Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: GQTMxqN1xnt+0jUoM+a331qKFdvEfMLr1Lp6N6VbMj4=
Subject key identifier: 9A:6B:95:45:7A:74:D1:79:F7:47:D1:5F:62:56:80:40:B9:81:CE:85
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 019A71B76D42EFA7C4633448647DE845E4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: ywVByFVJL6jlfc6Yy883q8sc1TqY+TiBTM0QFJZcP7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6d:42:ef:a7:c4:63:34:48:64:7d:e8:45:e4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=9a6b95457a74d179f747d15f62568040b981ce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:d8:3c:c1:64:50:e8:d7:18:65:33:cf:5b:
ef:e8:4f:d7:1b:c1:1a:64:7d:f7:5e:25:86:0d:6c:
44:3a:89:10:fb:e0:59:e9:6a:4b:62:89:2e:cf:d2:
70:8b:73:b6:eb:a3:e8:56:a2:3f:b6:1e:28:f3:c5:
53:ff:0a:43:dc:35:89:af:b0:77:3a:5a:20:91:80:
dd:47:20:bb:60:18:f1:22:0e:20:85:55:8e:f9:ea:
ce:6c:8c:6e:33:2c:b3:77:14:8a:0a:03:25:63:9e:
e3:ff:47:d6:f3:7a:59:15:57:ee:d6:e6:73:af:9c:
51:f4:53:6c:bb:56:5d:ea:7d:9f:b5:b3:d1:ba:4b:
4d:4e:9f:ff:58:f7:a8:25:1e:7e:49:e9:a9:25:0f:
ac:6e:59:1c:75:3a:fc:6d:69:63:04:40:4a:42:d0:
5d:f7:73:21:f9:a7:c6:b2:a2:b6:32:a0:34:e2:f5:
b3:7e:52:30:b7:b9:bb:0b:c8:c8:54:32:75:b7:5c:
3f:a8:79:fe:84:1b:91:da:ee:44:b1:a7:65:98:cf:
eb:18:f1:34:29:09:d2:ee:44:e1:33:bc:c3:dc:12:
20:5f:b6:46:fb:3e:1a:4c:bf:b6:6d:b5:18:d9:df:
30:08:e1:7f:1b:a9:76:70:aa:3b:52:e9:61:6e:6b:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:95:45:7A:74:D1:79:F7:47:D1:5F:62:56:80:40:B9:81:CE:85
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:2b:76:4b:69:bc:5f:ae:ee:17:ff:fb:6c:2d:fe:be:7d:
32:fb:26:3c:54:5c:a9:df:d7:78:60:da:3b:f1:15:9c:0e:cd:
20:b8:ae:23:02:42:58:c0:b0:a4:b4:f9:25:5b:21:c6:00:b9:
a5:86:71:d5:05:26:20:03:24:92:e8:02:68:88:20:79:43:83:
98:68:ce:ac:d0:ca:80:bf:ad:d7:de:92:ba:e1:ab:fc:95:5d:
eb:81:9d:1b:e9:95:f7:58:a2:23:50:8a:68:60:e6:96:2e:2e:
c0:7a:ea:a5:d9:a2:47:77:96:f5:7c:a3:c8:17:b2:90:09:a9:
ad:ab:57:11:8a:d0:ab:b2:66:31:ba:3a:66:6f:b2:1a:75:6b:
12:ab:7a:17:1a:d6:42:3b:40:a7:3a:45:20:30:2f:81:27:c6:
11:e6:12:fc:e1:09:63:3f:89:c6:1f:0a:28:88:85:06:6e:b4:
00:8f:99:24:c0:ce:eb:4f:4f:bc:30:4f:31:be:da:39:e0:7e:
c9:ea:cd:7b:f0:09:fe:22:5e:ef:a7:42:64:7c:2f:e0:00:09:
cd:72:0b:0c:ec:a4:c4:19:a4:91:f9:7c:ea:f8:a7:1f:35:32:
bb:ca:01:99:7c:ff:2c:79:86:4c:b3:e2:60:77:60:b2:3d:89:
63:8b:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:49 2025 by rpki-client