Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: j+x7Jjl95o8IbyzfW1MwGxtxq1/rc3m9Q/V62DuEN54=
Subject key identifier: F4:40:6B:13:F3:E4:76:57:C2:E8:B6:F1:58:04:B6:66:19:D8:D4:A0
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019A71B8F765476C4B7500D9A1D9A61D2CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 0380
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: dKoM5qKvIM+ytKLg4CgvguvgDc97nlkI4evBzjV0Q90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:65:47:6c:4b:75:00:d9:a1:d9:a6:1d:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=f4406b13f3e47657c2e8b6f15804b66619d8d4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:32:4a:82:84:e1:88:70:0d:d6:32:ee:e6:
59:10:fa:70:64:ed:8a:44:16:87:aa:87:ec:bf:df:
0e:53:8f:74:56:22:f9:33:77:9e:92:4f:98:ec:c2:
aa:af:06:53:a4:e0:5b:44:5d:87:0e:2b:2b:89:e2:
37:46:ad:7b:da:1a:1b:2a:99:85:f1:c8:5b:15:ad:
e4:da:90:80:85:49:8f:01:e4:51:60:0b:30:a4:98:
ed:83:fc:c3:61:e6:30:9d:41:c8:18:9f:6b:5d:22:
21:d5:47:78:ff:c1:10:9f:6a:96:6b:1f:dd:33:9e:
15:d6:6b:16:92:f4:b9:18:76:22:36:b4:4e:8f:05:
de:41:8b:41:1f:64:be:53:b6:35:a5:4e:58:0d:46:
00:4a:f4:1a:41:b3:08:cd:2e:c8:4c:d5:bb:bf:6e:
81:30:76:28:84:f0:2d:31:92:79:d0:94:54:40:4d:
a6:64:b6:81:63:74:3d:63:62:15:a0:1e:36:58:09:
29:0d:13:35:39:5f:d4:f7:a4:7f:7b:14:3f:ed:49:
f2:03:cd:6d:c1:c8:13:a2:1f:09:5a:3a:9f:ce:94:
65:ac:00:93:b3:0b:60:2d:c4:a2:59:b3:5c:ce:b0:
70:b5:32:e4:f5:46:37:e8:00:c3:f1:9c:95:d2:d5:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:6B:13:F3:E4:76:57:C2:E8:B6:F1:58:04:B6:66:19:D8:D4:A0
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3c:46:c7:34:3f:6e:a7:78:2b:41:5d:ec:12:13:0f:93:0f:
ea:e4:fc:db:df:bb:44:6e:b3:dc:9a:54:b2:92:7b:dd:30:2f:
fa:ba:bc:fd:b1:00:e9:95:87:4f:d6:88:7d:25:b0:f0:41:2e:
ec:8e:e0:10:c6:e0:16:7e:4a:4e:ba:99:5d:a5:1e:99:ae:4c:
f1:6d:b1:cc:f4:0f:93:0c:32:45:79:b1:92:77:b3:c2:de:be:
33:8b:73:1d:de:e0:dd:ca:0e:83:96:a7:1d:5f:ec:96:f5:e2:
f6:4b:9a:cf:f3:61:f1:1e:68:b5:2e:d4:d6:37:38:c7:e4:17:
c1:e4:a6:3a:35:7d:d6:29:0a:d1:fb:7b:b3:81:03:c6:6e:cc:
a9:55:05:ab:0a:61:0a:e8:74:11:12:25:aa:1c:8b:82:0e:32:
4e:90:7d:ee:0c:3d:6b:2c:f6:63:5a:21:7a:e3:48:cc:86:c6:
df:94:8c:bb:4a:f2:63:0e:cb:42:0f:bf:9a:de:3e:2b:c3:f9:
34:19:48:c9:37:17:b4:48:bf:91:c4:14:95:f2:02:3e:66:58:
a4:49:47:c1:4c:e6:66:0e:2a:e3:07:d5:af:93:79:64:7d:1a:
b2:89:23:c1:ef:32:06:b3:c0:6a:b4:8f:34:39:40:73:53:af:
76:c3:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:17 2025 by rpki-client