Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: RgCWsvny19ZeuSe43BkrExkIRKqOJZ3pz9NQW3+phPU=
Subject key identifier: EB:BD:25:68:6C:B7:B3:CE:24:B2:17:F9:3C:DA:48:53:A9:54:BB:98
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 019A70A4E4AECE7B6D1A0273A0FEBBA132CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0B45
Signing time: Tue 11 Nov 2025 02:00:45 +0000
Manifest this update: Tue 11 Nov 2025 02:00:45 +0000
Manifest next update: Wed 12 Nov 2025 02:00:45 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: vgMK25O1/wR1/CtdcLXJqnBLwueK6gvPWoSGzmM5bBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e4:ae:ce:7b:6d:1a:02:73:a0:fe:bb:a1:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Nov 11 02:00:45 2025 GMT
Not After : Nov 12 02:00:45 2025 GMT
Subject: CN=ebbd25686cb7b3ce24b217f93cda4853a954bb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:ee:04:43:ab:c6:c8:0d:63:ba:35:b0:27:
63:0f:11:94:b6:b4:91:89:00:79:57:21:e5:4a:8c:
77:0b:ef:11:a1:95:09:cb:60:73:17:6f:e0:05:f1:
27:47:d7:d1:12:ba:c4:de:9c:da:10:b9:b9:3d:6e:
ac:00:a3:54:19:19:b9:2f:c2:d5:cc:10:6a:91:db:
f4:a5:fc:f0:e5:fb:fd:c3:30:4e:05:fb:69:ba:c2:
2e:6a:b3:34:8a:eb:6a:94:e2:8f:7c:f9:ad:98:d7:
70:b2:9e:eb:fb:f1:73:47:3f:58:0d:2d:06:a6:2b:
32:e2:af:1f:74:91:e4:3f:15:18:d4:20:98:6c:64:
48:a5:f2:40:7a:01:c5:11:d4:20:99:31:de:d0:40:
03:2f:d7:6c:fc:7a:7c:db:da:f3:be:b1:05:9a:f0:
92:49:57:43:0e:b8:a2:4b:2c:ea:5b:29:34:d9:cf:
5c:67:a2:01:55:86:b6:b2:83:3e:15:8e:e2:d4:6f:
b4:c9:e7:50:e8:fa:58:6a:3f:62:45:fb:1d:38:db:
f5:76:3a:5d:7c:8a:32:1c:e4:85:7c:ec:73:18:17:
f8:34:22:a9:be:12:bb:d0:11:8b:f8:ee:3c:0a:cd:
7c:c4:f5:98:40:9a:80:28:f3:9f:80:c9:ba:29:4f:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:25:68:6C:B7:B3:CE:24:B2:17:F9:3C:DA:48:53:A9:54:BB:98
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:25:d3:a9:e4:c1:03:d3:78:83:b2:15:89:82:68:4d:77:91:
df:78:0f:8b:a4:e2:09:b6:99:8b:99:53:ba:ec:f7:e9:e8:c2:
73:5e:05:8f:cf:c8:35:5e:cc:dd:84:7e:af:f9:e4:0a:8a:76:
7b:2d:bf:fd:05:7b:e0:25:ac:e7:b7:6b:90:47:7e:df:c1:22:
3b:be:ad:df:f8:8d:62:73:d3:86:10:4c:47:60:48:f8:54:09:
ea:3d:f5:4d:03:61:a1:4e:e7:f0:1c:c9:1f:c7:28:9a:40:c0:
64:c6:14:44:ff:f2:38:9a:70:31:b7:92:4c:d5:4d:f9:af:c3:
69:01:fd:f0:ff:a5:c5:f2:2c:fd:bc:dd:49:3c:12:d0:7a:73:
9d:1e:c5:fd:d2:40:61:eb:5b:12:57:b5:de:1c:de:d8:9d:b3:
20:1a:97:80:69:46:d8:1e:38:5c:f9:fb:1b:2f:b7:6a:e8:3d:
f9:b2:35:41:74:3b:f0:7f:44:18:17:44:c5:19:56:bf:c1:ed:
6b:04:a3:5b:4b:53:b1:08:84:dd:ea:b1:c0:6c:e7:36:4c:01:
fc:62:e5:2d:31:45:45:a8:1e:19:8f:4a:9d:b2:33:80:55:38:
e2:9b:27:a6:b3:ed:4e:35:d2:e3:bb:c7:2a:65:4c:a2:a1:29:
14:54:f6:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOSuznttGgJzoP67oTLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNjhiNjY0Y2NkNTBjYTc2N2Q0NmZmYjM0ZjUzYTA2ZDEy
MGI1MjMwHhcNMjUxMTExMDIwMDQ1WhcNMjUxMTEyMDIwMDQ1WjAzMTEwLwYDVQQD
EyhlYmJkMjU2ODZjYjdiM2NlMjRiMjE3ZjkzY2RhNDg1M2E5NTRiYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmjuBEOrxsgNY7o1sCdjDxGUtrSR
iQB5VyHlSox3C+8RoZUJy2BzF2/gBfEnR9fRErrE3pzaELm5PW6sAKNUGRm5L8LV
zBBqkdv0pfzw5fv9wzBOBftpusIuarM0iutqlOKPfPmtmNdwsp7r+/FzRz9YDS0G
pisy4q8fdJHkPxUY1CCYbGRIpfJAegHFEdQgmTHe0EADL9ds/Hp829rzvrEFmvCS
SVdDDriiSyzqWyk02c9cZ6IBVYa2soM+FY7i1G+0yedQ6PpYaj9iRfsdONv1djpd
fIoyHOSFfOxzGBf4NCKpvhK70BGL+O48Cs18xPWYQJqAKPOfgMm6KU8LfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu9JWhst7POJLIX+TzaSFOpVLuYMB8GA1UdIwQY
MBaAFO5otmTM1QynZ9Rv+zT1OgbRILUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUt
ZGVkN2FjMjUyNTQ0LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUtZGVkN2FjMjUyNTQ0
LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSXTqeTB
A9N4g7IViYJoTXeR33gPi6TiCbaZi5lTuuz36ejCc14Fj8/INV7M3YR+r/nkCop2
ey2//QV74CWs57drkEd+38EiO76t3/iNYnPThhBMR2BI+FQJ6j31TQNhoU7n8BzJ
H8comkDAZMYURP/yOJpwMbeSTNVN+a/DaQH98P+lxfIs/bzdSTwS0HpznR7F/dJA
YetbEle13hze2J2zIBqXgGlG2B44XPn7Gy+3aug9+bI1QXQ78H9EGBdExRlWv8Ht
awSjW0tTsQiE3eqxwGznNkwB/GLlLTFFRageGY9KnbIzgFU44psnprPtTjXS47vH
KmVMoqEpFFT2Sw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client