Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier: 5IEgrkNaRsFXRyuDVgZu6oqEap0PkgviYUfvv37nLgQ=
Subject key identifier: 11:B6:B7:D5:71:5D:C4:35:E0:0E:01:12:2F:D3:F5:A6:9E:77:C0:9C
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer: /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial: 019A4F629782A01E4403DF6349CB9689BB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: 1BkJuFsWBoImirlBdTz60v7QJP7IqFLZP3t+09yzr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:97:82:a0:1e:44:03:df:63:49:cb:96:89:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=11b6b7d5715dc435e00e01122fd3f5a69e77c09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:ed:4b:60:c4:c0:ed:ac:d8:79:20:e2:2d:
63:73:7d:d5:6c:bc:fc:79:8f:3c:ef:31:9c:31:ba:
0a:fd:07:46:07:1f:65:9b:67:92:4a:d6:da:e5:db:
a4:c3:17:63:8b:0e:ed:e0:18:03:44:a5:4c:11:2f:
be:ec:33:08:81:79:0a:99:ef:fc:8c:e1:f4:60:cc:
52:83:d2:ea:3a:b1:a3:88:72:4f:91:60:f9:ac:66:
d3:a8:db:69:a0:72:7d:9d:c3:77:48:c0:4d:b8:28:
03:38:d4:8b:e4:b3:86:c2:20:32:6a:65:52:a9:64:
b4:2a:e7:86:af:33:e3:0f:c3:11:10:1d:84:c4:6b:
28:b6:a7:7f:d3:87:50:35:ba:ae:af:40:83:52:fa:
2a:32:54:e4:e0:ea:6d:a9:b5:f0:ac:93:fa:2a:3b:
bd:22:01:9a:29:14:22:c3:ea:0a:2d:55:1f:5b:54:
de:d2:7f:5a:68:af:ec:a0:56:db:51:04:ad:cb:88:
c8:91:7d:f8:95:43:74:1c:d5:fa:df:c7:fe:f5:de:
9a:ef:28:21:f5:89:98:f6:6f:59:79:30:6e:42:09:
6b:92:92:6c:80:ae:74:6c:2f:46:f2:13:25:78:b8:
62:54:8f:22:71:87:25:f5:48:d8:90:a5:ec:9d:82:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:B7:D5:71:5D:C4:35:E0:0E:01:12:2F:D3:F5:A6:9E:77:C0:9C
X509v3 Authority Key Identifier:
keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:3f:c8:23:d0:c0:b3:83:68:77:b3:0b:cb:e4:a4:6b:72:
a4:80:6c:23:64:bc:70:31:70:4e:d0:a1:51:bf:f0:cc:4b:b1:
6e:0a:53:48:cd:01:63:e9:99:52:4b:26:08:5c:32:4c:64:08:
f9:cb:4f:78:cb:c6:b3:fb:6d:5c:83:9a:70:2d:dc:3c:03:05:
bf:44:a9:be:fc:f8:82:d4:be:3c:2c:e4:c3:00:e1:7c:0a:3e:
1d:aa:cc:4e:3b:41:03:a4:f0:e4:c2:b6:98:00:7e:d4:f4:dc:
0c:ae:74:aa:2a:1e:26:dc:e0:d1:2a:0c:dc:94:5f:b9:d1:e3:
b9:58:7d:2d:ec:97:78:d6:e5:08:91:fc:78:e7:4f:c2:18:53:
76:e3:bd:57:00:a7:6e:c4:14:c2:fa:43:bd:51:38:ec:74:71:
cb:c2:61:e6:a9:ae:20:42:3c:aa:4a:89:16:2b:d7:37:9a:35:
bc:f5:d2:cf:18:24:f8:48:37:28:48:7e:5a:5c:11:0e:1e:09:
41:cd:d0:c2:ab:a8:1e:db:16:f9:e5:ad:57:b2:74:34:e5:f9:
4f:54:fa:53:38:54:ac:dc:3f:ee:fc:8b:fd:97:fe:1a:22:e0:
ab:5c:30:67:45:22:35:7e:34:26:69:70:19:70:29:1a:73:21:
ce:e8:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:33:08 2025 by rpki-client