Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: e3ROmW24WMd1EHbalaZXIWCDhctx65Z39wl9z6aOsy4=
Subject key identifier: 7C:D6:FD:81:10:BF:78:1D:29:8B:55:96:33:9A:D6:DA:4B:44:76:B1
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019A71B7C983E7445CF24FDD782B90C44CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: 7orhFj0hBtivIPcof/BxBY3ptrMq44JIJVMJ4Gu8PGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c9:83:e7:44:5c:f2:4f:dd:78:2b:90:c4:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=7cd6fd8110bf781d298b5596339ad6da4b4476b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:2c:41:89:0c:f4:f7:60:89:7e:e4:11:6d:
e3:f1:0a:38:33:45:f4:38:bd:1c:d5:23:67:b8:b8:
99:a7:b4:f4:be:f6:4e:34:8f:ca:55:bb:59:76:16:
fa:80:19:0d:60:47:a1:16:91:53:19:e6:80:d0:35:
35:37:89:2e:24:cb:02:d8:e3:be:bc:5d:89:41:7b:
3a:ad:ca:9d:aa:dc:fb:1a:94:5b:fc:ee:6a:6b:49:
7f:89:ef:79:b7:63:d6:b9:34:8a:0e:bc:01:6b:36:
71:3d:c8:8d:8e:d6:0f:6f:64:56:42:5c:03:20:26:
83:d4:ad:f4:ab:f2:06:92:20:dc:61:3c:24:b0:f7:
f0:21:a1:26:48:ee:79:74:86:52:dc:17:e8:eb:5e:
b3:ca:e7:1a:41:92:24:ff:9f:29:81:e2:6f:8c:2b:
e9:93:9a:7d:f7:1b:8f:59:09:4c:26:64:de:c4:13:
34:d4:fa:27:ab:77:4e:54:f9:ba:8f:02:03:ea:f0:
fc:01:5d:46:37:7c:b8:af:ec:b3:a5:bb:5e:4d:85:
7a:91:c6:e0:7a:53:70:f6:fb:02:5f:61:a2:39:fa:
e9:15:c1:da:5d:d0:4a:0f:5d:d5:3a:89:b0:eb:99:
97:db:1e:36:81:98:e7:ac:ec:b2:8d:01:8e:7f:fd:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:FD:81:10:BF:78:1D:29:8B:55:96:33:9A:D6:DA:4B:44:76:B1
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:4d:81:ac:57:e7:12:01:87:34:8f:2b:65:39:58:f6:58:
5f:e9:8b:05:47:fb:36:10:16:22:5f:3c:d5:5b:84:46:a2:f0:
f7:23:7b:e5:c6:fb:7b:a9:72:5a:b3:fe:8d:c8:fc:9f:52:f9:
48:be:42:f9:5e:32:c9:ed:06:18:ff:7b:a6:da:e9:7a:a5:33:
e8:a2:dd:7a:6d:fb:94:7f:38:50:6f:e2:5c:7e:5e:36:cc:1c:
b3:54:ad:b1:ac:cf:da:aa:13:28:8d:aa:e7:4e:c9:4c:7e:49:
6d:b5:1f:14:db:26:10:7c:87:42:f2:40:9a:03:85:f4:81:c4:
90:44:fc:c3:fc:4e:5f:a8:db:fe:8b:08:46:27:16:0a:6b:c3:
2b:e6:10:bf:dd:23:ef:ef:8e:c1:09:08:32:39:43:5f:dc:f9:
b5:66:f9:4e:94:86:83:6e:f8:e2:4d:be:d6:a8:fc:aa:47:88:
ab:d8:df:69:b2:5b:40:a9:ad:23:58:05:67:be:03:ce:d8:4c:
e2:75:9c:f7:b1:15:d9:af:eb:bc:05:a9:1f:3b:ec:cc:d6:12:
3f:52:51:55:d0:3f:c9:3d:14:bc:64:ee:75:0b:2a:7f:de:ce:
70:33:a9:97:a3:6f:9f:a2:58:b1:3c:7c:3e:3e:9b:0e:88:4a:
0a:d4:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:40 2025 by rpki-client