Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: QX8eElBJ8FVSN/CeJt0sF61GjFzkCyycEmXpr0F93vY=
Subject key identifier: 35:53:76:66:B0:84:31:F2:39:E5:3A:82:BF:26:28:C7:AF:1A:78:1A
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 019A71B8EEE33BC9980B208C7244F6955845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 0AA7
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: Xx3eY0ZHYF1J4H0TfpJC4Cabz5ZRocV5dfp4MXpd5m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ee:e3:3b:c9:98:0b:20:8c:72:44:f6:95:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=35537666b08431f239e53a82bf2628c7af1a781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:7b:83:61:3f:4f:25:a0:f1:c5:66:4b:c2:
aa:d0:cc:e1:5d:be:2b:6b:a5:97:64:d7:d2:b4:cf:
ac:41:97:26:22:f4:56:32:71:dd:3d:d2:1f:37:65:
e2:26:2d:57:50:cf:ae:3b:7b:a6:e6:b7:bd:3c:80:
8d:80:df:4c:58:1a:df:ce:a7:f1:7a:81:13:70:d8:
17:3f:62:03:55:93:0e:89:03:b6:ae:3c:64:37:06:
eb:75:56:3f:c7:3c:62:f4:6e:07:99:93:bc:30:8d:
dc:49:12:93:6e:95:87:ac:02:5a:8b:62:da:49:d6:
ab:69:8f:a5:2c:ed:05:87:89:58:e5:92:1e:91:28:
00:a7:58:22:f8:66:9b:75:e1:b3:1e:c3:0d:20:00:
87:32:a1:f2:8a:29:75:c4:59:17:d5:00:97:bd:fa:
b2:b3:82:ac:e3:c2:9e:4f:08:2d:42:47:36:98:b3:
51:5f:e2:0f:8a:e7:a1:ef:34:8d:c0:cc:82:fe:56:
21:81:91:1c:f5:22:ee:a6:37:11:99:a4:e8:78:35:
8e:d1:a6:68:07:2a:9f:63:06:b2:0f:ff:0e:14:9f:
40:12:61:e8:c9:06:4e:a4:78:e2:15:95:64:e4:ed:
d3:27:a9:2e:5d:47:6e:7b:7d:f3:15:aa:b3:6e:ee:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:76:66:B0:84:31:F2:39:E5:3A:82:BF:26:28:C7:AF:1A:78:1A
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6e:f2:a1:82:80:42:be:d2:88:47:cd:4d:67:ce:c2:df:66:
a3:c6:70:b3:07:43:29:70:ff:fa:b7:f3:10:77:a8:ce:6b:64:
30:74:0a:fa:5a:f0:03:f6:4d:7a:90:40:88:6b:49:cd:4b:99:
2c:1a:1c:9a:0d:e9:d5:ab:42:40:f9:7e:c5:94:6b:45:80:39:
55:0e:96:de:a0:cd:a8:83:83:21:d0:3d:2c:43:17:dc:f4:d3:
af:45:5c:2b:14:d1:07:19:2c:df:4e:93:46:44:1b:c9:08:79:
7f:65:bf:2d:03:b9:26:12:f7:c5:4a:a9:35:bd:a8:89:32:f6:
7c:db:71:d6:28:f4:27:1a:75:ce:76:8e:89:8e:29:bc:a9:ea:
93:54:8f:11:b8:e7:0c:88:4f:f8:03:05:b9:0b:86:13:4f:c8:
7d:01:c1:d1:62:c9:2c:9b:b0:57:0d:26:e3:09:17:ee:cb:30:
a3:14:03:5a:0e:a7:1b:e4:81:0e:33:bf:c8:53:46:c2:f5:fc:
fe:ae:ee:61:93:d6:af:c5:6d:b9:b3:a0:14:eb:c9:ca:2b:62:
b1:c8:d3:85:c3:ec:89:e9:4f:c9:4e:11:0c:ac:eb:a3:ea:5a:
3d:77:23:f4:39:7a:ba:c9:e7:e4:fd:e4:0e:07:76:5a:f6:3c:
f7:c5:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:54 2025 by rpki-client