Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier: YDCEMI2bKrkVoltkCnHQ6FS0JsP8FiwUA2mMo9k36Wg=
Subject key identifier: AE:C8:7D:3F:1D:91:4A:E5:9D:BC:7F:F4:CF:04:85:B0:1E:00:C2:2A
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial: 019A7225D30158C96AF630A76E3DCD436A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: tNlY/xf7B0hCnJoATX3FUbL1/dp5OZMIQA25pER8KZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d3:01:58:c9:6a:f6:30:a7:6e:3d:cd:43:6a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=aec87d3f1d914ae59dbc7ff4cf0485b01e00c22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:b7:42:41:da:56:8c:16:5d:3b:f1:65:32:
f5:e2:27:fe:e0:59:17:fc:b1:b9:37:3a:a4:b1:03:
3b:e8:6a:ba:f6:c7:26:17:a1:84:cb:16:0d:dc:ad:
86:ff:9a:29:87:55:59:f5:dc:fe:ff:75:a2:f7:a7:
68:a5:91:45:7c:1b:02:ca:65:57:7f:b3:ac:6f:8e:
c5:74:9e:29:4a:c3:ef:42:73:fa:34:aa:02:e4:1d:
08:54:10:20:5f:51:21:ad:57:df:b3:33:46:fb:f2:
da:88:22:7f:b2:aa:10:d9:27:44:68:35:b7:a9:c2:
e5:f8:db:5b:22:14:53:61:2f:14:7d:59:c6:27:14:
1b:8c:6f:51:e9:85:6c:8e:a5:9d:53:ba:e4:25:e8:
a0:aa:43:bc:35:bf:4c:b8:7f:5a:27:c3:73:43:1f:
35:81:c8:fd:52:b3:86:96:8c:26:f8:56:50:0e:e5:
1f:85:81:0b:78:0d:5f:d3:4c:60:9e:34:4e:c6:e4:
a0:82:3c:fa:9f:2d:5d:70:59:9b:d7:b1:cb:01:f9:
df:b0:da:bf:6a:07:c5:d9:25:69:68:c5:55:47:e8:
f2:93:72:ce:2e:34:2b:ce:e1:12:b9:b0:55:8a:02:
12:95:b7:cd:2e:64:a9:52:8e:1d:23:32:95:70:a9:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:7D:3F:1D:91:4A:E5:9D:BC:7F:F4:CF:04:85:B0:1E:00:C2:2A
X509v3 Authority Key Identifier:
keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:06:cc:91:b5:0b:a6:be:46:04:a2:f2:f2:e0:07:4e:5a:
78:79:f5:9c:8c:a2:c3:f0:d7:b2:86:46:f2:56:b7:66:79:e2:
15:f9:fc:af:fa:95:07:90:31:21:61:3c:bd:0f:a4:9b:ab:e1:
a4:a5:af:e6:6a:80:db:66:22:f0:a8:e6:60:68:0b:cc:95:c3:
b0:5a:c4:25:d3:29:c7:e5:25:db:26:f7:84:46:72:49:17:72:
78:6b:1d:69:bd:ff:68:09:78:31:b4:68:34:07:af:ab:75:6c:
24:4f:a3:5e:43:56:c4:60:7e:12:28:2d:d8:19:2d:d3:4a:86:
fe:d6:8f:dd:9e:ab:31:dd:30:3b:48:8c:fc:d5:20:f8:14:f2:
19:50:9d:45:cc:66:4a:a1:09:4b:f1:fc:f9:cc:8f:db:ba:53:
e5:0b:22:b1:ac:a8:f8:e3:21:ca:36:b4:29:f2:44:59:04:30:
28:5a:76:7d:a7:74:fd:fe:0d:1e:68:c6:69:3f:44:b4:0c:ee:
05:08:49:11:32:0c:d0:1f:6f:49:59:db:a4:f3:4f:cf:bd:04:
0d:10:a3:29:7c:95:8c:a9:fb:33:4d:e0:6e:64:bd:32:84:85:
ff:92:f2:25:00:b9:7b:22:ab:c2:49:ac:c6:2c:3b:5d:e3:bb:
d6:52:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:03 2025 by rpki-client