Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier: U8VWawZXs+oZe0pqezwZ4EH0PM4aCfaOewX99iS9YGE=
Subject key identifier: 1B:4C:6D:23:D8:08:7C:E5:16:D9:0A:A0:25:E7:1F:D7:E4:DD:51:B6
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer: /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial: 019A7293A0E588917BB8F01F05A5732A0EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number: 06C9
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: Dfz81ohkelMrUWhiILHjs47khkvDQ6YeDJ6Ii12wLwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a0:e5:88:91:7b:b8:f0:1f:05:a5:73:2a:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=1b4c6d23d8087ce516d90aa025e71fd7e4dd51b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:c9:b9:19:4a:12:40:3b:d9:e2:3f:44:27:
75:cd:75:ec:24:fb:85:b0:f3:28:16:84:15:ae:68:
04:d4:4d:f1:3e:6a:c7:31:78:48:40:06:1d:47:4c:
02:e7:ba:d1:df:11:f3:e4:58:d6:36:a7:b6:3d:14:
94:4c:5a:cd:f2:f3:8d:47:98:4b:e8:8f:ae:45:4e:
f0:98:3a:13:83:78:bb:a4:fa:ee:84:e9:56:40:cd:
67:ea:7c:24:25:85:77:2d:d2:ac:bd:a1:ec:09:a0:
82:78:e0:02:91:dd:39:fe:ba:87:24:c3:1a:04:8c:
66:20:b2:81:95:c4:6c:24:be:f6:45:9e:09:a6:48:
35:cf:41:4b:dd:37:9d:fd:8e:87:f4:38:48:7d:3a:
db:d2:df:72:aa:bc:8d:3c:2b:72:df:f1:b1:10:c6:
70:f5:1b:d1:9d:d7:31:9c:e1:88:8a:bc:59:35:4f:
f4:8b:32:1d:72:10:7d:1b:62:cd:d5:ab:ba:f2:77:
0f:32:d6:ca:0f:9a:71:93:85:2a:c8:98:2c:33:16:
2c:0c:36:42:91:cf:1b:6d:6b:c6:df:98:b9:83:d2:
55:76:36:84:4a:fc:03:f0:8a:f4:a8:d3:5d:3a:30:
54:9d:b9:ec:01:79:87:d9:0d:e4:a7:03:ac:09:a2:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:6D:23:D8:08:7C:E5:16:D9:0A:A0:25:E7:1F:D7:E4:DD:51:B6
X509v3 Authority Key Identifier:
keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3d:c6:d0:d8:d3:a4:df:72:3f:9d:a4:80:6f:8d:8a:27:e9:
f7:7a:a1:2e:66:92:86:d8:16:cb:43:a3:75:bd:f3:26:b3:cc:
1b:08:3e:97:b7:6f:a9:fc:75:69:e8:61:87:21:f2:c1:49:db:
43:1a:a4:c1:6a:e7:5a:0d:04:3a:8c:16:7b:37:ca:fb:de:ce:
75:a6:75:e0:60:84:f0:87:01:f0:b6:a4:1d:13:ae:76:e5:d2:
4b:2b:88:81:9b:27:f0:e4:a1:ed:c0:dd:2e:da:27:bf:c4:c0:
e0:df:ef:f7:58:e2:d4:e2:ab:30:27:c3:d2:6a:c2:60:d1:57:
b1:d7:fa:75:c2:78:6e:74:ae:50:88:30:7a:94:97:52:20:3f:
9d:65:71:46:99:d1:aa:ba:52:cf:c8:62:c9:58:d8:5a:2e:69:
78:98:d6:6d:eb:be:11:a3:24:f7:31:8e:b0:cd:e6:58:06:85:
e5:a6:e4:4e:7d:01:c9:94:57:ba:51:3f:ce:58:a1:83:a1:0a:
20:09:87:36:28:ad:f1:8c:db:a0:a8:9d:86:f1:f8:a4:b6:8f:
97:6d:c3:7b:85:8a:e1:e8:3f:4c:3b:24:92:9e:d5:6b:7a:f7:
ac:20:b5:5c:3c:8d:5b:fc:3c:e9:fb:d0:46:9f:c9:d3:e9:9a:
c6:00:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:29 2025 by rpki-client