Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: vRdSJqseq/eLxGH/u1ZIDotm6F5gq3DMECQkDSG9DFQ=
Subject key identifier: 96:FD:9B:EA:77:19:51:04:7F:D6:5B:52:2B:08:57:CC:80:4D:AB:42
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 019A7225A802870F4D7FBF08654326A8F839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 0763
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: RRlIrbSN1A3CRuZAwlKboFenCGUFsyBpId4SNPAnxWI=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a8:02:87:0f:4d:7f:bf:08:65:43:26:a8:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=96fd9bea771951047fd65b522b0857cc804dab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:e2:9b:97:3b:c6:5d:ae:cb:3d:cf:8b:43:
fb:50:87:fb:a8:06:db:e6:d4:00:dc:55:49:ce:1f:
e7:97:f5:a1:06:ef:56:25:1b:3c:41:68:b9:65:df:
2d:9a:95:25:0a:ce:38:26:3e:0c:e6:fa:17:89:04:
62:f4:6a:c0:c5:f9:21:12:1a:47:dc:ef:39:4e:f1:
3f:90:a8:f6:4e:f5:80:f5:17:7e:10:88:bb:c7:e5:
ab:a2:c9:74:f6:78:0d:8a:8d:8d:db:01:37:61:4d:
35:dd:29:98:b8:ae:ae:4e:97:78:df:11:87:b0:28:
74:a4:1b:04:cf:68:15:a3:e3:97:70:e7:b3:b0:5f:
e6:76:b5:42:6c:8d:10:98:b7:d8:e2:a3:9c:13:d2:
e4:a8:7f:f9:d4:13:b0:6f:a2:20:a3:f9:9b:09:62:
1b:33:db:28:8e:30:b7:b9:cf:15:b7:7b:57:e6:33:
9b:93:c9:61:7f:5b:0d:6d:e8:f9:d7:71:9d:27:dc:
10:78:59:d4:04:89:6d:8d:78:01:fc:e3:b3:57:de:
2d:d6:e6:8d:62:c9:a4:fa:06:31:f8:ab:a8:b3:a0:
d2:dd:1d:eb:6c:6e:78:6d:72:74:35:77:2d:41:66:
90:86:03:b3:d8:6a:6d:19:1a:30:a9:2d:76:a6:f2:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FD:9B:EA:77:19:51:04:7F:D6:5B:52:2B:08:57:CC:80:4D:AB:42
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:78:28:59:c8:ad:9c:e9:1e:16:0f:da:35:df:e4:03:ec:e0:
6d:4b:16:23:01:b7:28:05:ee:d0:20:d0:3e:e3:19:a7:48:25:
e8:22:17:07:3e:d1:99:38:25:2a:76:54:f9:7b:96:8b:7e:05:
74:4b:e9:d2:f2:15:c2:e5:c0:3f:79:1e:79:82:67:a2:8f:a2:
a6:d1:f9:56:13:09:c5:f7:03:d8:f7:a7:3c:05:bf:72:e2:02:
21:14:35:85:f8:0a:a7:a5:2a:69:06:38:40:4e:d6:67:94:da:
ea:5e:fc:60:25:b9:c2:1b:26:70:fd:2b:57:f9:16:d3:87:03:
4b:4f:8e:d5:b9:c0:e6:d3:1d:d9:74:3b:71:8f:6b:53:aa:19:
52:33:18:04:0b:d0:f9:b1:9d:98:a9:aa:c2:45:d1:cb:9f:44:
ff:bf:9e:5d:06:f2:73:63:35:c6:0d:51:92:37:43:be:d9:6a:
5d:a7:2d:f5:71:03:42:4a:79:65:d9:32:aa:b1:5a:9c:81:8d:
8e:b9:00:5c:ff:ea:dc:5e:d2:46:8a:35:21:52:40:65:01:2f:
c8:fb:6f:6c:39:0a:c3:4d:42:30:b4:6c:89:d9:35:a7:49:07:
b8:d0:d2:16:45:76:e5:77:42:d6:a1:3c:65:de:5a:00:ad:68:
2d:72:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:21 2025 by rpki-client