Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File: 7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier: dVZTw15VWJkV5iV3CJ580dWWFMegE5oVMhWtzxM4YQo=
Subject key identifier: 56:3C:C3:4F:75:D1:00:97:BF:7D:B7:61:1B:B8:9B:A3:AC:E0:78:43
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer: /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial: 019A7301863027C2D62443D5EC8382DA82ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number: 1297
Signing time: Tue 11 Nov 2025 13:01:11 +0000
Manifest this update: Tue 11 Nov 2025 13:01:11 +0000
Manifest next update: Wed 12 Nov 2025 13:01:11 +0000
Files and hashes: 1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: NjFuvQXvPqXs9EFCGuXWXc5lmpPOHu7khIMooilGu/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:86:30:27:c2:d6:24:43:d5:ec:83:82:da:82:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Validity
Not Before: Nov 11 13:01:11 2025 GMT
Not After : Nov 12 13:01:11 2025 GMT
Subject: CN=563cc34f75d10097bf7db7611bb89ba3ace07843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:b9:14:08:56:f3:80:d2:b2:27:c5:76:0c:
89:dc:be:27:0d:b7:44:3e:8c:75:05:ca:49:8e:61:
07:b9:d2:62:a3:ef:30:6a:8e:8a:e1:29:27:94:3f:
4e:2e:26:bc:2f:0e:3b:d9:19:54:36:85:6e:cf:35:
0d:9c:37:1b:0a:c3:a4:6f:74:43:ac:c1:1a:9f:2d:
9d:1f:88:79:2d:42:cd:0f:51:89:9e:83:f4:b0:36:
75:f7:6f:f3:05:9a:99:9d:00:68:67:a3:d9:8e:7e:
72:ed:e6:4b:47:ec:91:ae:d3:0b:4f:f7:90:c9:78:
ab:e5:8d:54:36:c8:1f:f8:23:eb:09:95:3d:8a:a1:
f4:03:ac:ba:9b:20:b8:e5:55:e5:9f:a9:1e:98:33:
11:cf:a1:7b:21:3c:3b:bb:7b:02:5d:6c:9b:7a:2d:
c5:4f:cc:60:42:e0:ba:59:f6:09:b5:61:4f:f2:38:
60:f6:fd:14:c2:f5:ed:91:c5:b0:2c:69:b5:07:50:
68:24:32:5c:6f:ac:02:e1:a6:6c:f9:fb:25:9e:e5:
53:5c:ef:69:29:9a:ed:18:28:d2:80:9b:ec:fa:c6:
86:b8:e7:8f:1a:51:24:19:e8:e9:de:82:e9:e5:f4:
ec:c6:8a:92:a6:fc:90:a6:ea:e4:8f:f0:66:ad:93:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:C3:4F:75:D1:00:97:BF:7D:B7:61:1B:B8:9B:A3:AC:E0:78:43
X509v3 Authority Key Identifier:
keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:44:85:b8:8a:7f:c1:40:5b:a8:3a:e9:e3:7a:82:a9:64:
9d:92:7a:dc:2c:e2:51:98:f0:ba:40:25:25:9a:a4:e9:6e:70:
53:4b:04:56:04:35:5c:6d:ca:fe:ac:2b:72:d2:79:21:c5:1c:
55:c1:e8:ab:73:65:db:11:71:89:2f:20:1d:b8:40:77:67:4f:
7b:60:a8:ab:80:e1:68:90:85:a3:cb:9a:a5:53:3b:d7:4b:b8:
30:15:7d:90:64:47:3c:b1:7e:0c:fc:1a:c3:d3:3b:2c:61:fc:
91:14:c3:c9:87:03:5f:9e:bf:a5:76:a8:b3:e0:d9:ad:d4:93:
ed:4e:80:c8:ca:77:55:2f:67:93:ca:6a:11:39:8d:1a:19:25:
92:bc:c7:5e:e3:65:60:b1:6f:ca:24:fe:80:e4:99:93:9f:9d:
16:b2:65:a2:97:12:e5:db:b5:94:46:8d:9d:eb:db:7a:05:59:
f3:89:8a:e9:5b:e4:73:7e:06:b4:37:6d:fc:d3:d9:30:c5:0f:
f0:c6:ea:6e:33:28:dc:0f:74:ca:86:e5:7e:62:d4:fc:bf:4c:
30:ba:a7:a4:53:7e:26:2a:80:90:12:73:ae:e5:99:f4:98:66:
19:2b:50:72:d6:1b:a8:d4:fc:ee:1f:44:27:17:6a:e5:7c:8d:
4e:4f:a4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAYYwJ8LWJEPV7IOC2oLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzk3M2NjNGU3Y2ZiZjQ0NzA3NDc4MTBjNDE2ZWNjN2U5
ODE4ODUwHhcNMjUxMTExMTMwMTExWhcNMjUxMTEyMTMwMTExWjAzMTEwLwYDVQQD
Eyg1NjNjYzM0Zjc1ZDEwMDk3YmY3ZGI3NjExYmI4OWJhM2FjZTA3ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/q5FAhW84DSsifFdgyJ3L4nDbdE
Pox1BcpJjmEHudJio+8wao6K4SknlD9OLia8Lw472RlUNoVuzzUNnDcbCsOkb3RD
rMEany2dH4h5LULND1GJnoP0sDZ192/zBZqZnQBoZ6PZjn5y7eZLR+yRrtMLT/eQ
yXir5Y1UNsgf+CPrCZU9iqH0A6y6myC45VXln6kemDMRz6F7ITw7u3sCXWybei3F
T8xgQuC6WfYJtWFP8jhg9v0UwvXtkcWwLGm1B1BoJDJcb6wC4aZs+fslnuVTXO9p
KZrtGCjSgJvs+saGuOePGlEkGejp3oLp5fTsxoqSpvyQpurkj/BmrZPfZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY8w0910QCXv323YRu4m6Os4HhDMB8GA1UdIwQY
MBaAFO15c8xOfPv0RwdHgQxBbsx+mBiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hsenpFNTgtX1JIQjBlQkRFRnV6SDZZR0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZTM3NDQtOWRkOS00MjNlLWFiOTkt
NzhmOTgyZGZjMzJmLzEvN1hsenpFNTgtX1JIQjBlQkRFRnV6SDZZR0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZTM3NDQtOWRkOS00MjNlLWFiOTktNzhmOTgyZGZjMzJm
LzEvN1hsenpFNTgtX1JIQjBlQkRFRnV6SDZZR0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHlEhbiK
f8FAW6g66eN6gqlknZJ63CziUZjwukAlJZqk6W5wU0sEVgQ1XG3K/qwrctJ5IcUc
VcHoq3Nl2xFxiS8gHbhAd2dPe2Coq4DhaJCFo8uapVM710u4MBV9kGRHPLF+DPwa
w9M7LGH8kRTDyYcDX56/pXaos+DZrdST7U6AyMp3VS9nk8pqETmNGhklkrzHXuNl
YLFvyiT+gOSZk5+dFrJlopcS5du1lEaNnevbegVZ84mK6Vvkc34GtDdt/NPZMMUP
8MbqbjMo3A90yoblfmLU/L9MMLqnpFN+JiqAkBJzruWZ9JhmGStQctYbqNT87h9E
Jxdq5XyNTk+kOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:11 2025 by rpki-client