Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier: iGsGZx9ArpJYgROLH3fvts3wzkKzoLVnuqJcDHt2cAo=
Subject key identifier: 5B:C6:F4:56:D3:D2:91:10:D9:3D:B3:A1:67:36:E5:7A:D5:93:BB:0D
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial: 019A722642447584BE2D8B88C04D9702CFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number: 0BFE
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: lIKODtykLFR330Nv+yj+mvY+XE8ldfwhMEb4ob/Bmfc=)
2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:42:44:75:84:be:2d:8b:88:c0:4d:97:02:cf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=5bc6f456d3d29110d93db3a16736e57ad593bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:80:69:41:bb:8e:02:f5:4d:5f:44:84:3f:
54:1e:93:e4:d2:e7:e7:e2:af:63:51:92:7e:ce:f3:
6c:f0:cb:41:39:a9:a9:c1:aa:52:c9:70:ac:c6:f9:
02:32:6b:40:97:7e:86:4f:7d:1e:a8:e4:42:e7:a0:
2a:8c:de:10:26:8d:c6:f9:35:fe:c3:22:24:21:92:
fb:11:7c:9b:e0:67:56:d7:c7:be:49:93:53:a4:64:
df:5e:7d:ec:aa:e9:bc:18:22:3f:5e:8d:37:fa:99:
db:7d:3c:53:9a:24:c5:74:f4:b5:36:94:d6:91:fa:
14:91:4b:72:0e:d6:d8:77:bd:2a:e1:34:66:c1:00:
67:c2:7c:98:1f:7f:a7:af:2c:8a:78:4b:3f:c2:a2:
86:ad:d6:01:c9:3d:8b:39:11:aa:54:2e:35:96:07:
62:ea:1e:86:91:57:fc:81:3d:81:6c:b5:2b:50:51:
68:e6:2d:19:2e:38:da:2f:70:57:7a:aa:df:cc:fa:
a3:ad:7e:7c:d9:4e:64:92:5b:ff:cc:8a:f3:c0:87:
fc:43:84:c5:1e:7c:c8:65:d7:de:f0:6d:a1:f7:6d:
d0:bf:dc:04:26:8c:74:fb:06:9e:b3:53:30:36:66:
e7:9d:2c:31:c7:b3:fa:95:a9:39:73:fb:d5:36:52:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:F4:56:D3:D2:91:10:D9:3D:B3:A1:67:36:E5:7A:D5:93:BB:0D
X509v3 Authority Key Identifier:
keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:cd:c0:d6:05:33:ef:3e:ea:b1:f9:22:a9:00:02:55:8d:
b1:fa:fe:32:8e:45:b7:76:bd:c8:f3:6f:07:1e:f8:04:32:cd:
01:07:83:f3:ac:8e:62:56:da:c6:1b:74:f8:53:60:79:31:db:
82:2e:f7:f9:cc:9d:fe:5d:d5:3d:25:17:59:96:fd:ee:08:c9:
42:93:1a:1a:b9:6e:56:49:14:d8:8d:fa:87:27:dc:a2:1d:3a:
fc:0c:2f:5f:3a:fa:d9:e1:45:65:07:c2:7e:d5:ab:7d:dd:2f:
a7:02:03:9a:e7:d6:11:f5:fc:88:c9:49:df:34:30:65:a4:ba:
67:a3:8a:69:0b:66:f7:1a:b1:04:95:72:21:56:26:9b:bd:25:
21:d1:1a:98:49:90:bc:b6:20:99:2d:55:c8:f8:16:86:cf:4d:
5a:b8:b6:2f:4c:31:39:7a:6e:56:6e:1b:9b:5f:8b:b4:75:b5:
df:2e:82:c3:5d:24:15:01:f2:d7:bb:18:e2:00:ee:1f:de:c8:
77:e0:25:7c:71:0d:5a:ad:a3:0b:a6:fa:1b:c3:37:6d:6b:56:
0c:e7:bd:7e:6a:98:ef:8f:a7:40:86:64:cb:85:51:cc:bc:fb:
42:ed:7f:53:5c:78:ce:e0:27:b2:2a:95:fd:ae:c4:12:f1:e7:
58:cf:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:57 2025 by rpki-client