Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: ayuU4kUgUPvQn28LohmXbZJZeXHnCcx5u1X/ny3ctfo=
Subject key identifier: BA:42:1A:83:C5:C1:48:9B:7D:B9:62:D0:C8:CB:8D:D4:73:C7:27:23
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019A71B88C0BC4E7B6C888F78DCFC0F9A3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0AA3
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: ANz5+blCRTk07KcG1AYEhohz/1b9FhbICiW2Xu2esHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8c:0b:c4:e7:b6:c8:88:f7:8d:cf:c0:f9:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=ba421a83c5c1489b7db962d0c8cb8dd473c72723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:e2:3c:79:7f:ff:cf:97:9b:8e:34:ed:a0:
5e:0a:8d:17:f9:5c:fc:31:1d:d7:af:65:c6:a1:61:
50:b6:b2:3f:88:ea:b8:90:78:01:d9:1c:f8:6d:1a:
7f:70:68:10:4b:96:03:20:03:70:e3:52:83:cc:32:
1e:b8:c1:b8:c3:e4:f2:68:21:1c:e2:39:2e:23:9d:
4d:4b:49:c3:89:6f:39:09:bb:8a:42:39:2b:45:c3:
0d:f3:6d:73:86:73:33:0e:70:eb:82:78:04:b0:a2:
94:be:42:d7:52:ac:e8:8a:0f:0d:46:89:d7:c1:96:
72:56:89:9f:ba:24:00:13:a6:68:19:61:69:51:12:
2e:39:f9:1d:7b:31:3d:a1:1e:10:b1:9d:d4:c0:5f:
50:3c:5a:63:56:ea:6a:53:5c:91:d2:ce:f2:d2:08:
8c:d1:79:17:f0:68:ca:d1:a9:6a:ca:fe:bc:ca:d8:
7d:69:ef:af:c2:28:f2:a6:92:30:21:b6:4e:e6:00:
06:6e:f0:fb:73:3e:62:ea:0e:2a:4c:3b:85:d9:f4:
ec:53:e2:89:bb:f7:10:ec:1e:00:5c:c2:b8:7c:99:
5b:00:72:96:17:c8:b9:1d:80:b5:0c:81:1a:6f:66:
75:ce:3b:62:c2:68:8b:cf:f1:97:18:9a:f1:10:eb:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:1A:83:C5:C1:48:9B:7D:B9:62:D0:C8:CB:8D:D4:73:C7:27:23
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b3:3e:0e:03:b1:f3:82:93:9f:03:25:f5:35:74:99:1d:cb:
c0:54:12:2f:96:b4:3a:42:7b:94:5c:54:07:24:8f:d8:22:1f:
44:a5:49:64:2c:80:22:5d:c7:22:f5:33:13:e0:a4:3c:ec:b2:
0a:7a:2b:62:bc:2f:62:d9:53:6f:1f:db:f5:cf:d5:67:04:b1:
48:45:b8:ce:d7:3a:6a:ab:1b:b3:e9:ce:8b:ef:95:27:e7:92:
52:d9:33:3b:aa:db:28:ef:be:3a:58:4f:69:ca:64:86:d3:98:
23:44:2e:20:40:4f:80:49:0a:39:fd:a0:30:02:fa:0d:d0:10:
16:80:08:b6:41:8f:dc:92:9e:b7:40:19:7d:7b:94:f0:17:4f:
a9:e1:34:0a:c7:7a:8c:91:2d:4b:48:07:9a:fb:6c:f8:6f:8b:
5f:72:df:89:6a:7d:d8:a9:ae:bd:1e:ab:8e:1a:50:a2:17:67:
e7:4d:7b:7b:71:44:ee:72:fc:ee:22:6d:4c:0f:a5:b6:51:ce:
5f:67:a4:20:a0:3a:25:90:18:90:d2:d1:93:21:8b:0d:17:31:
c7:90:2f:dd:5d:69:7a:fe:96:46:04:c8:d7:aa:b6:ad:47:88:
a1:0e:b6:3a:49:d2:69:c1:45:29:c8:2f:bf:6c:20:52:bb:77:
83:84:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:39 2025 by rpki-client