Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: Gt7G588LVwufYSlzKlmcq9s2r+U6O6ETQ/5R+rNQKGc=
Subject key identifier: D8:18:4C:89:91:5C:68:CA:EB:37:2C:FC:A1:F2:06:52:4C:30:1C:4B
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 019A706E10DF4C45DB039137AD1EB27B39D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 0723
Signing time: Tue 11 Nov 2025 01:00:52 +0000
Manifest this update: Tue 11 Nov 2025 01:00:52 +0000
Manifest next update: Wed 12 Nov 2025 01:00:52 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: Bs5uAHc+dh/O4lE5LTd6trsK05iOlbKw/Yg1vUI0DS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:10:df:4c:45:db:03:91:37:ad:1e:b2:7b:39:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Nov 11 01:00:52 2025 GMT
Not After : Nov 12 01:00:52 2025 GMT
Subject: CN=d8184c89915c68caeb372cfca1f206524c301c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:26:3f:1b:bc:11:be:4a:4b:bf:a9:a9:ae:
68:53:79:76:c1:1d:36:c8:f4:c8:79:62:97:97:dd:
f2:dc:65:21:2c:c5:b7:c8:c0:2c:ff:fd:d0:14:f8:
39:f3:e7:85:dd:4d:3d:fc:d6:44:d4:cb:b7:a7:7c:
d4:3e:b7:2d:49:86:ca:1e:bc:69:9b:9a:a6:26:a3:
97:7a:09:1d:67:ab:94:5c:cd:34:4e:56:bb:ed:db:
e2:8b:6d:f8:92:63:eb:df:29:bc:65:9a:0a:ba:48:
93:98:04:d6:da:e1:61:f5:c0:ce:32:fd:39:80:e8:
fc:d1:2b:f5:13:b6:dc:ec:bd:9b:25:8f:f5:b4:75:
ff:4c:01:a7:1a:f4:bc:70:72:b3:ec:68:e0:f6:65:
37:2f:8e:ca:d3:df:cb:4a:be:b6:d9:f0:68:4c:90:
be:fe:ab:d9:5f:f7:0e:ca:f5:b7:67:6e:83:4a:f3:
0a:f5:05:dc:b6:97:f2:7f:3d:80:ec:37:9b:90:52:
9a:71:ac:3b:ec:af:e7:fb:b2:31:84:79:00:68:84:
8b:8d:14:cb:8e:aa:48:f7:20:95:39:7b:3a:3d:e3:
3f:c2:23:bb:10:88:d6:da:a2:33:66:c8:0f:c0:f0:
cc:c4:47:b6:2a:29:be:b4:38:f9:62:7c:0e:7f:03:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:4C:89:91:5C:68:CA:EB:37:2C:FC:A1:F2:06:52:4C:30:1C:4B
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d9:ac:a4:87:88:4a:e5:9d:6b:f5:9b:45:66:85:87:3b:7f:
ba:fb:45:5a:a4:b4:67:53:41:4b:5c:90:a0:d5:e3:a5:7b:bc:
4a:50:a6:6c:5f:84:86:3d:51:7b:f5:43:45:ca:e0:9c:83:e5:
69:77:20:c4:34:9f:40:06:08:02:65:e3:92:e4:58:63:36:aa:
34:37:27:7b:92:2e:41:96:da:14:22:3d:e4:e2:c0:b1:4c:02:
5f:33:f1:3d:a4:43:d6:44:e8:54:fe:2f:89:4e:d9:91:77:4d:
2a:69:7b:10:8d:e3:1b:40:13:69:dd:cd:9e:bb:fd:f4:17:ce:
30:28:58:20:8e:e5:b8:54:a9:cd:a7:b4:61:98:56:52:bb:4e:
21:3a:4a:ff:73:3b:1c:bc:83:cb:b4:d9:f5:ee:d0:85:99:50:
a8:5c:91:9c:fd:eb:4e:9c:f2:42:1e:02:54:32:74:ee:c6:c9:
64:4b:02:b5:0d:66:bb:c5:52:3c:9b:c8:0b:91:a0:e3:13:bc:
64:cd:09:e7:36:7b:8f:7b:51:d6:dc:81:d8:ab:5a:30:0c:87:
29:2c:6d:3d:54:2b:07:cc:27:a3:8a:78:30:5a:bc:2c:50:24:
70:a4:ba:84:7c:eb:57:7d:ec:6c:26:09:12:5d:a9:6a:d9:2d:
9c:12:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:30 2025 by rpki-client