Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier: teUV07Y931yfuk/j1Gb/7O79JEH9WrVdTQZrY7wpGJo=
Subject key identifier: 65:62:FE:8D:B0:94:AB:A9:E5:84:7B:6C:FB:89:66:D7:A1:A1:A8:FB
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial: 019A73DCD52EE2497AFF2A7407C24C7CF9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number: 1423
Signing time: Tue 11 Nov 2025 17:00:43 +0000
Manifest this update: Tue 11 Nov 2025 17:00:43 +0000
Manifest next update: Wed 12 Nov 2025 17:00:43 +0000
Files and hashes: 1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: XFj3YOSqhAyEZ3Rjf4YEz5xUWz/HrdUx5MqzJaSoA0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:dc:d5:2e:e2:49:7a:ff:2a:74:07:c2:4c:7c:f9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Validity
Not Before: Nov 11 17:00:43 2025 GMT
Not After : Nov 12 17:00:43 2025 GMT
Subject: CN=6562fe8db094aba9e5847b6cfb8966d7a1a1a8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:f6:9a:31:25:99:57:00:0f:ae:ba:3c:0e:
62:34:47:de:e3:22:0c:6a:4e:cb:9f:07:52:0a:1d:
85:76:f6:90:76:dc:b2:3b:84:f0:fd:76:bf:51:cf:
c2:ba:f3:78:b2:1f:f6:20:ac:39:91:1e:ec:74:c8:
8e:92:b4:26:97:bb:1e:1e:0c:0e:76:7c:d1:1e:b4:
bd:f8:dd:db:3a:74:80:15:7e:43:57:af:b7:b2:dc:
29:10:cf:64:03:13:72:97:22:d8:85:20:76:4a:fa:
c3:11:71:99:5a:29:bc:77:1a:b7:d6:21:78:a9:02:
d9:43:6b:bb:36:87:1e:15:bb:8f:ad:af:9c:13:98:
2e:1e:85:e6:ff:58:29:41:a8:e8:10:60:86:b2:0a:
28:35:90:6a:6a:f4:e7:dd:71:53:50:de:07:80:12:
19:16:9f:81:c4:49:8f:8f:3a:43:75:f6:ec:87:22:
67:1e:d8:ba:ed:2f:a4:87:86:1d:2f:05:7c:44:54:
f6:ed:f9:5e:1f:d4:ca:73:dd:61:0d:ab:12:1c:ad:
ce:6b:b8:be:4b:df:0c:28:0a:2d:4c:dd:b9:6a:fd:
d5:6c:2f:a0:22:59:bf:22:6e:d4:4e:f4:ec:11:ed:
9e:2c:e5:56:45:0a:eb:05:4a:80:cc:de:67:b4:8b:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:FE:8D:B0:94:AB:A9:E5:84:7B:6C:FB:89:66:D7:A1:A1:A8:FB
X509v3 Authority Key Identifier:
keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:5b:cb:8c:98:a8:7f:b4:4f:7f:5e:3e:e7:6a:df:ca:24:
18:b6:4e:78:25:e4:68:50:02:98:9e:54:24:e7:70:68:42:58:
a4:00:11:6c:3a:27:5b:d3:0b:26:c3:87:59:b3:70:3d:09:ed:
02:ab:77:8b:b0:ac:6d:c1:3e:d7:3e:b5:20:34:43:4d:8f:0f:
2d:b7:49:57:27:f9:7e:3e:79:b6:f1:e5:db:3b:df:f3:27:18:
53:a4:58:06:93:c8:34:66:0d:37:5c:12:00:1c:fe:b8:a8:77:
25:6d:28:02:2b:34:a1:1b:41:a4:7a:2e:83:ac:c1:c4:73:7e:
3e:a2:ae:69:b8:cf:62:5d:80:0b:1a:9a:ff:ed:02:d1:61:f2:
d0:63:71:15:5c:79:78:41:8b:8e:79:49:f6:ed:57:77:77:4e:
b1:8b:d7:e6:06:c8:90:a3:bf:47:89:46:d7:08:eb:8c:d5:90:
43:40:e1:5e:34:2e:5b:62:c3:d2:d7:55:0a:a0:ef:6e:41:dd:
17:78:9c:f1:1f:3b:fd:a1:a5:af:ad:43:0a:71:9a:eb:47:bb:
e9:18:ac:bb:43:38:89:fb:a7:65:79:92:7e:7e:38:9f:51:fd:
4b:d0:71:56:83:fe:90:4c:f2:f0:f1:21:b1:24:25:e4:c3:db:
00:5c:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:49 2025 by rpki-client