Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: cSsoQVBAKrCoH+c/kPOvGTePLf290PYdB8jkBa9spLk=
Subject key identifier: 8D:4D:0A:A6:3D:64:61:3C:49:76:F8:13:C4:54:6C:FB:FE:EB:8D:5D
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019A725CEFB8870B46D17E016AAE0D6A4C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 04A3
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: J2D8cIhS4MnJ4/fl+6OdWebQ71QxQbOK5x/bdCgkoJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ef:b8:87:0b:46:d1:7e:01:6a:ae:0d:6a:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=8d4d0aa63d64613c4976f813c4546cfbfeeb8d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:02:f8:2c:2b:2b:80:1c:e6:70:37:88:aa:
55:a4:ad:e8:d0:87:00:75:86:de:da:8d:29:85:2a:
1f:0f:6e:c8:63:c7:93:82:75:fe:aa:75:ad:41:23:
a3:52:4a:29:f9:26:6a:d8:15:6b:02:4a:90:05:59:
43:c3:ee:55:83:38:87:ac:85:eb:4c:10:6e:62:96:
b5:66:9e:9e:44:c1:90:c2:ff:0c:40:ff:67:7e:d7:
bd:8e:7a:4e:7b:c5:3f:60:5d:37:f7:dc:1c:5d:09:
6d:b2:ac:f1:e6:b0:a8:d6:7c:69:40:01:a3:2e:64:
69:99:2d:07:26:52:f4:85:41:2b:08:df:cd:19:5c:
27:e9:96:a4:fd:e1:7d:78:cd:9e:7f:7f:1e:e7:a9:
d1:87:8a:4c:c8:e7:5e:49:9c:7b:3e:34:ec:73:83:
6e:13:8f:fd:93:22:37:2f:da:49:a7:41:79:8b:cb:
93:c1:0a:41:dc:45:b8:56:a8:be:ff:a5:1f:ec:b6:
a8:9e:1f:1a:9c:3d:e5:15:06:09:01:10:78:d2:68:
72:fa:f0:d0:c4:e7:89:e7:03:66:3c:f1:76:86:63:
02:ed:ac:fa:f1:a5:d9:cf:73:e6:49:f4:9f:38:e8:
c7:3c:e3:af:89:8f:a0:2f:ce:ca:7f:b9:4e:2b:22:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:0A:A6:3D:64:61:3C:49:76:F8:13:C4:54:6C:FB:FE:EB:8D:5D
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:de:33:6d:4c:b3:ce:bd:fc:dd:3b:d6:bd:12:33:c0:7c:0d:
ff:07:e6:ed:51:d3:b0:56:14:91:5e:7b:58:23:fc:d7:e1:2c:
83:22:53:74:47:4c:19:04:0a:6a:1d:7f:49:68:9a:0a:35:58:
40:f3:2c:60:58:cb:75:01:01:e5:a1:4e:42:2b:4c:75:54:a5:
42:75:11:03:05:95:4e:6c:be:34:8d:71:bb:32:1a:2e:d1:29:
da:2e:76:63:03:13:75:ff:e5:e8:ca:1e:1b:68:83:2b:f8:57:
f2:a5:fb:57:96:57:22:25:3c:f2:73:82:cb:18:4f:e6:4d:d8:
42:a5:89:9f:e0:a6:1c:45:0d:12:b1:b2:95:db:44:40:5d:f1:
98:f6:ec:fd:b7:62:5c:ea:39:91:8a:b7:41:ad:17:bb:0b:5f:
4b:28:80:9c:0b:0b:f7:34:c7:45:e8:5f:eb:4f:b4:ff:57:20:
31:e1:1c:3c:1e:0c:d5:58:49:03:f5:17:7f:cc:c2:b6:08:aa:
b3:b6:7d:d3:0b:3d:99:a3:e9:8c:f4:cb:2c:ec:ea:7c:9b:c1:
f3:f6:3d:38:b1:e5:a7:fd:94:1f:02:4f:b1:42:42:08:ce:fb:
9a:ab:29:36:86:5d:dc:9a:2c:88:37:45:44:ad:9b:99:97:01:
7e:8b:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:48 2025 by rpki-client