Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier: ia6G8fikM08i7SZqPDwRkED0K/MnoBm0GwlUTxAjQyw=
Subject key identifier: 1E:52:50:0A:3E:24:41:EE:FF:F9:ED:FB:3B:15:AE:E0:F3:91:FB:7B
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial: 019A71B971C7455C73E508FF31C7CA07F359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number: 155A
Signing time: Tue 11 Nov 2025 07:02:49 +0000
Manifest this update: Tue 11 Nov 2025 07:02:49 +0000
Manifest next update: Wed 12 Nov 2025 07:02:49 +0000
Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: 7UePOMih213hlY3+T48QHTUDLm4qW23GE0h6IrzpfHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:71:c7:45:5c:73:e5:08:ff:31:c7:ca:07:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Validity
Not Before: Nov 11 07:02:49 2025 GMT
Not After : Nov 12 07:02:49 2025 GMT
Subject: CN=1e52500a3e2441eefff9edfb3b15aee0f391fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:c2:9c:02:c9:98:ce:fd:42:10:54:2c:0c:
e5:4a:18:63:ea:e5:2e:2f:b5:dc:6c:9e:f2:b2:6c:
a6:9d:57:f0:52:38:ad:d2:59:10:6d:4e:b9:e2:19:
db:4d:20:93:cd:d9:93:0e:b0:bd:21:9d:42:96:87:
5d:08:62:b4:84:a2:bc:b3:72:2f:75:dc:34:3a:32:
d0:f7:91:e7:51:5b:0b:df:4d:f1:e5:b2:64:12:cb:
ec:67:1d:f0:db:dd:fd:75:9e:77:7d:36:34:35:84:
99:6a:6b:d0:67:8b:6c:2e:e6:e8:67:a7:3c:d5:50:
88:57:10:32:89:ae:7a:77:ad:d8:a3:fd:cb:92:54:
7f:97:21:83:67:60:28:00:df:f7:6d:5f:94:6b:c1:
be:15:6a:7f:87:69:c7:e6:60:92:f6:cc:bf:82:89:
ce:82:6b:a0:a5:6c:1f:10:5c:45:47:6b:92:fa:08:
81:c7:47:42:ee:ad:ab:33:32:39:d6:46:de:39:0b:
6d:bc:44:44:1f:28:f5:33:12:38:0a:a8:72:6b:65:
57:48:48:46:1c:84:3f:af:cb:62:29:8a:0f:d5:4c:
73:3b:ea:b4:0a:f6:c7:b9:bc:dc:74:1f:66:3b:9f:
a3:d6:51:1d:46:e3:b4:0f:9e:e7:35:7f:89:cc:31:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:50:0A:3E:24:41:EE:FF:F9:ED:FB:3B:15:AE:E0:F3:91:FB:7B
X509v3 Authority Key Identifier:
keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:00:82:61:c1:d4:aa:f1:cb:7b:2f:b8:95:97:81:04:ad:
a2:5a:80:40:99:0d:23:80:67:2f:a0:4e:f8:db:dd:c9:08:eb:
23:df:30:3b:d0:e3:7b:89:58:51:1b:73:71:36:6c:05:79:20:
b0:44:a9:2b:2d:8c:4d:b2:b1:d9:72:46:8c:90:3d:35:0d:90:
44:7c:1c:18:23:5b:12:41:98:89:85:9b:a7:13:30:c9:ff:16:
33:c9:5d:7a:68:74:67:18:7d:98:89:94:11:01:ba:3f:89:5c:
5e:dc:a4:33:01:b6:bc:dd:47:cd:11:b0:45:9c:e8:9a:4b:57:
15:9a:0b:a2:d6:eb:d5:ee:8d:0f:41:94:f4:43:0a:13:56:2b:
0b:52:ea:49:33:a8:f1:d7:92:c4:a7:42:bd:8e:c6:7f:37:ae:
3a:8d:26:b1:ce:be:02:3f:39:31:9d:02:27:c4:8a:f6:f0:d5:
8e:0d:11:bc:d7:14:1b:b3:1b:53:04:2e:61:53:13:02:ae:94:
2e:f3:65:eb:60:d3:ea:26:67:d5:3e:3b:fa:fb:4e:c9:be:77:
90:fd:62:90:6e:f2:fa:9d:36:15:57:66:59:08:ce:f3:8a:91:
3b:58:99:3f:8e:d5:a2:8e:03:38:ac:c9:2a:4a:a4:fa:a7:86:
c9:3f:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:43 2025 by rpki-client