Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft
File: S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft (raw, json)
Hash identifier: 0JTlO9IiJvVYnagFvvTT8T/zNuxd75aI0Cisl6eaPaE=
Subject key identifier: 4B:93:71:F7:F9:52:9C:FE:71:E6:01:6A:DB:CD:C2:0D:B3:03:E4:14
Authority key identifier: 4B:B5:E0:5E:E6:3B:C8:17:36:07:FB:A0:31:EF:08:FE:10:B2:19:67
Certificate issuer: /CN=4bb5e05ee63bc8173607fba031ef08fe10b21967
Certificate serial: 019A7112BEAF2F310D0542D032CF4783D363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7XgXuY7yBc2B_ugMe8I_hCyGWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft
Manifest number: 28
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: S7XgXuY7yBc2B_ugMe8I_hCyGWc.crl (hash: XAer3q2p80o5qmhIE0if/0OrwCdMYWb8lQ/Z9uycKu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7XgXuY7yBc2B_ugMe8I_hCyGWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:be:af:2f:31:0d:05:42:d0:32:cf:47:83:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bb5e05ee63bc8173607fba031ef08fe10b21967
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=4b9371f7f9529cfe71e6016adbcdc20db303e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:6d:19:1e:53:93:47:7d:81:b3:b1:2f:f4:
93:67:57:7a:37:11:22:c3:e1:77:87:aa:8f:45:c8:
bb:22:3b:c1:d4:aa:14:a1:2a:c5:6e:94:7f:20:07:
32:d4:b5:78:c1:22:c8:fe:18:1a:cf:e6:1d:2d:25:
de:e3:8e:5b:88:a2:fd:89:28:5d:c9:82:3b:ba:f0:
32:93:33:5d:0a:38:58:0f:e2:5d:4e:26:c1:31:61:
c3:cd:d9:5f:b3:d3:aa:64:c2:df:fc:6a:1c:ed:b6:
91:61:6e:e0:9c:22:90:dd:97:e4:9e:fb:be:b5:99:
1f:04:df:6e:ca:b5:cd:51:17:54:31:60:27:87:3b:
fa:6a:21:6a:90:f8:ac:b5:05:9e:27:18:94:13:93:
8a:9f:fa:68:80:2a:b9:af:41:5f:cb:70:72:e3:ff:
28:36:72:4b:f9:d6:df:77:f2:d0:c1:0a:7a:a1:7f:
81:bc:c4:34:c3:59:c8:7d:53:ec:62:12:ad:ba:25:
d4:e7:b6:51:c3:c9:6e:19:27:ec:c2:64:ea:64:14:
96:49:0b:bf:3c:96:37:38:46:f2:c1:ef:e0:2b:5f:
10:12:fa:f1:d2:e3:dd:64:65:42:25:1b:57:76:00:
15:cb:67:f4:4f:a6:c1:36:95:af:aa:5e:b9:09:9f:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:71:F7:F9:52:9C:FE:71:E6:01:6A:DB:CD:C2:0D:B3:03:E4:14
X509v3 Authority Key Identifier:
keyid:4B:B5:E0:5E:E6:3B:C8:17:36:07:FB:A0:31:EF:08:FE:10:B2:19:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7XgXuY7yBc2B_ugMe8I_hCyGWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e02e74-6b7e-4c06-bc9f-6c8bf2d18149/1/S7XgXuY7yBc2B_ugMe8I_hCyGWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:45:4e:9b:5c:30:c4:b5:11:56:40:3d:7d:0a:02:b2:5c:d2:
e6:4a:39:b0:08:85:42:ec:eb:64:8b:48:3b:16:4f:7c:14:14:
6c:49:db:41:f4:4a:81:30:b4:5e:66:d8:36:00:46:22:61:2c:
9a:0c:2a:17:f2:b1:c5:c2:7c:01:de:fa:92:79:a0:aa:b3:59:
4b:f5:28:11:8a:cc:d8:9e:d1:7d:89:a5:a8:37:c6:a5:61:42:
e0:76:47:1b:d9:83:34:d7:95:53:d2:16:cd:b0:1f:6c:38:ba:
5a:63:5d:85:5c:6e:11:0a:b9:f0:aa:d3:f4:9e:e1:b4:26:69:
a7:b6:15:09:b2:31:1e:a2:2a:da:a3:cd:d6:9e:1d:0a:b9:df:
6a:46:0d:e4:0c:62:3a:9a:50:7e:7e:6e:94:e6:e5:8b:08:59:
5c:5a:1e:f4:d9:ff:7b:d4:4a:07:fb:44:87:c9:01:8b:91:29:
12:c3:bf:ef:df:de:36:f9:9f:99:30:d6:49:87:a5:62:30:7d:
81:8c:92:85:c8:d1:eb:cd:1c:c4:1e:80:95:3d:67:ba:02:e6:
c0:17:7e:ca:4f:4f:e4:5c:7a:12:17:6e:0f:5f:55:a5:2c:07:
3c:10:73:b6:45:a1:27:ef:8f:7a:9a:12:47:2d:87:da:f0:c8:
75:25:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:47:04 2025 by rpki-client