Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: bmnffZMpwMwmFAIat4Z8e3A69vxRwNmS4TNezaYid9w=
Subject key identifier: 35:35:78:2D:F7:E2:7D:9D:BB:EE:73:EB:B0:E1:F5:4D:E8:B1:BD:7C
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 019A71B846A0FE69562020E5DDFED4EA83DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: 5CGxd3J0yDxa885h6+5l4B6JQC/cDl9zgV5W3vFqMMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:46:a0:fe:69:56:20:20:e5:dd:fe:d4:ea:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=3535782df7e27d9dbbee73ebb0e1f54de8b1bd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:a1:69:ce:30:78:a4:a8:67:05:f9:34:4b:
b4:db:b3:27:00:8f:1b:e4:a9:de:3c:7c:c9:fc:5b:
c0:15:a5:3d:fa:a9:ba:53:f8:cf:e1:46:81:e1:8b:
d9:87:8e:89:c0:0e:1a:fa:61:10:c8:47:c8:9a:d5:
91:62:00:1e:b7:62:30:e2:e4:f4:77:f1:53:67:6f:
9d:3d:db:5d:e1:4d:56:61:a0:92:7c:e4:d6:d2:10:
32:3f:b6:87:f8:1f:90:e6:76:f0:b6:11:a3:87:4c:
b0:a3:5d:ee:9c:9f:b0:a9:93:d6:4c:a0:89:e6:1a:
4c:f0:d7:5f:d7:43:0e:5b:3d:59:e5:84:3d:81:65:
ca:f1:e8:a4:1c:41:4c:e3:19:4f:6f:a8:49:05:a2:
6e:21:86:63:07:22:61:9b:d8:2b:09:31:c1:70:a6:
92:3c:75:24:ed:96:a1:58:6f:bd:fc:8b:b6:ac:61:
61:11:25:96:b2:30:d1:97:92:a8:f9:79:ce:a7:54:
ae:56:21:a8:42:17:7a:4c:cb:62:dd:16:ad:ae:be:
a4:b3:65:7e:91:55:d6:0b:5b:ab:80:dd:f0:80:86:
7c:bb:69:34:72:85:2a:23:d8:b6:48:a7:9a:7a:63:
24:4a:84:52:86:ae:00:87:3f:09:10:ce:0d:21:c9:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:78:2D:F7:E2:7D:9D:BB:EE:73:EB:B0:E1:F5:4D:E8:B1:BD:7C
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:a0:eb:26:02:f2:53:f1:ce:cf:a3:1c:7e:3e:18:f8:3e:
5c:80:92:05:22:c3:fd:e2:22:80:21:45:59:3a:b0:71:8e:88:
7e:fe:52:37:2b:c1:66:5a:53:61:39:7f:18:db:20:05:22:f0:
d7:e3:42:f6:8c:46:ba:65:10:b6:d2:75:7e:6d:40:36:4f:0f:
65:cc:2a:c3:10:af:36:d1:d9:14:ab:bd:4b:31:6c:55:0b:dd:
00:58:ef:23:99:f5:d6:0c:c6:3e:61:5b:86:3c:29:f6:91:30:
46:88:ea:93:8e:45:09:e3:1b:04:23:d2:19:aa:e4:cb:0b:be:
37:99:ce:28:af:40:5c:c1:ea:8a:3b:07:0c:d4:0e:12:4e:6c:
aa:cc:d5:36:7f:60:4b:8b:26:82:6f:28:59:bb:7f:16:63:88:
07:44:d2:0d:84:16:ab:3b:df:c7:cf:a1:a3:4e:43:5f:2e:7a:
1e:4b:bc:9a:25:81:09:9e:8c:3a:aa:f7:10:95:66:c0:58:db:
94:80:86:1b:12:07:7e:08:10:ce:3d:77:21:48:bb:85:5f:82:
09:35:1d:16:28:06:0e:8c:ce:df:6a:89:3a:c5:20:a6:3d:ac:
2f:76:1b:5e:4e:ca:31:37:a0:3b:81:10:77:d0:d2:f3:41:83:
09:cb:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:56 2025 by rpki-client