Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: oPIZOfC9paQm+vB3yNF551P29yw+1TD01LceL+KdruU=
Subject key identifier: 88:1F:38:F2:44:DC:23:1B:E2:DD:B5:4F:B2:47:56:CD:49:10:DD:2E
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 019A56ADFD143734710D43F1075A841B7BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1710
Signing time: Thu 06 Nov 2025 01:00:34 +0000
Manifest this update: Thu 06 Nov 2025 01:00:34 +0000
Manifest next update: Fri 07 Nov 2025 01:00:34 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: wrcwgN/Uhq2wymQnM3uVDCWZw/R4Hzu5D+CdYXBgoy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ad:fd:14:37:34:71:0d:43:f1:07:5a:84:1b:7b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Nov 6 01:00:34 2025 GMT
Not After : Nov 7 01:00:34 2025 GMT
Subject: CN=881f38f244dc231be2ddb54fb24756cd4910dd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:90:fe:26:6f:46:0b:b3:74:52:42:4c:68:
9d:6e:ca:0e:f5:81:e5:e0:1c:9b:40:b9:7c:56:6f:
a1:84:43:34:67:03:f8:78:24:2c:21:0a:ee:24:41:
e3:a4:d4:5b:f1:42:a8:54:1b:8c:b8:a5:60:0e:0e:
89:5b:36:3a:20:47:3c:e4:da:aa:cf:9f:28:6e:78:
7f:26:08:69:58:b4:4a:ce:8b:3e:85:ba:1b:d5:31:
e2:a0:61:3b:30:1c:ff:f1:24:ef:18:60:9a:6b:3c:
b4:1a:b4:90:bf:85:e3:b7:20:ec:75:e1:ca:ca:05:
cc:e0:c0:28:ad:b2:43:5a:51:b9:88:5d:9e:83:55:
6d:40:37:c7:2c:d0:e8:24:b8:a5:3c:32:b5:f1:ff:
29:3f:15:2a:7a:a8:87:6e:62:3d:c3:7a:41:61:ab:
da:31:7d:d4:8a:d0:86:b5:6c:e4:01:25:46:0d:85:
50:ee:e9:b7:f5:89:6e:bf:ac:37:1a:91:51:f3:8c:
60:f8:b6:af:f7:25:8f:8c:cd:e6:9f:3d:b5:fc:57:
1d:62:3c:52:b6:4b:e5:3f:2e:d9:22:79:84:e8:7f:
5b:d6:e2:77:8e:17:15:28:2f:75:6f:fa:83:d9:2b:
57:89:7e:ac:36:c5:dd:79:15:fc:cf:92:1b:2a:03:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:38:F2:44:DC:23:1B:E2:DD:B5:4F:B2:47:56:CD:49:10:DD:2E
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:07:ab:5f:23:8c:80:5a:0e:ca:fc:6f:cd:b0:e2:37:21:
06:26:cb:b3:ee:b0:ae:97:e9:0e:10:ba:41:69:07:a4:aa:b1:
a3:73:3b:e8:e8:f6:fa:c6:bc:50:ed:55:94:2e:58:1d:d5:ac:
ae:93:e6:58:c2:60:02:18:c5:b6:10:26:ac:01:7a:19:91:82:
62:81:cf:71:c5:99:ee:da:1b:78:b0:30:98:bf:e3:31:6a:74:
f6:7a:82:ab:b5:40:11:79:12:ab:3b:72:47:cb:ea:91:e4:cd:
21:6f:8f:e3:51:70:8f:ba:4d:6e:9f:2f:5e:22:96:29:95:e7:
6a:09:ac:12:b0:dc:02:39:2b:61:f2:7d:c4:3a:da:50:8e:91:
68:38:87:4d:0c:4d:e3:0c:ee:8d:10:2a:95:63:dc:14:d9:64:
7d:ac:fa:7c:07:ed:11:78:34:a3:a7:c5:a1:de:5a:18:94:30:
ea:ef:8a:13:1b:4d:ff:46:70:e9:4d:e0:be:a8:d3:55:b0:e8:
66:f1:b5:de:87:e3:4f:51:8f:ad:84:15:aa:e9:9b:96:4e:db:
9a:bf:8b:42:3b:4e:2a:9d:c4:32:0e:7c:9f:89:41:4e:37:90:
d7:7f:1a:e6:c2:4c:81:a5:0e:ad:3e:1c:f2:b6:bd:00:6e:1f:
04:db:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:55:44 2025 by rpki-client