Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: GNBPpk+ftXxiAjM1haq6xXok10DFry0ihMY8wfQ3qto=
Subject key identifier: 8D:AF:4F:4D:00:58:27:1B:CB:33:76:89:36:D5:9A:1F:DA:50:2F:1F
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 019A4EF44E586486B1FFE9C1946856B93F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: gPr3JBLC6iGDQ0UMzU7iLIt221MNNJKOJp2OfpI4AsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4e:58:64:86:b1:ff:e9:c1:94:68:56:b9:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=8daf4f4d0058271bcb33768936d59a1fda502f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:d8:cd:b1:ed:30:9d:2f:cb:1a:ce:50:e7:
bc:98:d1:ec:63:6a:59:8c:f4:c7:48:af:73:28:81:
f4:1a:d9:84:e0:e1:a3:4f:40:23:23:da:1e:06:f3:
73:5b:f6:8d:d6:f6:ea:a2:65:da:97:41:da:3d:26:
be:fd:40:6d:86:fb:20:e6:8e:94:e1:5f:56:b6:d4:
20:0e:0a:d2:6d:35:8b:61:be:09:13:5c:5b:a7:52:
72:b1:78:b3:4f:3a:e9:ab:41:c0:8d:57:99:a7:75:
59:b2:b4:28:c3:e3:1e:4e:2a:67:65:8d:15:f6:5f:
56:95:c3:1b:61:a8:38:54:96:68:74:e5:8b:39:83:
7b:9e:60:92:4a:f6:56:2f:9c:5e:bf:4f:e2:ae:9a:
0f:1e:2e:e9:8d:25:50:09:94:72:7b:96:05:1b:5c:
8a:2a:61:60:ce:c7:f1:ff:e9:49:92:ce:9b:4f:06:
e7:e6:91:bc:78:8a:6d:38:11:5a:2c:a0:65:07:7e:
88:79:57:db:19:f6:8d:b4:c8:c9:85:fd:da:83:32:
12:90:14:0a:29:00:bc:22:49:3d:4d:4f:a6:50:ec:
3f:9f:36:89:2c:a2:35:68:43:fc:9c:fa:30:af:7e:
2a:97:31:9d:09:f3:70:22:6b:fb:3a:19:34:b5:bd:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:4F:4D:00:58:27:1B:CB:33:76:89:36:D5:9A:1F:DA:50:2F:1F
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:04:53:14:54:d6:ad:29:46:62:8e:7c:13:a2:cf:ba:43:23:
ef:0f:dc:86:3a:e4:8b:65:63:73:fb:fa:72:9b:23:1b:99:f4:
78:44:04:60:ed:fe:c6:51:d7:1a:0d:9b:8c:54:dc:5d:5f:a4:
c1:35:77:0c:3e:87:a7:e6:8b:5b:08:18:36:41:1c:5e:b7:c4:
49:d7:21:18:3c:c8:1f:21:cc:14:9f:b9:13:61:14:66:34:30:
40:ac:ba:82:7d:f2:2c:16:10:ad:4e:8a:f0:ff:a4:21:7f:59:
b8:23:b8:6c:3e:52:12:32:d9:26:82:d5:d6:8c:81:ac:70:8c:
ec:92:b7:49:8a:91:dc:4b:24:a4:34:ad:48:a0:56:70:a5:62:
a3:29:f7:78:45:94:c5:83:cb:54:1e:c5:b9:3f:96:56:07:87:
fb:1d:e9:2e:c5:18:50:74:b5:76:9e:bf:4b:b9:3c:95:6b:b5:
34:f9:b7:3d:34:86:da:8f:9f:f0:27:78:22:26:c0:32:f9:b2:
fe:88:57:28:37:93:59:ae:58:e2:29:94:0e:fd:51:88:fa:4d:
6b:a8:fb:56:b5:c0:46:bf:8f:ab:3b:0a:2c:b6:86:a6:4e:ac:
95:2a:27:b5:dd:60:bd:18:21:3b:13:27:4b:4a:65:04:31:6d:
98:37:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:59 2025 by rpki-client