Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: oJaSdXcB8woGz2eT4qiiH4TnR0Pixl9G/hobOnL35u4=
Subject key identifier: 3D:45:C2:CA:3B:BA:CD:E6:7C:EA:5C:7F:E8:D3:C5:48:84:43:0C:7F
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019A4EF549B182BB308FDF0CC8F1B475DA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0B19
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: AGUna9PqsLZkOhN5Ca8nazQKqnYV0kiwLFmrS3OintY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:49:b1:82:bb:30:8f:df:0c:c8:f1:b4:75:da:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=3d45c2ca3bbacde67cea5c7fe8d3c54884430c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:ca:f3:e1:46:5e:a1:6e:0b:8d:66:46:56:
ac:f7:68:ef:a4:84:6b:8c:2c:6d:29:31:a3:0d:bf:
db:4c:d8:8e:92:3a:96:3e:e3:5c:d7:f9:22:a6:25:
7d:d1:4c:3d:05:50:94:a7:1d:fa:6d:c5:b2:b7:1e:
6b:8f:89:20:fe:7c:18:1f:17:76:85:0e:7a:fa:dd:
74:4b:0d:3a:e8:f0:26:a2:c1:f0:76:ef:16:52:fe:
d0:0b:6c:de:20:05:a0:40:73:bd:cf:2c:e8:b9:f1:
b1:2d:db:de:2d:04:1e:f5:2e:2e:74:64:92:ff:8e:
28:cf:56:9f:69:03:df:15:66:1d:9f:93:96:27:33:
cb:d0:54:dc:da:9d:6b:be:eb:0a:fb:8f:03:f7:9d:
73:69:73:1c:da:40:25:cd:81:84:46:d9:07:3b:b1:
7f:14:78:67:2d:5e:74:c2:76:76:b8:57:4a:8f:76:
0b:e5:fd:11:7c:96:71:68:12:f0:8b:a5:6d:c8:dc:
2b:2d:c6:f0:f2:d0:8c:45:2f:7d:37:b0:73:ef:78:
a5:24:42:fe:87:74:3f:3f:c7:d3:8c:72:42:86:ca:
a1:c6:21:58:6b:03:24:cd:dc:9f:e4:31:1a:c9:ca:
ab:a1:70:6b:ba:5c:2d:2d:92:2c:fe:56:01:ef:64:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:45:C2:CA:3B:BA:CD:E6:7C:EA:5C:7F:E8:D3:C5:48:84:43:0C:7F
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:db:1a:cc:4c:f8:87:98:fc:46:99:f5:18:85:f8:6f:6e:
69:51:58:45:2e:bd:a6:4e:9d:f7:ca:d0:dc:1b:0a:09:ca:71:
7d:60:e7:2c:c8:34:c2:12:68:ae:3b:4e:a5:43:e1:91:da:d0:
96:a0:e9:6c:4e:34:5e:51:d8:33:6d:dc:23:e8:54:68:86:7d:
93:7b:f9:b2:63:38:c6:8a:41:62:5e:80:b3:32:52:db:93:cb:
5b:1b:51:2f:23:30:87:93:80:e0:37:25:35:ba:d6:eb:5a:c2:
dd:43:30:aa:44:57:7f:76:18:43:e0:d2:2a:b8:f6:cd:7d:c0:
72:b5:99:54:e9:8f:e4:43:6c:58:ef:e7:e2:95:b8:82:21:99:
da:2c:8c:82:53:5f:ac:3f:e4:65:50:96:1d:4c:b1:93:28:59:
3e:63:cd:51:aa:c2:2d:a3:75:7c:f1:78:83:29:05:00:75:f5:
ce:1d:d3:24:0a:26:b3:33:08:1a:0c:89:ef:d1:e6:77:fd:0a:
30:ea:bb:90:b9:04:24:5b:21:2f:41:36:b2:30:72:4a:90:3a:
be:1b:91:73:94:12:e8:8b:b3:83:cb:38:fe:fa:14:87:7f:13:
f0:94:be:b9:d3:bb:ab:58:88:fa:42:bc:7a:d7:31:c2:df:0d:
02:2e:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:02 2025 by rpki-client