Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: JmT+igNX7bszv0PZYpKk0TmcvB8WdXNY0WEJNiHJ1d0=
Subject key identifier: 5D:8D:10:F7:C5:D3:BA:BD:E3:91:EC:76:E7:5A:F9:20:2B:D7:40:CF
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019A4EF472DC7840668C5E0FF5169D6C670F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 036E
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: brNRgUVZmMY70167hTxa3uBzUGOp1cqURfsv5QrLJis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:72:dc:78:40:66:8c:5e:0f:f5:16:9d:6c:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=5d8d10f7c5d3babde391ec76e75af9202bd740cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:f5:05:bb:62:b4:87:cb:0a:53:91:8c:62:
9f:71:1a:8c:d0:75:51:1f:fe:95:00:21:08:b9:30:
18:02:12:e1:46:31:4e:5a:31:11:a0:cf:eb:84:09:
58:d6:e9:7d:b9:6b:65:39:cf:37:0b:ab:33:ab:f5:
2b:5f:85:4a:ae:0f:dd:5b:af:70:58:48:45:3d:aa:
15:f4:cb:10:c1:63:fc:c5:93:1d:ce:b3:ed:5b:e6:
0b:6b:a5:43:3d:d0:2d:27:dc:0f:22:61:32:47:e6:
67:67:dc:e4:39:77:24:79:17:73:fd:07:05:5e:6f:
40:34:f4:f3:a8:b6:56:39:9c:fb:b4:ae:23:42:19:
7f:e2:67:27:4e:eb:77:9b:03:2b:a4:fb:4c:d2:8c:
0a:f0:fc:86:5b:e3:18:69:55:92:8d:30:7e:f9:66:
d8:35:f1:52:6e:52:7f:a2:6f:2c:4d:0c:59:88:40:
8d:cd:0a:d1:08:fc:ca:a7:cf:79:6a:4f:35:dc:21:
fe:8a:2a:64:8e:c3:c1:bf:ea:32:6a:35:11:6f:2b:
46:17:0f:de:6b:4c:48:c9:cc:c4:cf:a6:fa:22:79:
b4:21:3f:05:d2:e2:28:ac:a2:08:fd:ba:69:33:d8:
c7:ec:1a:de:e0:ec:fc:b0:6f:9f:dd:99:44:c3:d8:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:10:F7:C5:D3:BA:BD:E3:91:EC:76:E7:5A:F9:20:2B:D7:40:CF
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:45:31:84:23:ce:8c:3e:16:fd:5f:dc:58:f8:43:fa:d2:d9:
e0:8a:c5:33:db:a9:a1:1a:7a:4f:87:46:5f:1b:e4:1d:87:c4:
2d:53:62:3b:2e:aa:9c:07:cb:32:e0:a7:fa:2f:b9:06:94:ca:
30:40:2a:bc:c9:4a:cc:db:79:71:23:a6:3a:a2:6f:8e:79:a1:
15:36:68:79:b8:dd:9e:a4:cb:34:a5:19:43:a0:88:6b:c9:f3:
13:27:a7:ef:6c:90:8a:17:93:62:66:b4:4e:df:bc:60:21:29:
ae:6d:1e:34:d7:fb:e1:fd:6b:74:1a:de:93:9c:6d:47:9f:09:
07:6d:a9:15:f3:dc:32:70:a9:51:11:1f:35:8f:35:20:11:a0:
63:fd:6b:31:78:41:0d:66:c7:84:05:e0:9e:c8:95:fd:2e:06:
4c:a0:7b:d8:04:ae:91:b3:a9:c9:66:7c:5b:43:1f:cd:bb:8e:
ad:7b:52:8d:ae:81:5f:16:17:a5:ab:dc:12:1a:89:1b:25:de:
33:ee:0d:2e:18:c4:6f:cb:ec:22:cf:7d:41:57:1a:a7:6d:49:
1d:44:75:a8:be:35:b0:f7:99:f9:b3:7b:17:35:8b:5c:df:a1:
48:9f:2e:3e:e9:8e:f6:49:1c:74:d3:b0:e6:f2:19:de:ee:20:
29:2e:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:01 2025 by rpki-client