Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: OzWENgsQ9StjZNiSj6K5oJG24M/KYrhAY4yRKLRCLEo=
Subject key identifier: C1:0F:7D:42:12:F5:83:59:C8:99:2E:32:71:D9:D6:20:74:77:44:A1
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 019A725CD3C3A24E2637857B4B27E005A130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 06FE
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: AkvybTNGI64q15er1A3N7RhV/qveEqPUBDE0cpSx4+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d3:c3:a2:4e:26:37:85:7b:4b:27:e0:05:a1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=c10f7d4212f58359c8992e3271d9d620747744a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:e7:9b:ed:a4:c3:0a:ff:62:c1:54:80:ab:
a1:81:ef:3f:fc:a1:49:fa:66:9e:68:f6:97:19:c1:
d0:7e:db:03:d3:fa:2a:81:52:5c:3d:b9:d1:df:f1:
82:02:cc:6f:8f:b6:14:b2:9e:5a:9e:fb:c4:d2:e1:
7d:0a:6f:4b:f6:81:85:71:98:9d:a4:44:be:52:92:
96:84:94:d1:18:16:6c:52:51:0d:49:9a:a7:e0:ba:
d9:72:6f:58:81:dc:4a:a7:e7:52:17:de:a6:7a:6e:
da:04:8c:02:4a:fa:7f:3a:2a:01:ca:cf:4b:94:a1:
19:d7:f1:be:ee:38:0f:99:b2:de:42:70:92:a4:a0:
4d:cc:f7:f0:f7:20:22:79:1c:d6:c9:34:55:f2:66:
97:f6:d5:a5:af:93:07:37:c5:90:a3:97:17:f2:79:
6f:bd:f5:07:a4:dd:ec:b6:62:04:15:54:42:ea:3e:
9a:f7:c8:f0:8e:43:40:a5:88:7c:5a:6e:82:43:85:
25:b5:e7:84:c0:98:05:16:f2:54:ae:0d:af:06:54:
07:57:5e:b4:98:ec:4a:72:1d:25:91:af:52:16:e3:
b2:63:67:e6:ea:8a:d4:a7:f4:f5:b3:c3:43:b2:bf:
a0:16:7f:e8:64:18:3f:21:85:48:cb:49:c4:2d:e0:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:7D:42:12:F5:83:59:C8:99:2E:32:71:D9:D6:20:74:77:44:A1
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:73:0b:c4:a3:7a:d7:a6:81:1c:75:25:c3:12:2d:ac:fd:1e:
b9:fd:16:14:23:a9:eb:57:0d:c4:6d:38:f3:67:00:60:d2:cd:
a9:48:3a:53:3d:7c:9f:e8:d1:69:05:13:39:f5:3d:26:7a:68:
9d:22:c1:b4:64:7d:51:26:63:68:d8:72:96:03:e9:02:5c:6d:
2e:d1:02:fe:4e:8a:c9:ed:08:69:4e:25:64:e8:a5:a2:2f:6d:
2d:7f:bd:00:89:0e:0b:67:4e:13:03:18:0d:33:0f:fd:ad:c4:
44:fb:5f:0b:ad:e7:33:de:ef:b5:fc:ec:75:4b:4c:88:d6:bb:
01:7d:57:8c:b6:fd:7b:1b:86:61:91:f5:7e:9d:74:0e:75:d2:
23:ae:c6:cb:45:61:29:39:6f:5c:21:0a:3d:6a:9d:ca:bc:8f:
9c:25:7a:b6:3d:d0:3e:e7:38:24:22:79:44:3a:64:4f:66:e1:
7d:a9:3f:81:ae:b5:7c:06:78:1e:e0:81:65:c4:10:a5:dd:7a:
6f:95:c9:ab:31:0c:88:ff:dc:17:0c:4c:c4:89:d1:7e:b5:fb:
40:32:0e:15:f1:89:b1:e8:e6:54:f3:21:d7:0b:cf:aa:ed:57:
eb:ce:f8:e8:fa:9d:2c:77:64:7b:a6:a0:5f:7f:65:8a:e0:63:
0c:6d:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:17 2025 by rpki-client