Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier: IgUWDW7DDyu3qmjb9cUw4RJyoitH4WBDY8F8NBAz+NI=
Subject key identifier: 8D:D0:9D:73:D6:77:27:F5:C3:06:FA:34:C0:7C:21:FA:3E:E5:25:C8
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial: 019A71133949242F26607199DE77C3E357CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number: 0DB7
Signing time: Tue 11 Nov 2025 04:01:16 +0000
Manifest this update: Tue 11 Nov 2025 04:01:16 +0000
Manifest next update: Wed 12 Nov 2025 04:01:16 +0000
Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: x917jELdWeCkV67i0sXLO7t+WfJX9pguQlH8COzoTPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:39:49:24:2f:26:60:71:99:de:77:c3:e3:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
Validity
Not Before: Nov 11 04:01:16 2025 GMT
Not After : Nov 12 04:01:16 2025 GMT
Subject: CN=8dd09d73d67727f5c306fa34c07c21fa3ee525c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:29:39:f4:90:52:1c:3a:a9:da:4c:a3:2e:
20:79:30:90:d3:21:33:51:1f:1c:3b:80:3f:72:c4:
27:44:9c:12:2e:41:3b:49:82:00:8c:09:e5:9f:6c:
9d:01:89:ff:10:54:2a:e9:b4:f2:97:58:c0:8f:54:
dc:c4:e4:e5:9b:a7:1d:5d:e0:0e:dc:42:79:73:b8:
c5:3b:27:c2:03:3a:24:eb:6a:97:09:60:7f:9a:f8:
dc:84:53:78:58:2d:e5:1b:20:38:83:c6:61:67:c3:
f4:b4:61:31:05:31:31:b8:3b:55:ac:59:c4:2b:66:
a8:6b:49:43:02:1f:5b:db:db:d4:e4:c0:ef:97:2c:
28:04:72:44:cb:dc:2d:10:54:ac:0f:94:b8:7a:e5:
b0:cc:0a:39:cd:89:68:92:e1:54:2c:39:6c:ce:ad:
94:e4:6e:6e:37:89:f4:de:5f:91:7a:11:d2:ed:a6:
0f:3f:97:40:e8:5b:36:ee:d4:a0:a0:51:31:97:08:
1b:54:9e:4a:b6:98:7f:ac:c3:2a:df:9c:92:7d:eb:
31:64:73:f0:da:bb:53:d6:a6:01:6b:4e:ca:af:d9:
fc:4d:5a:16:3d:c2:ad:45:4d:2a:c0:8a:6c:8f:3d:
58:68:98:c3:90:fe:94:67:a8:20:02:83:f7:b4:7d:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:9D:73:D6:77:27:F5:C3:06:FA:34:C0:7C:21:FA:3E:E5:25:C8
X509v3 Authority Key Identifier:
keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:54:44:bf:29:ac:d3:3d:c4:f7:69:ac:64:71:f5:d0:ef:7b:
60:36:e6:5e:2b:39:24:3b:c7:29:00:c7:7f:ed:80:78:a8:40:
80:ad:4d:33:bf:9b:04:87:81:52:db:ae:1b:b4:fe:ef:f6:8f:
c2:90:09:a5:3f:66:36:d5:36:1f:64:4d:c9:70:84:d2:d4:49:
62:6f:3f:e7:13:a6:c1:eb:55:b9:c7:2e:ac:65:75:46:ff:8a:
9e:9a:1a:70:6a:ee:73:91:7b:d9:92:02:fa:94:56:ce:10:0b:
0c:07:ea:c1:39:36:d5:df:05:6d:8e:a1:a9:9c:49:7f:a7:a9:
cf:6a:b9:74:b2:4a:15:b5:e2:69:b3:63:e3:9d:c1:30:36:80:
21:35:b5:c3:c6:0b:fb:1a:78:aa:11:ce:c0:d4:62:bc:f2:f2:
89:30:81:0c:4b:30:34:50:8f:3a:30:15:c9:ba:e5:d1:aa:19:
13:76:d6:a9:b5:e1:08:0f:46:73:9e:0c:b5:09:09:75:8f:cc:
c3:e4:e5:ec:d7:31:64:a2:e0:64:8f:3c:ef:aa:fe:94:fe:e1:
81:99:b2:4f:82:67:c3:90:48:45:32:ff:a5:62:94:07:f9:ce:
a6:1d:d3:cf:22:f0:a2:d4:de:c7:9d:7f:0b:4a:6a:67:64:e1:
49:76:a5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:35 2025 by rpki-client