Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: eDSnM3PdEVaWVYAmbOJhA9ZDObUNR0b1uWCKb5ULZDA=
Subject key identifier: A3:04:E1:AA:A2:8B:3E:1F:A9:4A:27:2F:7D:57:F2:91:FB:0B:70:E1
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 019A71B84E4FFE019A695AB2738D9E390D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 10E7
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: Z5mtLsAfOGaKEQDQmNkDVLo2bS97oHsczHDYZitD8nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4e:4f:fe:01:9a:69:5a:b2:73:8d:9e:39:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=a304e1aaa28b3e1fa94a272f7d57f291fb0b70e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:4b:48:3f:2a:ab:f5:03:92:30:d6:22:ce:
cf:ef:37:64:78:53:a8:ef:27:1a:19:91:5f:01:c0:
61:67:53:31:8a:f2:e2:37:b8:cb:00:0d:c4:32:ce:
d4:29:b2:db:20:d6:1d:bf:c3:01:a6:91:a1:07:90:
57:b6:fd:0e:04:b7:54:35:cf:b9:e7:9f:fa:c8:fe:
3f:ab:c5:7e:d8:da:5c:80:bb:3b:6a:dc:d6:a0:b8:
95:fe:2e:72:e3:2d:9d:c5:a5:80:c3:80:c8:0b:81:
2c:71:e2:d7:c3:61:6c:f4:63:79:2f:d8:bc:e8:cc:
c2:92:3e:3b:83:c5:c2:12:3c:fd:05:d4:a8:47:9c:
35:31:43:c9:f6:23:53:1b:29:9d:ce:e2:9d:28:87:
82:d8:f1:1b:c5:84:b0:cf:16:94:78:99:7f:f3:e1:
ed:20:2d:53:07:ad:e4:dc:b2:e6:63:67:d4:63:b4:
40:06:e7:a3:cd:76:20:1f:0c:0e:98:ea:10:a5:ec:
9a:e5:cc:21:a2:5a:09:12:77:37:cf:ee:47:18:53:
d1:9f:8a:87:eb:58:e4:9a:76:38:66:5a:ef:66:de:
aa:fa:cf:c0:79:2f:45:70:ba:7f:87:5d:ce:95:3f:
d2:15:0d:92:9f:30:94:30:94:3c:2f:e1:dd:2a:ad:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:E1:AA:A2:8B:3E:1F:A9:4A:27:2F:7D:57:F2:91:FB:0B:70:E1
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:22:e5:64:d4:df:8a:3e:59:30:11:4b:45:80:82:ef:b7:a7:
b3:a5:ce:27:bd:22:3c:48:b3:3c:b6:ad:cd:98:b8:c9:ca:30:
57:eb:d6:54:e1:0a:b8:6f:3e:75:8f:22:dc:00:b7:e4:2b:10:
dc:bc:56:ac:a4:08:77:c8:dd:d8:1c:7d:a6:82:b9:e9:7c:7d:
a2:8f:5b:36:01:dc:b9:50:56:83:8b:db:a8:d7:74:41:bd:9d:
8c:67:32:f7:c2:e7:37:f1:bd:c1:bf:b8:11:37:79:4a:73:5c:
d5:9a:89:35:dc:48:81:a4:92:05:92:61:bf:cf:68:91:ac:a7:
2c:2e:5c:91:44:74:30:9c:a7:4e:a5:22:5f:3a:0a:06:d2:56:
c0:c7:86:41:14:05:b1:b8:51:dd:83:84:17:0a:e7:10:95:1d:
40:a9:9a:bf:e9:0e:88:23:e6:fc:67:25:85:12:a6:94:0d:1c:
6e:f0:28:70:c3:96:df:66:e3:93:05:b7:81:ab:ea:bb:cc:1f:
78:b2:0c:ad:4a:56:8d:77:50:63:b6:b8:93:f6:e9:c9:ba:f0:
73:32:af:66:85:64:82:bb:87:f5:f0:6c:1d:c4:50:97:c1:66:
6f:e2:be:38:08:6b:06:10:ee:46:2b:be:4c:5d:60:bc:e8:88:
06:e2:12:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuE5P/gGaaVqyc42eOQ0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm
NzE1OWIwHhcNMjUxMTExMDcwMTM1WhcNMjUxMTEyMDcwMTM1WjAzMTEwLwYDVQQD
EyhhMzA0ZTFhYWEyOGIzZTFmYTk0YTI3MmY3ZDU3ZjI5MWZiMGI3MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ItLSD8qq/UDkjDWIs7P7zdkeFOo
7ycaGZFfAcBhZ1MxivLiN7jLAA3EMs7UKbLbINYdv8MBppGhB5BXtv0OBLdUNc+5
55/6yP4/q8V+2NpcgLs7atzWoLiV/i5y4y2dxaWAw4DIC4EsceLXw2Fs9GN5L9i8
6MzCkj47g8XCEjz9BdSoR5w1MUPJ9iNTGymdzuKdKIeC2PEbxYSwzxaUeJl/8+Ht
IC1TB63k3LLmY2fUY7RABuejzXYgHwwOmOoQpeya5cwholoJEnc3z+5HGFPRn4qH
61jkmnY4ZlrvZt6q+s/AeS9FcLp/h13OlT/SFQ2SnzCUMJQ8L+HdKq2/xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKME4aqiiz4fqUonL31X8pH7C3DhMB8GA1UdIwQY
MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt
ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj
LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCLlZNTf
ij5ZMBFLRYCC77ens6XOJ70iPEizPLatzZi4ycowV+vWVOEKuG8+dY8i3AC35CsQ
3LxWrKQId8jd2Bx9poK56Xx9oo9bNgHcuVBWg4vbqNd0Qb2djGcy98LnN/G9wb+4
ETd5SnNc1ZqJNdxIgaSSBZJhv89okaynLC5ckUR0MJynTqUiXzoKBtJWwMeGQRQF
sbhR3YOEFwrnEJUdQKmav+kOiCPm/GclhRKmlA0cbvAocMOW32bjkwW3gavqu8wf
eLIMrUpWjXdQY7a4k/bpybrwczKvZoVkgruH9fBsHcRQl8Fmb+K+OAhrBhDuRiu+
TF1gvOiIBuIS0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:05 2025 by rpki-client