Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier: xzvFGaltzsokjcA8hO9AB9+u1XcAz30fnVs1YRM50W8=
Subject key identifier: DE:B2:52:E8:FE:E2:E1:0E:BB:18:A7:1B:88:77:52:50:C5:43:E4:CC
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial: 019A71B7ED7C5B43C06713DEB3A24015C117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number: 0A7D
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: J2gUDLKgltV1qJu1OEH+DSoYbuexjvw1fjS1M33zZvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ed:7c:5b:43:c0:67:13:de:b3:a2:40:15:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=deb252e8fee2e10ebb18a71b88775250c543e4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:66:31:9e:0b:5e:0d:6e:d6:8f:b1:ea:dc:
a1:10:bc:4d:4b:39:e4:03:f6:d2:dc:1f:8a:d7:6b:
09:a7:09:85:f7:96:07:3f:f2:9f:9d:29:2c:37:22:
3a:8c:4e:24:68:ee:57:26:c3:27:f6:a8:3b:77:d9:
f4:a1:7b:4a:8b:82:dc:64:a3:73:30:f3:6d:6c:46:
de:8a:39:a8:b5:e7:c5:44:1e:74:48:17:bb:46:c1:
ac:aa:09:c2:32:d7:a5:48:5a:f9:12:98:5e:7d:98:
3c:2f:10:28:57:e0:16:10:bb:0c:5b:9b:49:27:f6:
ee:7f:09:1f:f4:e3:32:80:c2:33:80:40:2d:dd:84:
33:d3:c0:b7:fc:1c:bd:51:b1:f4:af:4e:87:94:6a:
09:5b:37:e2:36:16:5f:19:cc:fc:58:42:d1:57:ba:
1e:72:e2:0f:df:de:23:09:b8:17:5f:5c:72:ee:4c:
cc:9c:cb:f2:37:c3:cb:d8:81:ca:96:44:a6:27:d3:
2d:40:78:70:dc:f3:48:8c:d5:0d:5c:22:11:2d:43:
99:ec:d0:df:84:2c:18:36:89:0d:13:1a:9a:67:26:
89:7b:ff:f3:98:89:02:64:cd:cc:00:ae:d5:76:f1:
fb:2d:26:50:10:22:b9:26:15:f4:a1:8f:73:18:24:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:52:E8:FE:E2:E1:0E:BB:18:A7:1B:88:77:52:50:C5:43:E4:CC
X509v3 Authority Key Identifier:
keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1b:3d:7b:96:fa:82:3d:a8:7e:62:cf:cd:bf:7c:4d:6a:13:
a4:7a:9b:d7:c9:91:f4:cd:b7:b3:4b:58:57:9d:6a:0d:38:23:
d6:ef:f1:ec:7e:0c:68:6a:9c:5e:89:f3:7c:73:62:74:f7:83:
80:a4:35:53:5f:1c:76:ed:5a:21:eb:1f:36:1f:0b:73:5e:72:
3b:93:62:aa:a9:8c:c5:d2:12:47:2e:9e:66:5a:37:cc:64:53:
bb:59:d9:0a:69:99:ae:8c:32:c8:2c:24:cf:33:62:f0:b8:46:
0d:65:c8:72:7c:26:5e:82:de:35:47:ff:23:3c:f4:67:e2:2a:
73:e7:a5:dc:89:f4:8c:30:7f:17:ca:16:51:a8:51:57:cd:c6:
d2:9f:d6:65:d3:ac:20:19:53:22:ab:69:b0:12:c5:6a:99:28:
88:b6:69:4e:4f:eb:79:23:79:6f:70:b6:99:f2:0d:2e:1e:69:
6a:6f:a6:d7:c3:50:9c:03:85:0c:93:c2:3e:95:34:c8:7b:1e:
ac:dc:9c:63:26:7e:0d:c3:47:e3:bd:79:1e:e8:2c:c2:a2:c0:
f9:19:3b:0e:33:8e:42:e5:38:c5:b1:be:b6:65:cc:1c:3f:b1:
65:6a:48:78:35:4f:95:67:4b:33:72:b8:55:1e:f1:46:c5:de:
c2:d3:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client