Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: sbHNQYd/gKACRkAtibGL+HgpKik1x6/EYY2sr1PEH7c=
Subject key identifier: 22:9F:29:87:5D:5F:3B:25:E5:1F:97:DF:DA:20:AF:09:87:09:55:25
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 019A7112ED2C3F2EA6111EA9D871D6D3CE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 11F3
Signing time: Tue 11 Nov 2025 04:00:56 +0000
Manifest this update: Tue 11 Nov 2025 04:00:56 +0000
Manifest next update: Wed 12 Nov 2025 04:00:56 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: vRedyWxv9BB8VhglawJuxGWs6GrGPR2ZwqE6w6R+Wzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ed:2c:3f:2e:a6:11:1e:a9:d8:71:d6:d3:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Nov 11 04:00:56 2025 GMT
Not After : Nov 12 04:00:56 2025 GMT
Subject: CN=229f29875d5f3b25e51f97dfda20af0987095525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:e4:a0:91:f8:93:86:56:e0:61:8a:04:b4:
48:99:1d:09:e0:30:fc:1b:ca:ce:d7:93:82:59:d8:
26:f9:4e:57:96:d8:0d:3f:ea:e6:e3:84:55:86:da:
76:17:55:26:d4:96:72:8f:87:1d:42:f5:58:32:05:
48:1c:3a:ea:8a:fb:fa:97:92:81:57:bc:eb:b7:ff:
89:b6:09:f0:5b:01:bb:9b:92:db:b4:1b:9f:5b:51:
ab:f9:21:60:24:90:db:8d:a7:d9:b8:ac:ec:35:73:
b7:2b:b3:3b:54:24:bf:f3:55:ea:02:47:65:22:93:
60:14:16:57:ee:0c:04:65:79:d7:9b:26:e4:58:c6:
ed:77:2d:a7:b8:45:3e:a4:3d:3c:02:55:26:d9:59:
b5:ce:d5:da:e6:d4:41:91:54:1c:1b:24:22:c8:80:
ec:4e:e2:85:d4:a9:d2:c1:8c:8e:8f:41:63:13:f5:
e0:4b:f4:32:70:d0:25:a2:6a:63:1a:31:de:7b:5e:
4d:a0:65:a2:cd:04:04:d0:85:73:e5:93:78:54:11:
17:40:ce:9c:35:2b:f7:78:e7:a9:03:86:2b:bd:4b:
54:6b:28:7a:80:38:b4:cc:44:2b:76:a7:b0:d1:3a:
5d:d5:3a:28:b6:fe:aa:65:a6:6f:36:d1:36:69:d2:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:29:87:5D:5F:3B:25:E5:1F:97:DF:DA:20:AF:09:87:09:55:25
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:07:34:a3:47:b8:ef:e3:01:e9:ab:13:30:af:5e:f6:40:e7:
46:62:25:85:97:3b:60:18:6c:ae:30:d8:85:9b:cf:5d:1b:f0:
94:b0:1e:46:39:a8:ee:62:e6:f7:9f:77:09:90:09:e4:0b:2d:
3d:e2:81:0e:e3:bf:3d:61:61:e5:f0:14:7e:e8:d2:83:d0:ec:
58:49:20:ba:22:d6:86:77:52:7f:73:9c:9d:ac:5b:cb:e3:e3:
67:1d:9d:58:ff:ae:1a:6c:3f:9d:ea:c4:8d:cb:88:a6:7c:a9:
bd:cd:34:99:48:46:b4:2b:19:0d:58:f1:12:24:24:14:7d:3e:
0b:28:df:0b:d9:69:3b:93:2a:14:93:1a:cc:4c:9e:7b:a8:76:
11:4a:e0:0f:1c:08:f9:5e:fb:19:43:d7:3b:1f:9e:a6:18:16:
5d:20:bd:e2:a2:88:e2:49:1c:32:7e:77:65:a9:8d:ca:6f:96:
d6:45:b7:cd:9d:e9:cf:7a:fb:f2:19:25:55:a6:22:49:f6:11:
c7:06:9a:ee:2b:d0:bc:07:3b:e8:73:d6:88:b2:7d:53:7c:64:
fe:31:01:38:8d:b8:0b:ca:79:16:fb:e1:c7:b9:2e:a2:25:46:
dc:bf:5b:8c:53:47:fa:15:d2:12:af:c6:3e:06:de:f9:65:38:
5b:8c:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:17 2025 by rpki-client