Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier: iTgN0oGjrN0r/S2BC5mBfwaYuEnXc6qIqjuga2jJuNA=
Subject key identifier: 7E:60:7E:4B:61:E6:DE:25:82:3F:1E:F9:E1:FE:7E:81:05:F4:5B:56
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial: 019A729397E9445688864A7A867617AE96AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number: 13C4
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: gARchdX6gk6P3Z7dOdXb3+zoemDzGHtK8H1vXPV1H6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:97:e9:44:56:88:86:4a:7a:86:76:17:ae:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=7e607e4b61e6de25823f1ef9e1fe7e8105f45b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bf:b3:64:91:0d:38:99:35:32:65:8f:5e:f3:
bf:3e:13:b9:f1:fa:f0:16:6c:19:14:03:e0:2c:16:
e2:50:96:70:70:6e:6e:4b:07:a7:7e:d8:74:d8:1a:
6d:fb:86:0c:6f:7f:bc:60:d8:e6:e9:43:77:90:7e:
06:a3:ef:38:8f:f2:10:d6:33:cd:ea:ab:88:fd:02:
73:ca:de:3f:cd:3c:43:ea:82:e0:dc:a1:ca:61:7f:
ce:81:09:05:6b:b3:81:ac:df:41:7c:1c:73:82:89:
8c:5f:23:09:b3:f2:00:6c:55:e0:49:03:1d:42:2c:
32:a4:77:e8:57:76:db:2b:94:31:cd:ee:78:51:55:
17:f4:3c:1c:91:90:97:ff:61:25:bc:3b:d9:86:64:
74:25:20:c6:5c:9d:10:2f:24:9e:8f:b0:9a:fd:40:
71:a6:d1:25:17:0b:57:0f:f9:16:07:21:35:24:68:
cf:79:01:41:f2:69:2b:3f:3e:da:25:1e:06:a5:46:
87:78:19:0e:56:44:be:14:19:59:e9:4a:ff:1d:7f:
c7:ee:6b:96:c8:ca:c7:60:66:ca:dd:4b:14:72:f9:
2a:70:d5:1b:59:61:c5:8a:94:3c:74:69:52:2e:0b:
98:52:45:91:bc:a5:80:58:20:da:7c:4b:ff:5d:67:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:7E:4B:61:E6:DE:25:82:3F:1E:F9:E1:FE:7E:81:05:F4:5B:56
X509v3 Authority Key Identifier:
keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:61:9b:54:74:34:64:66:58:60:0c:21:aa:c8:a8:3d:a8:8f:
61:d6:95:f5:08:5e:83:36:49:b0:9b:aa:a7:b2:73:53:9c:cb:
6a:c3:97:e6:68:f5:56:a3:8d:55:dc:25:3d:24:01:b3:53:ef:
0b:1e:75:f0:b5:87:9b:3b:33:ad:cc:bb:1f:ba:16:69:2f:25:
3e:4d:45:61:a3:6f:01:40:c9:61:3a:15:86:e9:e9:3b:3f:0d:
bf:8f:6f:38:19:6e:c8:a1:fa:73:08:dd:5d:f1:1d:03:9b:88:
cd:58:9e:5f:ba:95:b0:81:4e:02:c1:fc:49:fe:6c:12:65:f5:
70:24:3a:0b:94:2f:2c:51:64:d4:87:ce:93:49:6a:90:e8:41:
d6:6a:0a:fc:fb:3a:51:2e:3f:a8:bb:4c:67:af:2a:c4:de:76:
63:a1:d7:13:f2:bc:4b:3c:b3:61:9c:9f:c7:b1:1a:30:42:a5:
1a:f9:8d:70:e2:09:b9:a7:84:d3:3f:93:51:e6:00:3c:28:5a:
c7:37:bb:30:51:54:e0:6b:da:e3:ba:01:ab:63:2f:a4:75:90:
4c:a0:1b:9a:49:0d:7c:4b:f4:1c:08:a4:0f:9d:20:c3:bc:37:
f3:91:b6:cf:34:71:a3:45:c2:a4:f8:cb:e8:3c:fb:47:be:0f:
7d:a5:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:19 2025 by rpki-client