Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: +DIYhzM83Z3L5pJ3IpeoA0pCH4vOyj1Xr8Y/jMvhz84=
Subject key identifier: 3E:59:DF:13:ED:55:61:B0:C2:BD:B2:62:FD:18:D7:0C:73:0B:7F:0F
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019A72940799CBDC27D338FA64113DE3FBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 13B2
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: QdUeWY80mu7dJ4aVFBQiB4FpzillJq4eXZEfSvcDRI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:07:99:cb:dc:27:d3:38:fa:64:11:3d:e3:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=3e59df13ed5561b0c2bdb262fd18d70c730b7f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:72:f6:76:4c:4d:ee:83:5e:de:15:bc:a2:
5e:22:92:b0:c1:eb:44:a2:f0:05:08:a8:69:49:8a:
e9:14:cf:4c:ad:38:bf:ad:b8:d6:d7:ab:97:bc:83:
37:4d:1c:0c:21:b9:cb:7d:0e:27:f9:20:c0:95:86:
56:cb:cd:ed:b1:7b:b7:d9:d1:39:d8:86:7a:86:06:
9a:4a:e0:95:60:c9:fe:8b:75:09:dc:dd:e7:3b:50:
9c:18:2c:21:46:bb:24:21:22:b6:96:8c:c0:9f:92:
bb:c1:45:d0:5d:77:ce:69:7b:fb:52:9c:f4:f9:16:
f6:1f:64:e6:cc:89:19:6f:d4:87:ef:b0:82:25:aa:
03:6b:4d:65:f8:2e:c3:bd:75:27:f3:e9:b2:f6:69:
62:b3:2d:79:cd:bb:e8:ff:c2:ac:b9:d9:08:d8:5c:
b8:14:86:4f:1a:50:9f:e6:6a:31:73:a9:36:70:9e:
8c:d4:e1:1a:0c:62:68:d7:97:83:b0:b4:49:53:cb:
bd:a2:04:5a:b4:d5:d9:1a:13:fc:3e:60:ef:f3:ca:
2e:eb:dd:10:8f:36:4d:8a:4c:5a:2f:c7:bc:db:94:
1e:39:15:20:95:65:80:35:cb:b4:7a:6a:20:a7:5f:
9e:df:3e:47:3e:10:78:5c:7f:55:7a:f9:07:ac:74:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:59:DF:13:ED:55:61:B0:C2:BD:B2:62:FD:18:D7:0C:73:0B:7F:0F
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:42:93:6c:2a:74:dc:aa:af:56:d2:c2:bc:de:ad:ea:91:0a:
d0:bc:d2:fd:28:2a:f3:74:32:80:59:8f:b5:35:bb:42:e8:64:
a5:89:af:e4:65:6d:0b:f4:8d:86:ad:e1:0e:cd:90:29:e9:2f:
9f:e6:19:92:a6:bb:2b:a0:fc:a2:dc:4e:ac:9b:1d:22:0c:11:
07:61:04:d9:f9:ba:d2:02:ed:93:bc:6c:5b:86:c1:ea:d3:4e:
e0:ae:70:c2:72:bc:dd:92:8a:e6:19:54:d5:68:3b:6c:ce:c0:
d3:49:c9:08:80:97:04:45:e4:1d:69:0b:6a:8a:e7:46:49:90:
96:56:be:8b:b6:e3:09:44:a5:85:b3:6c:4f:ed:88:24:be:55:
5a:87:03:49:2f:b3:de:9b:3c:69:a3:77:34:9c:d1:21:3b:1d:
bc:df:0b:a0:18:a5:6f:18:26:95:58:fb:00:1b:be:d5:ce:ee:
17:1f:81:7a:f2:07:d5:6b:e5:54:96:e1:cf:ef:b0:ed:cc:d4:
db:22:55:e4:6c:de:fc:a0:0d:c0:d4:e5:7f:c4:f7:2a:ad:0a:
74:14:fc:6f:c6:16:14:e3:83:97:4b:86:3b:b5:59:15:16:d0:
de:8d:51:c8:19:cd:1b:86:47:63:54:cb:a4:71:11:0e:0e:80:
f7:85:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:30 2025 by rpki-client