Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: VIRS0xSFm0IyK4ECiqqLoKO37R13M4aViBH3Ngpf/E0=
Subject key identifier: FE:00:50:1C:89:0C:64:D3:6F:92:10:70:93:A9:AC:36:8D:A3:A1:E2
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 019A71B7B9EAD2FD3DF6248A37564ADD5AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: OGiUmLEdMvKTHpyIrSY8pxnuOZ2KMmVDLmkKly1yWcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b9:ea:d2:fd:3d:f6:24:8a:37:56:4a:dd:5a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=fe00501c890c64d36f92107093a9ac368da3a1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:cd:99:19:7c:3e:67:7b:e8:ef:aa:2e:73:
30:5e:32:e6:9e:45:7a:4b:cb:96:92:33:6b:79:08:
c9:89:e3:d1:a5:dc:fc:f6:6a:0e:7b:51:8b:70:76:
72:8f:59:fb:a9:18:32:f9:9f:0e:78:4e:79:72:8a:
2c:eb:d7:b2:54:75:ae:eb:dd:a5:5e:a9:75:cf:af:
0f:08:5b:91:71:c4:48:8b:e7:29:6b:76:95:49:2f:
75:7a:0c:d7:7e:52:ba:42:3f:d6:53:3d:5e:c3:32:
4a:3f:b9:51:03:ed:2e:d9:3f:c3:74:bc:09:c6:b0:
0e:89:10:b2:11:3a:d9:f4:1b:05:73:41:b8:27:be:
18:2d:fe:7e:ca:92:a0:4d:01:f2:b9:18:cb:2c:97:
51:a2:d9:ac:73:af:af:22:50:d3:8e:21:de:38:de:
8e:27:a4:28:eb:c4:b1:43:bf:fa:79:98:c3:2a:e6:
67:59:4e:1c:e1:ff:b1:ae:62:46:fb:3c:28:7c:91:
0b:74:c2:1e:69:b3:61:09:bb:46:56:fb:67:3a:23:
d4:91:91:a8:bd:1b:24:30:92:0d:ba:63:f1:fa:89:
ae:ba:5d:2d:0d:cc:61:97:6d:36:5a:b2:b0:0c:46:
3a:ca:92:a5:17:0a:66:1e:eb:02:8c:b4:4b:da:1b:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:50:1C:89:0C:64:D3:6F:92:10:70:93:A9:AC:36:8D:A3:A1:E2
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:cc:69:55:ed:0e:02:3f:f0:c8:2d:0c:11:4c:bc:66:4f:
9f:ef:7f:17:b3:6e:8c:82:b4:7d:b0:d0:b0:21:5a:b4:59:a5:
01:51:f0:51:2a:ae:88:c4:88:21:15:db:4e:cb:a7:f8:6e:dd:
6b:fe:cf:31:b5:b1:6a:3c:2a:ed:b3:2a:ad:be:67:3c:6c:31:
af:01:70:ff:b3:e0:c7:53:ba:28:6a:33:cf:5e:9a:f3:6c:d8:
f8:55:c0:31:ad:5b:11:de:e6:bf:2b:50:7f:5c:b8:0f:92:a5:
96:6c:c0:a7:f9:f2:b6:03:09:6a:1c:b0:ef:4e:61:29:ff:56:
ae:42:5e:31:2c:01:7e:da:e4:8a:aa:a8:2a:b6:46:c7:24:4f:
2e:56:fd:7f:59:39:b3:9f:c5:f7:d4:5c:ed:74:d3:c1:db:1e:
7c:53:6d:57:66:d2:1f:bb:57:8c:65:52:39:d8:8c:9e:c8:a3:
72:cb:bb:b4:fa:3a:f3:ce:69:e6:9d:97:e7:cd:10:88:22:c1:
a7:10:76:d6:ab:14:1e:84:b1:b5:0c:a5:7d:b4:91:0c:7b:98:
ab:99:a5:e7:db:ad:17:3a:10:91:12:7f:57:7e:cf:39:a3:cd:
f2:0a:4a:ed:5d:ab:a3:a3:97:dc:12:c2:42:48:4b:78:83:65:
81:90:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:15 2025 by rpki-client