Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: V6EJBvhOjFTQqZfXqBVMvibi1gMQu4J3QcEpgreKkEg=
Subject key identifier: 0C:9B:8E:72:CB:91:80:05:61:ED:1B:43:C1:D8:15:4C:4D:04:7B:FC
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019A4E86A0E8DA2822DE60840CB9E57162E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 05A0
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 3Pb7mmQybqD+/Vo2EoJRY2cCpGfZyqVYX6JqgvUX3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a0:e8:da:28:22:de:60:84:0c:b9:e5:71:62:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=0c9b8e72cb91800561ed1b43c1d8154c4d047bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:57:37:ce:ae:b2:05:f2:1b:38:bc:59:e3:
12:31:a6:33:64:27:8e:6a:29:24:eb:84:e6:ab:c4:
2a:cc:a5:cc:fc:65:32:82:36:12:e6:2f:ad:cc:d6:
e6:9f:4c:61:f5:19:da:79:e0:be:09:10:0b:72:1f:
8c:1d:4d:62:e1:cb:3a:44:ed:c7:28:a9:cb:5d:d4:
6f:e1:88:5b:95:d5:e0:26:42:15:48:9f:b0:8d:fb:
46:c4:00:3e:86:e1:c5:e3:24:43:3b:48:f1:10:e5:
63:1a:0b:fe:ed:48:23:6e:0a:5d:26:63:fc:5c:60:
a1:7b:7b:87:c1:79:cb:a0:e2:5d:2c:98:2f:00:49:
f8:14:0b:b3:b2:02:4d:fb:fa:30:a0:9d:fd:a4:3a:
55:a4:6c:89:17:3e:63:78:32:d8:27:5c:64:4b:f8:
96:4b:ee:04:e9:2a:1e:3b:bf:ce:af:9d:dd:c0:df:
83:17:a7:e8:67:ab:9d:c9:97:9a:21:37:e2:5c:5f:
b8:83:67:93:0d:f8:ae:17:5a:90:a6:93:f4:9d:96:
b6:4e:f1:5a:d2:0f:a1:df:ca:3d:85:a6:1c:cb:14:
e0:2b:d0:80:90:7b:13:b3:18:a3:eb:30:07:91:58:
c8:57:69:c6:a1:45:d7:43:48:bc:41:13:d6:b1:6b:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9B:8E:72:CB:91:80:05:61:ED:1B:43:C1:D8:15:4C:4D:04:7B:FC
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f2:6d:c3:a3:9e:52:5e:7e:c7:84:fc:d2:6a:74:96:3c:41:
2b:f9:32:d8:7d:2d:6b:57:96:95:fc:00:94:17:f1:4d:70:1d:
b8:5e:d9:fb:75:52:bb:4b:ca:05:d5:bc:09:8a:a0:bf:15:08:
38:d8:75:b7:71:fb:70:da:a6:76:43:04:c5:36:0b:11:8c:a0:
da:8c:59:1b:cf:41:0e:ef:93:01:32:2f:03:03:88:cc:20:b3:
d4:a5:ed:2b:ca:0b:55:f6:4f:05:49:67:79:f9:3b:fd:e7:53:
87:6f:e3:31:c1:1d:ce:18:38:c7:64:de:70:f7:b0:eb:94:08:
84:28:e5:3b:c6:7e:fc:ab:0d:c1:27:2c:26:1e:62:e5:2b:ac:
42:8d:20:07:5f:42:f8:c7:1d:99:6c:32:77:06:85:30:0e:0f:
55:38:db:96:59:87:d5:a3:d2:61:90:62:a9:9e:77:c9:c8:5e:
1b:8c:f2:e8:37:21:f8:00:2c:7a:52:be:76:c8:b0:b2:79:11:
33:bb:0a:7f:57:c7:9f:0c:53:42:62:58:ca:b0:ac:09:f9:73:
92:df:75:a9:65:8b:96:a5:d4:f6:0c:6d:e1:de:88:a7:b5:19:
df:e7:3d:d7:12:38:31:a3:3a:d8:5f:f0:01:78:cf:a8:6b:48:
24:41:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:51 2025 by rpki-client