Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: EHMNV7atm1K8DpkGf0ypquJ8r89zNPA/SP3jDhdw9JY=
Subject key identifier: D1:ED:88:A3:15:D4:E2:16:83:4F:E5:4C:68:03:28:5A:C5:DC:48:42
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019A7226289CA0B81E6269ACD26E3ADAC294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: bHecUbIeJjbvXeEgxVc8gDH7QQ8XkFPsYgcmlxMFgpM=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:28:9c:a0:b8:1e:62:69:ac:d2:6e:3a:da:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=d1ed88a315d4e216834fe54c6803285ac5dc4842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:38:51:9d:8e:d9:25:c2:a2:82:4a:b6:b1:
8b:87:dd:6b:b4:c0:41:b3:a6:b6:11:ea:75:49:09:
01:6a:ea:58:16:cb:47:5c:f9:77:d4:20:9c:09:c8:
19:dc:49:13:16:67:f2:e8:0a:d1:5c:da:cf:d5:72:
c0:35:7d:ab:7a:ca:3f:7c:5e:31:75:38:31:17:3c:
ec:67:c8:62:3c:62:44:69:20:ba:fb:b3:fd:d0:82:
a8:62:f8:19:42:e8:e0:dd:06:c7:c0:df:89:fd:72:
62:6d:0c:c8:38:0f:d2:4a:30:f8:96:27:2a:ea:4b:
5b:a0:13:a1:af:4e:4f:c0:98:db:f1:5a:3d:c0:80:
6e:80:71:a0:09:94:54:4a:62:25:89:9e:75:8e:96:
55:ff:b1:81:7c:f8:f1:d5:f4:82:51:1a:76:cb:d5:
e6:e5:5f:59:f2:8d:a9:72:bb:a2:78:b1:ac:89:34:
38:db:5a:9f:b2:41:85:d1:2d:b6:34:00:03:31:df:
c2:bc:ad:9d:4b:f0:e6:1c:e6:35:da:77:96:a0:0f:
99:90:73:4e:30:ad:b4:86:e3:20:75:9d:78:dd:76:
7a:24:98:6e:d2:92:c1:43:23:6b:bd:ae:39:64:df:
eb:9d:fd:cd:5c:2b:2e:a0:17:30:a8:3c:35:36:f5:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:88:A3:15:D4:E2:16:83:4F:E5:4C:68:03:28:5A:C5:DC:48:42
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:fd:ed:a3:d7:22:f2:c2:1e:30:fe:3c:d0:31:42:b2:8d:
d7:fa:0a:0a:b0:33:ec:b1:db:09:73:aa:7b:16:ba:4a:ad:f8:
60:e4:fe:68:82:5e:ae:b4:e7:a9:db:b9:0c:1f:1e:d8:9c:5c:
49:de:28:e4:76:ba:9f:31:a6:68:10:d1:41:9b:90:1e:94:24:
3f:b1:4f:1e:39:7b:14:bc:f5:aa:cd:5c:35:b7:43:b1:de:24:
12:78:82:b1:5e:0a:3d:80:f2:ce:d9:8c:1f:93:a4:34:03:2e:
90:25:51:e3:90:2c:da:f3:04:4e:e5:3a:78:4a:a1:ee:d6:10:
e5:db:7e:10:22:6c:20:94:b8:93:62:86:cc:65:b8:36:cd:10:
c2:b8:ca:bd:58:17:6c:e3:21:38:9b:7e:1b:6c:45:7d:b2:b7:
91:c6:dc:8c:64:98:d2:dd:a7:6e:74:7b:ee:7f:3a:e8:97:17:
47:c6:dc:3f:e6:44:f7:5e:b5:54:8b:4e:97:25:54:14:ef:5c:
b5:17:cd:71:9c:bb:18:ff:0a:fc:fa:00:56:e4:b0:c9:19:d3:
de:b5:68:39:ee:39:f9:c1:94:a9:00:0d:11:84:fc:bb:eb:b8:
38:0b:cd:fa:7b:26:b1:1a:48:09:8e:80:7b:5c:b8:28:45:73:
b4:47:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client