Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json)
Hash identifier: pV2Rr8+9r7wna76l/h6goMR5Yg4rBtv6cf9a4z4FBM4=
Subject key identifier: FD:5E:85:E7:F6:59:D0:90:82:A8:95:ED:74:06:46:38:92:E6:3E:9A
Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
Certificate issuer: /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Certificate serial: 019A70DC7F4F9331EFA39B33EF314CD1359E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
Manifest number: A7
Signing time: Tue 11 Nov 2025 03:01:29 +0000
Manifest this update: Tue 11 Nov 2025 03:01:29 +0000
Manifest next update: Wed 12 Nov 2025 03:01:29 +0000
Files and hashes: 1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: +XAgiROAflK1hXtykEKGQhlauJnsrCY02FPMgOUP1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7f:4f:93:31:ef:a3:9b:33:ef:31:4c:d1:35:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Validity
Not Before: Nov 11 03:01:29 2025 GMT
Not After : Nov 12 03:01:29 2025 GMT
Subject: CN=fd5e85e7f659d09082a895ed7406463892e63e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:58:5f:28:ef:97:7c:67:bb:d8:f0:0b:6b:
32:d1:99:7a:e1:71:55:77:d2:ff:a8:83:07:ef:43:
8c:7e:07:c5:1a:b7:a4:82:67:0e:79:fa:c0:05:e7:
e0:aa:90:c7:f0:fa:a3:e0:ff:94:f3:e0:f1:8c:b7:
cd:24:5f:19:85:6a:c0:e4:76:98:c3:c8:fd:a8:49:
b4:82:48:69:4b:17:83:57:3c:1e:47:d6:4a:ef:2e:
c5:52:bb:14:13:59:ae:ef:68:90:14:a5:e9:c5:da:
5c:00:6c:fc:35:ae:e6:ac:52:83:76:d0:85:dd:78:
3c:21:b4:cb:5e:b3:d4:39:4c:c0:d4:53:95:59:77:
a1:da:9f:13:f3:07:02:24:a3:ed:e1:a0:11:34:a7:
e4:6c:b6:21:b9:43:4c:4a:ca:1a:c7:42:99:13:62:
9f:84:4c:a0:71:53:6f:fb:e1:c7:0d:1f:01:e0:d5:
57:db:62:82:87:70:19:03:71:85:f8:e0:40:b3:bd:
fe:bf:61:6e:a6:7b:e4:78:e6:8c:93:24:b6:50:97:
1c:17:4a:4d:ea:e6:a7:09:13:53:2b:45:ae:d0:18:
61:6a:0a:ac:a8:83:2f:de:28:bd:32:df:0b:3f:88:
b6:4a:1d:75:b4:db:78:d5:a6:ce:a8:43:ff:42:25:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:85:E7:F6:59:D0:90:82:A8:95:ED:74:06:46:38:92:E6:3E:9A
X509v3 Authority Key Identifier:
keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:0c:19:1e:48:15:4e:51:2b:f0:72:0e:7e:3a:cc:b4:1a:
97:38:67:22:c5:31:2b:83:a9:96:66:66:07:ef:99:83:d2:fa:
05:b7:71:6f:a9:b0:5e:4a:5b:9e:d5:6a:68:35:29:1e:bf:57:
e0:e2:db:87:a0:17:e7:e5:e0:a4:ff:d3:3c:9d:17:e5:89:da:
a8:b1:b4:fb:92:a5:0c:6a:4f:ba:a4:f0:8b:5d:0f:76:b1:d2:
12:f2:4b:75:16:fc:1d:10:ed:3b:bf:1a:8b:d7:22:05:e6:6f:
97:d3:9a:8d:dc:97:99:d8:ce:1d:94:fe:2b:a4:be:93:99:74:
a2:53:61:68:e3:cb:cb:23:6b:1e:a3:b0:08:07:ed:85:7f:18:
ad:fa:9a:57:02:01:0e:a7:39:94:2e:29:14:c7:6f:07:db:92:
85:79:1e:8f:57:9a:bf:5f:c9:3d:b9:1a:5a:35:43:83:44:79:
f2:8b:88:4f:59:7f:6e:61:0b:76:43:ee:ca:08:68:fe:3d:0c:
e8:58:f7:ee:95:fe:99:7d:9c:37:35:12:1b:1d:5a:fd:30:1b:
d2:29:dc:d4:23:c8:fd:06:48:70:36:d8:79:28:3e:fb:d9:98:
cb:ed:5d:16:99:60:9c:ca:f2:0f:54:8c:e6:32:fe:9f:51:13:
10:10:28:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:56 2025 by rpki-client