Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier: TFTEPWvM4ndqu3M62mJUSJ/tvyCJWPkFWjFVpg8XxEQ=
Subject key identifier: 4F:94:4E:8C:48:F8:36:B6:FC:DE:81:F6:CD:26:8B:E0:5A:BC:F8:93
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer: /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial: 019A71B9424E27EF50CE6AE7861D427D9C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number: A5
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: HbhzSF9i0INxeRc0I/t6jCMajOF8BNA53c0cCIwWTws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:42:4e:27:ef:50:ce:6a:e7:86:1d:42:7d:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda8529160585381f07801656ffc4c551298449f
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=4f944e8c48f836b6fcde81f6cd268be05abcf893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:77:bc:a7:39:17:81:c0:91:02:cd:20:5b:
f1:c5:f7:ac:7c:03:68:0e:4d:34:36:55:ba:e0:08:
9f:04:b3:ec:fc:5c:85:a8:79:c6:f8:f0:d6:9e:a9:
98:53:4d:9f:e4:83:af:7e:42:c2:29:65:09:7e:a6:
cc:cf:5b:f8:01:82:78:10:69:c8:86:4c:e1:be:b4:
1f:08:0b:eb:dd:fc:94:12:ea:81:b8:66:59:bc:04:
7e:ff:88:9a:da:ad:fe:67:f6:02:b1:cb:35:cf:5e:
b5:42:bf:11:a6:f1:90:e7:62:fa:55:9b:44:bd:65:
e2:30:3d:74:6d:3f:9e:cc:c9:01:35:af:9b:95:a2:
b9:ce:b2:13:28:ce:e7:73:4d:e5:95:d3:87:0e:bd:
7a:3e:98:b0:88:bb:3d:b8:b1:6f:8a:aa:1c:6d:aa:
43:e0:56:69:25:fb:20:d1:d7:23:59:bb:82:dd:d2:
01:47:3e:5d:67:da:03:6e:57:8b:e4:9a:ad:32:02:
46:18:de:51:80:2d:4e:16:a7:b5:3a:d0:7b:cf:01:
77:c7:3e:60:83:da:c6:8c:bf:e8:19:0c:b8:f1:59:
d1:7d:87:a5:11:91:2f:8d:2e:94:f8:4d:60:3e:76:
8b:f4:07:00:df:70:19:02:24:e4:fb:bb:66:47:40:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:4E:8C:48:F8:36:B6:FC:DE:81:F6:CD:26:8B:E0:5A:BC:F8:93
X509v3 Authority Key Identifier:
keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:26:78:7f:c2:86:36:01:f2:d8:41:24:58:03:6c:83:37:
62:2c:bf:22:97:bb:2a:1f:0a:98:86:d1:50:ef:13:28:c2:35:
ac:09:70:77:c0:e4:2c:41:1b:f9:41:ff:6e:b0:63:bf:b7:3a:
d0:02:1f:65:7f:ab:c8:19:17:2d:02:6d:70:e1:d6:cf:30:08:
80:0d:07:98:ef:ee:93:80:47:b2:fa:b9:e0:81:b3:24:86:1b:
27:ab:0d:62:c4:95:ae:ae:62:4e:24:74:74:ea:42:46:60:83:
e5:e6:ce:ab:d9:0a:f6:ed:5b:89:6b:97:1e:cf:15:ab:07:2e:
3b:ee:8d:9a:d8:76:fd:9e:79:4f:26:1b:26:1e:aa:de:df:46:
86:39:32:c1:37:f9:92:06:d0:ac:15:48:f3:7f:76:b4:c6:42:
f0:d1:6c:d7:1d:e2:22:9d:64:8e:0c:14:67:de:34:2f:74:c9:
fc:d0:3d:60:e7:2d:c4:09:93:51:9e:7d:ec:3c:6e:d2:65:03:
a4:10:05:8f:9e:84:d2:ea:30:98:6d:a0:0a:76:b3:72:31:5d:
54:56:7c:dc:6f:48:cc:22:7b:ba:b9:33:0b:ab:6a:a5:75:5b:
7c:fd:02:1d:86:2a:49:f4:52:7e:14:1d:f7:27:bf:47:1f:67:
14:91:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client