Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: D0AkYG9SXCsG0iXVsedDEi+2JJcNEp0sJUnhU3qGIAU=
Subject key identifier: 42:5D:D9:6F:17:78:7C:C1:C7:26:89:1A:26:2A:5C:8D:2D:73:E0:6B
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019A71B7FCD9E0072E84C739D6B14E8822EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: mN+gBua4n+Mjtplpqzfl1PXqoRVC3qM2JcFFNfFy86I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fc:d9:e0:07:2e:84:c7:39:d6:b1:4e:88:22:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=425dd96f17787cc1c726891a262a5c8d2d73e06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:41:cb:bb:1a:fa:80:10:b5:e2:6b:1e:c1:
3b:a0:00:13:1f:3e:43:d9:3d:31:88:1e:cc:46:0f:
eb:b7:fe:ff:50:38:b0:fa:c4:99:7c:8e:cc:7d:ad:
7c:d3:1b:de:98:5f:f2:1c:a8:13:3c:69:5d:8e:ad:
60:b1:6d:fd:64:f9:4a:f3:66:38:33:2c:8c:44:8a:
7e:d1:08:a5:75:c3:4c:5b:91:75:fa:c8:60:14:a0:
9b:08:57:a8:fd:48:61:8b:5f:40:5b:77:ab:a0:96:
0a:13:e3:ce:e4:3f:a6:d6:41:3b:90:9e:2f:78:79:
46:03:5d:a5:5d:08:0f:a2:65:cb:72:4e:37:29:fb:
3c:56:5b:7d:76:f5:cb:65:dd:a2:c0:3e:42:65:79:
18:0d:b0:4f:67:03:0b:75:bf:5c:eb:40:bc:3c:8a:
c9:f1:dc:0d:e2:ee:d1:73:92:25:b8:d0:89:ba:4b:
b1:80:77:b8:8b:5c:f0:e7:b9:5e:2c:47:b1:52:b1:
b9:c1:f7:15:73:a8:2a:b3:ce:b3:cd:e0:cb:f0:3f:
b1:b8:d0:28:ea:0d:dc:84:33:f5:17:d2:8f:b0:51:
7f:16:bd:92:38:7d:dc:3b:d7:c4:a1:f7:69:c6:e6:
d9:6c:e1:b4:74:8b:b2:7c:f0:e2:4b:ca:74:ea:98:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:D9:6F:17:78:7C:C1:C7:26:89:1A:26:2A:5C:8D:2D:73:E0:6B
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:57:c9:1e:04:3b:21:c2:5f:37:0c:a6:de:de:fc:0f:89:8c:
b9:57:b1:99:b3:04:84:ac:c6:4f:e7:c8:ab:a4:3d:46:18:85:
02:f3:18:21:c5:58:44:36:71:9a:a7:33:17:6a:6a:60:94:e3:
06:7e:a2:21:80:ff:89:9b:83:87:b3:dc:06:c9:5b:bb:16:ff:
50:b5:bf:45:33:b5:d0:ad:3a:e0:ef:d7:2b:79:e0:20:49:f2:
01:b0:25:75:1e:09:e8:be:69:d4:d7:a3:c9:3d:fc:96:d6:7f:
49:37:8a:ac:b2:e3:c8:e2:69:ef:d0:9a:7d:04:99:a0:bc:ab:
d7:05:be:b1:e9:da:9b:46:9e:e1:10:31:06:8f:91:55:8c:99:
88:b3:99:af:6b:62:e6:6a:87:0c:1b:ce:50:59:bb:8a:1c:10:
b1:be:a8:d2:1a:39:39:c3:89:11:3f:6c:d7:e5:78:52:bc:86:
32:3a:01:68:b1:47:d9:ea:97:f9:df:fb:bf:31:9a:87:c1:ce:
1e:8e:8b:dd:b4:a5:8f:19:1b:02:58:5f:68:39:2e:e7:08:57:
34:aa:04:84:ef:46:42:92:64:36:c7:ff:3a:40:01:6a:ff:00:
b9:0b:12:89:df:47:44:05:75:f4:ec:d4:b1:79:8b:0b:72:fb:
d8:5a:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client