Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier: kk9UTsNDv2NVq58yODaNHVW+wIvD7Ja0EwoGjqMZZLo=
Subject key identifier: C9:1F:64:75:ED:A2:E8:52:96:A7:5D:36:6D:B8:14:C8:28:6C:97:34
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer: /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial: 019A71EECE0D253ECDA4DD442553114D7DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number: 067B
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: VK1ignYYUsMcf40kYYxqDXSkp7l0Lezpk+HjTPo94og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ce:0d:25:3e:cd:a4:dd:44:25:53:11:4d:7d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=c91f6475eda2e85296a75d366db814c8286c9734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:35:45:c8:6a:a1:7f:6c:97:b8:3e:72:7c:
6b:0b:e0:5e:24:9b:63:40:23:0d:c9:76:02:3e:56:
5f:88:32:83:2d:09:fd:90:4d:9c:ce:f5:d0:58:b7:
22:95:bf:c4:8e:e9:4d:c3:d8:2f:25:f6:68:70:dd:
a5:c8:6d:76:71:05:1c:76:bd:f9:b3:25:d6:42:47:
89:34:ca:ad:c7:b4:a4:4c:79:fb:c0:c7:92:8d:b3:
20:b2:54:19:8b:8c:b3:59:2c:7a:d3:f1:c6:fb:c4:
4b:36:40:16:73:ae:62:d8:a2:f7:30:22:1d:00:bc:
ba:54:3d:ba:10:5d:04:3e:40:c9:a6:89:6a:e2:56:
63:64:3e:3b:b4:73:86:b6:9a:95:b6:e2:04:16:56:
37:8a:c2:0e:40:82:6f:04:47:84:f7:5d:6c:00:d9:
a7:9e:81:de:86:df:4a:f7:4d:d8:37:29:65:0c:29:
0a:47:30:95:61:c7:18:48:22:4e:97:24:fc:43:84:
a5:d0:4f:fa:c4:1a:c7:4a:7b:8a:f5:c0:46:d0:14:
12:d0:9c:30:c0:63:68:00:32:5b:45:d2:fc:85:5e:
28:90:57:4f:83:fc:c8:cd:c8:97:a7:a6:51:6b:e0:
4b:6b:65:06:01:4e:c2:01:9b:75:f0:37:d6:69:53:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:64:75:ED:A2:E8:52:96:A7:5D:36:6D:B8:14:C8:28:6C:97:34
X509v3 Authority Key Identifier:
keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:73:7b:d5:e6:86:f7:8e:fd:df:49:78:6e:45:90:d3:19:
98:21:7a:92:e8:73:9e:98:74:59:8c:1b:64:33:47:4f:03:cf:
13:53:7f:e8:e1:16:bf:93:7f:c6:1f:23:6d:f8:9c:21:ea:fd:
f2:3d:ad:93:66:9e:84:d6:b2:35:e9:1b:df:d5:19:c6:73:ec:
86:3c:3d:79:3a:07:a7:1b:49:ee:c2:8c:ac:8f:7f:cc:7d:c5:
07:18:f2:e1:6e:fc:36:24:d4:85:e6:41:e4:b8:f5:ac:fd:d0:
9a:bf:38:40:a4:3e:fc:2b:65:5f:41:80:b7:00:d5:71:50:51:
7d:f2:7b:78:71:c0:cf:07:a3:06:61:91:88:be:be:e6:d5:33:
e6:91:38:68:78:33:e0:f5:f5:8c:e4:07:94:a6:cf:0f:1d:b0:
5c:e4:9f:e5:5a:c0:27:6c:5f:12:d0:24:e4:77:47:07:e6:96:
0a:a0:43:a2:c5:fa:5f:b1:8c:74:a2:b0:75:1b:d9:56:26:34:
93:9b:c5:00:bb:4c:a0:e7:07:7c:5d:29:18:3f:c8:16:ff:78:
f0:11:73:7d:e7:a3:81:bf:94:5f:b3:b5:07:fc:dd:cd:3e:bc:
7d:b0:1d:b1:d9:ba:32:37:ff:ca:6c:f5:ad:2d:81:24:61:57:
f6:e6:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:05 2025 by rpki-client