Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: KliV+nKb0EO5aiWIMbiF62PfymkDjRQuCR5n7XEj6Vw=
Subject key identifier: DB:8E:49:FA:A6:DA:89:6E:77:E9:17:53:9E:09:8A:D8:59:75:49:6D
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 019A7301554FF3148A0F943647482729EF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 061A
Signing time: Tue 11 Nov 2025 13:00:58 +0000
Manifest this update: Tue 11 Nov 2025 13:00:58 +0000
Manifest next update: Wed 12 Nov 2025 13:00:58 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: m49CEv3C/FaXubnZL5pNKUeFi851XJYbWawWctB/zhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:55:4f:f3:14:8a:0f:94:36:47:48:27:29:ef:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: Nov 11 13:00:58 2025 GMT
Not After : Nov 12 13:00:58 2025 GMT
Subject: CN=db8e49faa6da896e77e917539e098ad85975496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5f:20:b5:6f:90:5f:dc:9c:ab:96:da:09:95:
00:71:20:aa:2a:3e:e0:8d:85:81:b3:78:b3:95:48:
ba:01:54:bb:69:50:5a:55:7f:9e:97:a4:30:8a:83:
b7:09:0e:25:a8:c9:2f:cd:f8:55:49:40:cc:ce:a8:
d2:e8:5c:0f:8e:fd:2d:90:e9:01:30:90:b9:22:16:
7e:fa:1f:2d:f9:d9:d4:3f:f5:83:3c:e3:0a:b5:6a:
68:54:ca:f2:7d:07:83:1b:b1:a1:a8:f7:e8:4f:f3:
94:38:4c:b7:18:38:c0:92:ee:e8:b6:79:4f:b7:38:
22:ca:87:f1:e1:fb:8e:39:f0:19:08:a6:e4:4b:3b:
17:cd:7f:2e:cf:ae:04:e3:a8:12:d4:b0:ea:01:33:
58:39:ed:2f:3a:a4:22:83:de:66:ec:a3:2d:2a:05:
80:0d:d1:c5:7d:ac:b4:4f:bf:66:97:f1:4a:5f:26:
1d:51:8a:b8:be:80:a8:81:70:83:fe:60:61:e0:c4:
43:31:f9:89:2c:b2:68:e8:17:67:8a:3c:d9:ed:57:
23:21:68:83:0a:58:e5:b0:ef:97:cf:ea:86:2c:b5:
e8:8c:5e:b1:76:c2:9a:63:bd:e4:b5:23:39:c8:ca:
db:d5:33:b1:c5:0d:0d:db:46:b3:d8:87:ae:bc:21:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:49:FA:A6:DA:89:6E:77:E9:17:53:9E:09:8A:D8:59:75:49:6D
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:61:34:7a:36:3d:79:6f:91:c6:3f:4f:3d:01:a2:bf:c6:72:
5d:29:01:b6:8c:33:49:67:e5:db:ed:55:72:83:f9:6a:c9:7c:
d3:26:f6:95:b3:c1:61:28:ab:ff:cd:46:14:4b:af:31:45:c9:
41:9a:8e:f7:c7:c0:5a:3c:5b:be:2c:12:f1:c7:4f:80:6d:94:
f2:f5:fc:a3:fb:11:84:fe:62:05:f6:2d:f2:c0:4d:67:e1:f2:
08:59:82:48:be:b0:28:69:35:3a:3d:cc:5d:51:98:13:8c:4f:
9d:23:0a:ea:52:0b:19:c6:9b:c6:9f:18:e9:40:4f:b1:b7:04:
15:5d:8b:db:46:94:0f:cb:38:b0:e6:9d:fc:90:b1:ee:50:dd:
5f:f5:b3:71:ba:7a:98:e1:d9:c1:52:68:ae:57:5d:84:c1:22:
0a:aa:c2:f4:21:cd:24:6a:f3:f1:a8:d6:9d:77:c2:89:30:d4:
aa:3c:5a:97:5a:39:04:b3:bf:ba:d6:1f:2b:c7:9c:a3:c4:33:
1d:39:a6:dc:50:ef:61:8d:f8:df:9e:a9:68:33:5b:5b:9a:d2:
4d:28:85:b0:a1:3a:3e:1a:12:9f:0a:d1:15:a7:49:2f:da:23:
78:cb:2f:e0:50:06:5e:30:6d:c4:30:cb:e9:f1:be:fa:fc:6b:
2d:fe:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:43 2025 by rpki-client