Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: xij1XnUxYDxoXjmeNqUYhF8SaLggj7jZkO3UHBhdTOE=
Subject key identifier: 0A:68:3C:A1:C1:3A:EE:49:54:61:02:3C:0B:53:02:F7:29:52:61:CB
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 019A7225C079087A0F40F2C995D852ED6966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 038B
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: SD5LSgHxO0OkIUZObTmyKZHvtGjUToyHbmKfopOOUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c0:79:08:7a:0f:40:f2:c9:95:d8:52:ed:69:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=0a683ca1c13aee495461023c0b5302f7295261cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:90:3b:0b:f6:2b:49:48:d2:f5:17:ca:d0:
ad:37:2a:56:25:86:cf:22:95:6a:4f:1e:68:7a:fa:
bc:d2:85:ad:e2:00:c0:5f:b6:e8:83:49:4f:d9:e9:
78:ea:9c:10:d6:63:c4:9d:81:90:cb:2f:90:0c:6f:
60:e6:63:e2:d0:ef:a0:b9:8f:c4:bb:fc:89:fb:6c:
61:c2:1f:a2:0a:3d:e0:3e:0f:f0:ed:04:27:a8:a3:
21:82:8e:c4:12:7a:c4:2b:42:4e:14:1d:a6:ee:96:
e2:e5:d8:24:a8:86:18:b5:ed:8e:6e:c7:59:b7:c5:
e1:31:f1:3a:66:cb:de:da:cf:e0:35:75:6c:65:f6:
4d:25:0d:f1:52:d3:54:84:93:ee:bf:1b:d1:25:4f:
5e:1f:df:da:f5:8d:b5:e3:a4:f7:1c:e5:ea:48:3e:
22:12:bc:5f:82:aa:4f:2a:f0:37:2c:f6:9e:f7:6a:
87:94:03:4c:80:b8:42:1e:7d:9b:4b:f7:49:87:cb:
b2:e1:d1:9b:45:ce:24:01:d1:d3:d8:fe:3a:cf:0d:
68:ab:0d:2b:df:2a:48:1f:3d:ff:69:ab:b9:8c:5a:
f1:91:51:42:69:c0:2c:1a:35:e4:67:0e:53:da:33:
67:f6:27:d0:cb:6d:67:f8:b5:2a:a8:11:db:48:5b:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:3C:A1:C1:3A:EE:49:54:61:02:3C:0B:53:02:F7:29:52:61:CB
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:15:a2:36:fb:09:3c:71:dd:13:a5:a4:fe:a1:fd:ef:e1:
8b:23:0e:77:eb:70:a6:e5:dd:ea:ef:29:81:6c:c1:de:39:51:
7d:ff:3f:14:e7:35:4c:4b:30:24:d7:9a:d1:68:81:ca:89:83:
cc:53:98:46:da:12:5a:f9:ef:45:03:4f:ac:2c:11:1e:d8:ad:
1d:14:37:bb:fa:95:f4:e1:2f:31:2d:8a:57:5e:d5:dd:22:ec:
52:2e:b7:70:26:9e:f6:33:19:c5:6b:f2:46:ea:a8:64:22:ca:
28:a9:a7:52:91:2e:91:a7:80:a1:bc:cc:be:a1:4d:cf:f7:f8:
e3:2a:de:68:33:d5:ff:ed:68:c7:c5:50:39:46:57:b2:fa:29:
cc:0f:b8:91:2f:b3:ed:66:69:e4:eb:03:98:e1:38:62:62:43:
55:a4:b1:76:6c:75:88:d8:8b:85:71:47:a5:aa:12:b4:b2:14:
f8:34:4c:f9:ee:0a:13:af:81:f6:e6:34:84:94:78:12:d6:f9:
79:24:1c:61:d4:c4:4c:35:0b:36:c7:6a:be:7a:f7:22:d6:de:
ed:18:3e:6c:8b:8a:11:60:5b:6a:e3:1c:4b:90:49:c5:1a:43:
52:e0:73:cd:51:d5:b5:11:97:00:08:d8:7c:f1:d8:e5:31:b3:
52:f7:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:36 2025 by rpki-client