Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: zwsIetO5Eigq/TejUCeCWBGlQck/eoHmdjQvWDxynlU=
Subject key identifier: 8D:4C:4E:31:22:D9:11:CA:31:9D:82:1C:36:AE:D6:1F:72:11:4E:7D
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 5B7493C9D44A9B6AFD6BAF0C68F3E5ED632039CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 09:13:18 +0000
Manifest this update: Tue 11 Nov 2025 09:08:18 +0000
Manifest next update: Wed 12 Nov 2025 11:53:18 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: INpj8cJcwrsxp1fzQkAa9FnkEVAWJOkDjgiGIflVxyI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:74:93:c9:d4:4a:9b:6a:fd:6b:af:0c:68:f3:e5:ed:63:20:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Nov 11 09:08:18 2025 GMT
Not After : Nov 12 11:53:18 2025 GMT
Subject: CN=8D4C4E3122D911CA319D821C36AED61F72114E7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:85:a1:20:99:7a:d7:df:06:7c:eb:fa:26:
65:cc:a5:44:77:0c:07:83:42:83:b3:ad:1d:92:54:
6a:44:d9:88:9b:79:0e:0c:a8:78:c3:a5:9d:f8:4a:
45:5a:aa:cb:5a:26:96:d1:30:60:72:89:c1:73:81:
59:ed:2b:b1:9a:0f:d5:fa:bf:1c:e9:e5:e3:b3:cd:
fb:d2:61:0a:23:78:ca:b3:3f:57:74:0e:50:71:3f:
df:a9:c0:88:42:55:95:36:32:d5:0c:23:7a:43:15:
cf:a0:05:f7:6a:0e:56:95:a7:e7:5e:36:ff:7c:94:
74:b5:84:30:dd:a9:cc:3e:f8:de:84:d4:5f:75:d4:
34:d7:77:8f:ff:39:17:8c:73:de:d0:36:6e:c0:35:
a1:36:d0:b9:b2:84:91:c7:8f:a2:b2:a3:c3:81:4d:
a3:62:1e:a5:03:4f:b9:3a:4b:35:41:93:58:00:c1:
e8:b9:b8:26:64:21:ed:01:fa:f2:eb:de:20:f3:0c:
d8:b7:8e:4f:46:4d:44:80:3f:9e:d7:e1:2f:99:a4:
15:ad:0d:a0:6b:f1:97:25:95:2e:2b:b4:ea:80:8b:
67:6e:e3:2b:5b:6d:3c:27:24:8f:8c:38:ff:0b:99:
db:e8:44:a8:e5:f3:70:57:4e:c5:b7:50:3b:94:d5:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:4E:31:22:D9:11:CA:31:9D:82:1C:36:AE:D6:1F:72:11:4E:7D
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:75:17:c8:53:40:f8:56:69:a0:f5:f0:ef:f6:77:a9:26:e4:
dc:a2:9b:4e:7c:7d:79:a9:f7:f2:d0:f2:12:4b:33:4d:61:9b:
d0:23:d2:12:1a:37:ca:c7:1c:fc:f3:b8:31:bf:71:94:b5:3a:
c1:54:9b:7d:e3:44:96:c5:6a:63:47:d5:e0:7e:f7:8d:94:7c:
32:8e:22:28:af:d8:90:2f:d2:6a:9f:76:23:c1:73:3f:9b:44:
f5:ba:a3:02:20:0d:f2:cc:f7:c1:42:d3:54:d5:9a:89:78:55:
c0:e0:30:4f:cf:b6:44:9c:76:a9:d7:38:82:21:14:01:45:2b:
a9:0e:14:62:c3:3a:fc:92:eb:d2:c9:a4:31:2f:98:5c:72:05:
2b:95:9a:eb:e2:68:f3:3b:71:64:91:c8:40:e7:34:ab:8a:3c:
d4:7e:48:98:ac:a1:eb:65:cd:01:dd:1a:0e:09:fe:47:74:5b:
11:ab:51:1b:57:99:8d:fb:36:b3:cd:b3:6d:98:37:a8:35:d7:
7f:c7:88:6c:f4:55:b7:06:2d:4d:42:78:28:a1:40:52:3e:b8:
6c:4c:f1:f1:f5:86:5d:ab:3b:76:ab:3e:b0:77:fc:74:93:37:
c6:e0:ac:01:49:26:77:2c:5e:19:16:2b:d1:69:e5:27:38:e3:
c4:3a:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client