Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier: aH6idbbYqQMOjpYjVaDN5YY1Tmz5VkYK8LbGCRuRPUg=
Subject key identifier: 40:67:9F:70:18:EE:F1:F2:15:EE:00:42:6D:9E:3E:36:B7:5E:B8:1D
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer: /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial: 019A7225E1BB475C5598A4C35A38A0DD7E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: j+1DvPDXl5qfI+tQ2USQZxeq9Jl2BiCXXDIwQK3yE30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e1:bb:47:5c:55:98:a4:c3:5a:38:a0:dd:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=40679f7018eef1f215ee00426d9e3e36b75eb81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:03:3f:db:86:ed:85:a7:6e:6c:6e:32:c1:
96:90:a6:d6:89:fa:79:62:99:e7:6d:87:ce:78:a3:
6b:ed:8d:fc:00:d6:c6:49:01:94:b3:7a:3d:78:71:
79:c8:ff:19:66:a2:dc:79:de:c0:eb:91:0f:de:02:
74:b5:a5:0c:f4:12:3c:5b:72:c9:15:13:4b:a3:88:
7c:c5:f6:46:1e:4c:e7:2a:42:8a:2d:b8:df:6e:33:
4d:fe:fd:83:7f:17:59:bf:26:f9:a0:e5:71:6e:9b:
d2:cb:fe:ad:11:1d:6c:d1:b8:19:66:d1:66:2a:34:
2a:d4:c5:a7:c4:e9:aa:ab:eb:15:7a:90:a0:1a:ed:
7b:c1:6e:72:cf:b0:0f:ca:e0:29:07:a1:83:51:14:
2c:84:8c:4b:16:7a:a4:93:c4:90:90:77:6e:38:8b:
fe:2a:31:f4:17:48:51:df:6e:84:d1:74:73:4d:1f:
6e:29:1d:0f:24:c7:e3:55:e3:ae:59:8f:58:47:6a:
59:10:c8:f3:a4:68:0b:ac:9b:1c:cc:26:58:cb:97:
da:8c:58:86:6b:64:95:20:13:e4:8a:34:88:50:62:
03:79:31:2c:09:56:44:f3:7f:d2:31:95:10:57:00:
bb:8a:94:81:13:bd:60:89:98:53:e3:fd:fa:0d:69:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:9F:70:18:EE:F1:F2:15:EE:00:42:6D:9E:3E:36:B7:5E:B8:1D
X509v3 Authority Key Identifier:
keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:4b:57:06:34:6d:fc:25:8b:be:64:f7:9a:3f:ea:17:72:
31:52:7a:71:46:fd:9b:a2:03:5b:d6:01:39:ec:6e:27:d9:c4:
a0:c3:d1:3d:dc:8a:df:82:03:b1:d8:75:41:ba:5d:cc:34:d0:
74:8e:99:ad:e6:5a:07:f5:a2:b1:e9:fc:6a:d0:ae:0b:ce:bd:
1c:45:57:9f:c2:d6:3b:8f:75:ad:17:ff:68:b0:79:c7:9d:c6:
23:d6:74:95:5c:89:c9:31:4e:0d:5a:98:42:bd:34:7b:6c:9e:
8e:cb:92:66:de:0a:40:8e:06:87:3c:4a:41:72:a4:6f:e1:0a:
73:04:08:b0:f5:6b:8d:15:06:5d:b7:03:3c:31:b4:72:22:3d:
2c:b6:83:48:ce:44:89:e3:dd:76:29:a3:7b:76:ce:5f:da:fa:
7f:5c:cc:ef:ce:0d:57:9f:a3:43:ef:be:42:d6:16:48:4f:a3:
fe:ba:e9:99:f5:a0:5a:51:c6:67:cd:b4:dc:75:c0:98:f2:5e:
af:6e:dd:da:8b:68:e3:81:ca:6f:ae:cb:ea:7b:db:66:25:a5:
1c:66:26:3c:f0:29:5a:a7:3a:91:09:62:e9:a8:a8:bf:dc:73:
60:71:a4:d5:66:32:fb:ab:94:b4:bd:e9:b5:9b:63:a2:02:f2:
ba:07:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:45 2025 by rpki-client