Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: x3HHA3pCBnRYO7/OmeWr+Q35FJlBuVcETW0M3UPW/j0=
Subject key identifier: 7A:D7:EF:A4:5F:A7:14:31:AF:B2:31:01:F4:B3:FA:67:CD:80:84:7E
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 019A73017931788D70DF76C47C11AB6E3559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 13C7
Signing time: Tue 11 Nov 2025 13:01:07 +0000
Manifest this update: Tue 11 Nov 2025 13:01:07 +0000
Manifest next update: Wed 12 Nov 2025 13:01:07 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: 0AdmDaIX4v1JpuSuGUsQdFe1G97GhrrLvQEDjIPBbVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:79:31:78:8d:70:df:76:c4:7c:11:ab:6e:35:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Nov 11 13:01:07 2025 GMT
Not After : Nov 12 13:01:07 2025 GMT
Subject: CN=7ad7efa45fa71431afb23101f4b3fa67cd80847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:3e:81:96:d2:7d:48:e0:05:11:da:a8:65:
e3:dc:cd:03:85:cd:94:ca:5b:60:47:44:bf:77:99:
f4:71:8e:87:fe:5e:d2:19:26:e4:ab:e4:a6:d7:65:
e2:dc:8c:43:dd:63:3c:97:bf:8d:0c:5a:76:3e:1d:
3e:c2:f8:ce:59:af:eb:86:ea:1a:eb:92:63:b0:74:
42:3f:2d:6a:d2:a9:ac:cb:30:4f:dd:89:45:68:91:
66:b7:4c:5c:b5:53:43:1a:a8:88:83:d7:f8:ee:af:
db:0d:17:84:d5:f2:14:f1:ae:27:4a:23:17:c0:2a:
79:10:2b:d9:7b:da:dc:fc:4f:15:b2:23:e2:99:63:
39:14:bd:cc:19:51:99:b1:c5:94:96:f7:5a:7d:61:
f6:cf:ed:12:82:8b:f1:6f:9e:97:92:c4:ef:29:de:
8d:dd:46:db:5e:19:b8:7d:a6:d3:96:18:b9:6c:56:
c5:d0:40:8e:44:8c:25:db:ad:09:2e:4f:b0:ef:d6:
ed:23:53:ef:56:1c:9b:48:23:5f:b0:8b:cc:dc:c5:
01:52:d5:eb:2c:64:15:08:10:af:9c:8c:d2:73:b8:
54:38:42:5c:a7:ec:d9:4e:a0:75:5b:5b:97:73:be:
bf:99:dc:a2:88:34:5e:7e:bc:93:06:28:d1:e1:60:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:EF:A4:5F:A7:14:31:AF:B2:31:01:F4:B3:FA:67:CD:80:84:7E
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:89:be:c3:60:c9:f4:fc:cd:c9:bf:f6:e0:b1:9b:cb:9b:
e1:e5:51:03:ce:67:42:12:e8:f3:66:f7:c6:0c:2a:a8:f5:9a:
d8:1e:6b:5c:46:ab:5a:e0:89:44:6f:50:a2:6f:6c:e8:c2:4a:
38:fd:c5:4e:d3:54:fe:b4:40:96:18:43:49:f0:fd:96:69:69:
b1:3a:83:db:03:5b:ff:71:7e:b4:01:37:fa:a1:99:4a:cf:1b:
55:83:fd:a9:e7:25:90:d6:bb:83:32:96:fb:ef:32:4b:8b:ce:
0f:24:e2:81:a6:82:c6:ec:4d:d8:9a:aa:79:e0:64:35:ff:93:
b3:57:27:34:87:73:b7:88:ed:2b:d3:6d:9e:53:f9:19:74:e4:
f4:a2:b4:06:26:68:07:51:45:34:64:9b:5d:68:81:3e:0b:50:
80:b0:f8:93:5d:74:c4:15:97:76:56:84:46:58:dc:1a:c4:84:
55:e8:a2:c7:5b:4d:83:11:3d:18:e9:9a:54:9a:9a:0b:07:30:
20:3a:2b:e4:18:6b:cb:df:5b:0e:1b:68:0e:b3:8e:ae:ad:cb:
a8:7d:de:91:0a:78:f4:15:88:86:a5:3e:fb:3e:96:33:79:45:
33:21:b4:c0:1b:8c:a0:58:76:cd:2a:16:8f:27:8b:80:01:be:
40:46:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:17 2025 by rpki-client