:c4:03:56:f9:a9:0b:0e:82:fe:9c:e7:93:
96:5c:b7:65:0a:3a:b1:29:ff:bc:48:03:75:e6:6f:bd:d0:6f:
a7:1d:e7:c9:0b:bd:48:3d:88:61:52:06:01:f7:d1:29:6e:97:
5d:50:f5:33:df:8b:b5:98:59:5f:b9:55:d5:43:25:a2:53:01:
e1:1e:da:3f:d1:9d:5a:af:86:7e:44:51:e4:82:e1:53:25:83:
b4:49:bd:7b:dc:60:f3:be:f6:a4:de:e3:4d:09:fa:40:b6:26:
4e:95:7a:2b:d5:dd:b3:aa:17:57:2d:34:d7:3c:6a:d7:64:82:
e9:88:c7:af:b0:52:66:4d:41:eb:bd:7a:d0:a1:0f:97:e9:78:
6a:2d:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client