Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: 4l9mnh4Co7b8Sg06PWqTHGamdR5PL7JIyQKHapvKAHM=
Subject key identifier: 16:E6:A2:F6:8D:FA:3A:13:56:4E:61:D8:65:DE:7F:E7:CE:23:97:6D
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 019A7112E144036DE0E673FDC16BF7BA2D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 013D
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: 3wrkz5UZCkuXk2++QDN/1IpPBJyXcUHT86oT+1QQKlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e1:44:03:6d:e0:e6:73:fd:c1:6b:f7:ba:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=16e6a2f68dfa3a13564e61d865de7fe7ce23976d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:18:0c:83:64:b7:d1:e1:f4:48:54:89:c3:
aa:c5:59:e7:64:3f:e0:c4:81:7c:d7:a5:a7:3d:ae:
ab:f6:af:6f:88:95:ca:63:10:7a:81:4b:ee:26:7f:
33:f5:60:67:54:29:05:cb:2b:43:2b:92:f7:83:8c:
5f:b7:7b:ed:2c:a1:fe:60:bb:b5:60:ae:9b:e3:bd:
de:d1:2f:a0:d3:13:28:8a:f4:76:55:e9:13:3e:1d:
9e:35:4c:b9:b4:1a:6e:c7:88:52:50:c6:b9:df:74:
eb:71:1a:73:4e:e8:12:eb:f7:25:f2:b2:3c:b9:4c:
e4:e9:c8:99:57:92:a5:67:7e:c5:9a:58:c9:9e:97:
f8:f1:48:20:7d:c3:3a:f3:53:b2:c1:28:e5:57:34:
0f:66:5f:51:b5:ff:2e:7b:b9:e1:92:31:58:0e:2c:
c2:35:8e:02:08:2f:d8:31:23:51:5c:b0:b6:07:7d:
f0:ef:37:44:75:7f:f8:58:db:43:dc:ef:ad:a2:b6:
f5:ac:a1:02:f9:0d:87:c3:43:d3:89:5d:05:bf:21:
f8:ba:2c:e6:00:47:48:79:fc:c7:6c:96:18:05:fe:
52:18:9f:2d:7e:66:92:c5:5d:d4:92:43:45:ec:f8:
55:ce:b9:8b:a9:cb:36:a8:03:9c:46:29:35:f4:5e:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:A2:F6:8D:FA:3A:13:56:4E:61:D8:65:DE:7F:E7:CE:23:97:6D
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6e:c4:dd:a6:7d:fb:f6:15:6e:d0:62:8e:6b:b2:4a:10:5f:
a6:5c:41:38:12:a0:a1:9e:0c:36:9f:97:c6:73:b1:f3:1f:4e:
ea:3d:57:9b:71:9c:9c:6b:9f:81:ff:92:cc:1c:96:b7:58:e6:
5a:9a:2d:6c:d8:69:af:a0:74:e7:49:d0:5c:01:f2:3c:66:8b:
c1:14:e3:52:29:c7:7c:23:4c:2a:f2:fb:e8:28:2a:24:06:26:
cd:61:68:05:bc:7c:36:fb:b7:9c:a2:0a:38:32:b3:25:5b:7c:
69:4d:4a:e1:c4:20:a5:99:77:8a:64:67:17:dd:62:85:4d:42:
ab:00:f9:2e:22:ff:a8:53:4f:0d:9d:56:10:54:36:d8:4a:1d:
ca:b4:77:f3:1b:1b:0a:b8:4a:ab:b8:e0:2c:a6:a7:3b:a5:1e:
2c:c1:a3:5d:56:0a:c8:c6:d8:49:e5:44:7e:ab:33:12:d9:49:
03:87:f2:4f:14:d1:9f:76:3c:b8:5e:a4:a5:8d:6f:6e:a6:5e:
d2:0b:33:68:df:8b:e3:c2:86:db:d6:08:2d:e1:8b:5c:d7:fb:
42:b8:2f:a3:f6:29:a8:a9:0c:80:48:6f:3d:92:95:aa:6f:a1:
5f:7a:73:d9:6e:a6:65:4c:69:b5:54:be:d1:34:3d:72:37:5a:
0a:88:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:00 2025 by rpki-client