Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File: Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier: xM+5mfUCddKSFfkkIXF9ZDi/kZVVi2HJSzi69iSyjgs=
Subject key identifier: 42:B4:94:5A:C4:97:BC:B4:08:8F:BC:FC:16:99:8A:9A:55:EC:86:2C
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer: /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial: 019A71B8D3D00806BCF1C907429CD7DBBAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number: 0CC7
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: j8KFG58EZpZY8PBsyYhI9C1Qb//75guVIiAk+/GE8zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d3:d0:08:06:bc:f1:c9:07:42:9c:d7:db:ba:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=42b4945ac497bcb4088fbcfc16998a9a55ec862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:dd:21:c2:13:a6:86:73:0a:dd:00:73:26:
76:94:c3:50:88:6a:34:d2:df:de:06:aa:db:f3:fb:
dc:e1:31:a3:75:0f:40:18:44:05:d5:17:38:76:69:
9f:e6:f9:21:0e:4e:c9:ba:2c:d7:87:cc:43:04:7a:
e8:b8:8c:c3:ae:18:5f:70:2f:bb:e7:eb:0a:13:3f:
10:69:a7:02:0b:b1:ee:92:8e:d5:1c:30:b1:a3:17:
45:30:f2:d9:26:a9:ed:ce:ab:c1:e2:0d:3a:ae:1d:
48:dd:a4:e6:97:3d:29:43:3b:fc:ff:41:62:99:1f:
9e:45:ab:1b:58:b6:5b:5c:c6:19:53:51:f4:0e:9f:
c9:49:76:5d:7f:cf:77:c5:76:fd:6d:07:3f:1b:80:
1c:b0:3c:31:b7:e0:d3:84:c3:c4:45:06:1a:82:48:
0b:7b:d2:f0:07:68:68:7a:9c:73:d8:e9:dc:e9:2b:
37:a3:3f:43:ed:d5:a6:f4:07:57:72:4c:b1:43:42:
1f:45:39:8d:c5:f1:42:a9:f5:41:67:12:fc:9e:ae:
55:56:69:98:bd:84:4a:e9:4b:02:45:72:05:e6:a3:
3f:6f:6f:24:0b:c0:76:f2:a9:43:f3:14:6d:4f:5a:
e7:fe:ad:29:51:e5:f4:e5:af:3b:f8:28:c6:45:7c:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:94:5A:C4:97:BC:B4:08:8F:BC:FC:16:99:8A:9A:55:EC:86:2C
X509v3 Authority Key Identifier:
keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d3:1d:c2:fd:ac:92:92:97:b4:24:91:78:6a:45:2a:de:2e:
ae:7a:38:b9:54:d7:1f:d0:46:cb:28:54:43:b4:1f:15:9c:7c:
7d:cf:ff:4a:1b:ca:c6:b2:c3:82:96:fa:2e:26:9a:8c:d1:c3:
13:2a:1d:41:7d:da:86:42:64:7e:11:b7:25:fc:88:c7:cf:4f:
36:f9:5a:d0:03:d8:e0:ad:04:a6:65:39:a8:05:49:30:34:b1:
3c:3b:54:ae:b7:27:ce:08:1a:41:94:f3:2a:35:e4:29:d5:8e:
66:d0:1b:e8:27:23:62:cb:a4:8c:72:05:94:8b:26:30:26:f7:
59:ca:0f:bd:d3:4f:37:8d:ec:9f:b3:5c:67:26:ae:79:d0:93:
6d:45:30:12:08:ec:92:15:22:60:7b:c8:c3:f3:32:af:eb:f1:
13:dd:f2:bd:11:f2:03:70:91:00:16:2b:be:3d:d2:ab:10:32:
2f:22:2c:66:c3:00:83:75:38:c3:89:2b:1e:91:90:b3:86:ee:
77:91:00:1c:09:bd:34:b6:15:be:6e:be:49:ae:31:d4:01:7b:
d9:c0:bf:8d:53:af:c3:43:e7:61:f7:3c:f9:91:d4:87:92:81:
da:2d:0a:88:e5:ce:c0:13:83:01:1a:40:cf:7e:66:4f:b4:1d:
55:07:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:45 2025 by rpki-client