Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
File: 7xU1l4vmsK16nLcOsFIvjJUJgqk.mft (raw, json)
Hash identifier: FyvBGFlo7xKiOSbNdqBr/ffqgDOk4088xkL9xiT91hQ=
Subject key identifier: 45:DB:AB:EE:A8:9B:C4:E3:87:3B:65:7C:D7:83:11:19:C4:C5:AF:5F
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial: 019A541AA089C4364D391304FE33FC4662ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
Manifest number: 18
Signing time: Wed 05 Nov 2025 13:00:22 +0000
Manifest this update: Wed 05 Nov 2025 13:00:22 +0000
Manifest next update: Thu 06 Nov 2025 13:00:22 +0000
Files and hashes: 1: 7xU1l4vmsK16nLcOsFIvjJUJgqk.crl (hash: xxHcLQ3bF4EFnYw61mu1WEKSN07t/NprmI76CI0xjTk=)
2: YIGtHD7S0_N18DJSeC_E0_Jn3sk.roa (hash: AalmOgrQxfmPJAes8mWDMEejVYtQtR0Ex3TWn3wOs5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:a0:89:c4:36:4d:39:13:04:fe:33:fc:46:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Validity
Not Before: Nov 5 13:00:22 2025 GMT
Not After : Nov 6 13:00:22 2025 GMT
Subject: CN=45dbabeea89bc4e3873b657cd7831119c4c5af5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:ad:ed:e4:0e:e0:57:ad:10:a4:3f:b3:0b:
a0:6b:18:29:a0:a8:22:f4:df:24:df:f3:72:6e:1b:
6e:bf:4e:dd:37:49:0d:c9:40:57:17:e6:ba:0c:a3:
1c:9f:72:84:72:11:e2:ac:df:e9:b5:78:4f:fa:6e:
8c:10:f0:60:8f:80:9f:cc:b2:ed:d3:4f:fe:92:5a:
6d:d1:a1:d4:0d:f8:40:b9:48:22:7b:03:78:47:50:
b9:f3:53:3e:6c:0c:d6:40:3d:02:02:5a:88:21:33:
b3:ea:9a:3e:18:21:ac:b8:49:83:83:66:03:52:aa:
1f:bf:84:63:51:ce:11:44:16:27:78:c1:eb:e0:8f:
2c:85:49:10:e1:92:37:62:ed:15:b4:2f:f4:47:62:
65:63:ee:9c:a5:0e:91:8d:a4:77:84:4b:f9:6c:9b:
eb:d9:cf:25:ba:10:21:57:a9:da:d2:37:22:ee:b9:
4a:11:60:61:0f:1f:0a:b2:88:e2:5e:1a:f9:36:87:
71:6a:4c:25:48:c2:51:b8:f0:65:de:de:4e:bf:d6:
45:d2:fb:47:3f:bd:cc:1b:2c:47:db:db:49:f6:06:
f9:e7:06:5b:53:63:0f:60:8f:4b:02:7e:46:1e:0f:
e9:1e:25:76:03:f3:25:01:f5:fb:cc:b8:05:17:c3:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:AB:EE:A8:9B:C4:E3:87:3B:65:7C:D7:83:11:19:C4:C5:AF:5F
X509v3 Authority Key Identifier:
keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:34:57:ab:7c:72:37:24:75:1a:a1:0a:09:ba:26:68:b6:d3:
1d:50:28:23:55:b4:a3:3b:fb:d0:16:a5:45:05:f9:04:f6:09:
7d:2a:c8:aa:f9:95:56:81:f3:6d:b5:f1:a4:f4:67:e4:97:16:
b9:55:01:16:f9:53:d3:5f:bd:23:6e:07:e8:20:64:c4:ab:eb:
f5:be:4a:b2:c9:1c:74:e5:ed:17:c2:72:e7:47:f9:be:44:b4:
52:74:b8:50:54:e4:f6:98:94:88:d4:36:96:16:4a:01:de:d1:
57:7c:3d:a4:f1:e4:c6:8d:07:39:f8:4a:10:c8:cd:1d:f2:e0:
36:13:ec:38:67:bf:df:7c:22:58:dd:8c:67:36:95:80:15:8d:
c4:db:41:fa:22:42:a3:d2:f9:28:8d:6c:b7:ef:71:7e:10:37:
e8:b6:5c:c4:19:1e:d8:0a:c9:db:bb:b2:dc:6f:7a:01:91:6f:
5b:61:5a:e3:c8:09:3f:91:8c:16:65:53:ed:31:a0:18:83:1a:
cc:c1:d6:13:f3:a6:fe:e7:fd:50:5e:8d:92:ee:96:6c:e6:d2:
d5:83:c4:52:94:0a:e7:0d:80:dc:e7:b4:17:95:94:09:01:82:
0f:1e:3e:dd:96:97:ba:1b:b8:c1:37:d9:33:86:80:61:43:7b:
6f:ec:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:54:03 2025 by rpki-client