Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier: Y9qMrcFDdqiw4KD7olDQJnezyJQ3MusByBh26vo/ZNA=
Subject key identifier: E3:67:B4:EC:44:1F:EB:94:5E:A9:CD:22:62:AB:73:9E:57:D8:40:EF
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial: 019A72265D03B12BDDDBA4C5E428593D4E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number: 09ED
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: LTN6IipyGVVenq2usBi7zE8WETEh048DBdtm55CUzVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5d:03:b1:2b:dd:db:a4:c5:e4:28:59:3d:4e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=e367b4ec441feb945ea9cd2262ab739e57d840ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:0b:4f:ba:3e:28:01:a4:c1:e0:2e:bf:8e:
15:be:37:f1:22:cd:29:38:01:28:62:e1:be:c6:55:
de:32:22:46:36:de:ee:4b:cc:69:84:e2:fc:d9:8a:
3a:5d:16:3b:91:d2:ad:a0:82:47:9f:b7:f4:a3:fd:
8d:25:6d:fb:94:41:d7:70:9a:44:3a:0d:98:c8:ae:
9a:1f:2e:ac:c2:29:4f:1b:f5:be:8b:c4:4e:70:dc:
09:b5:5a:5c:63:7b:aa:41:ee:0a:f4:f5:6c:e8:7c:
80:15:0d:85:2e:90:9e:a8:93:cb:4e:e6:cf:98:a5:
16:fb:cb:25:c5:a8:65:2f:61:46:be:ab:e1:35:60:
d8:7b:ad:34:2e:b3:5b:ec:a8:4a:c6:51:e5:bf:c7:
a2:7e:38:31:83:68:8f:71:f9:f6:8e:ce:e9:ff:e6:
ee:ec:5a:42:53:b4:0d:96:38:6c:4d:93:c1:f4:0a:
5f:a2:c0:74:6f:7c:99:95:ec:93:bb:33:47:a2:98:
50:a6:fa:6f:78:36:2b:d0:ee:97:57:dc:b7:26:29:
a4:ff:bc:b6:0a:fb:c0:7b:ec:dd:16:df:0d:f2:48:
56:b7:04:52:36:ed:e3:ab:db:16:bb:18:52:d6:0f:
d6:ad:07:c8:89:20:00:bb:f5:8d:94:04:36:a1:57:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:B4:EC:44:1F:EB:94:5E:A9:CD:22:62:AB:73:9E:57:D8:40:EF
X509v3 Authority Key Identifier:
keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:92:c8:69:04:66:7d:07:1c:77:c1:72:b4:21:e2:e3:86:cb:
eb:11:ce:ea:71:83:78:e2:a2:a6:03:01:04:0b:a2:65:83:53:
2e:45:9f:fd:6e:57:24:88:b5:04:8b:f9:f2:de:ce:13:87:e5:
3b:54:6c:11:9d:7b:f7:f8:1c:ee:cd:2b:14:fc:41:ab:9e:c7:
e0:0c:6f:f5:02:ac:df:c5:41:21:c3:6d:75:ec:16:62:39:6b:
94:4f:1f:17:a1:5f:60:89:fa:ae:f2:99:8a:12:c8:36:29:78:
bb:e5:b6:b4:cc:25:03:2b:03:28:1d:c4:7e:f9:64:d7:ff:6d:
0f:d8:58:d2:13:39:28:af:9a:f6:01:10:c1:a1:8d:66:b0:c2:
b1:72:5a:28:ef:f6:d8:c3:41:b7:42:02:77:51:25:a0:db:62:
b6:37:12:06:f5:49:6d:be:92:7a:0e:92:16:91:6a:2f:36:f8:
b6:ba:a5:41:11:de:3c:47:46:a3:84:d9:74:8e:bd:9c:cf:c1:
73:ae:8e:81:ec:a3:5e:16:a0:d5:64:8e:69:e0:f6:90:e3:c0:
83:d0:e7:01:50:dd:a9:43:09:98:47:6e:46:f7:80:fe:d6:a4:
fc:e0:63:ce:95:be:c3:67:2d:c4:fd:6e:b7:98:86:fb:bc:99:
3e:d7:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:06 2025 by rpki-client