
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
File: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft (raw, json)
Hash identifier: hWzZco0F4ZMW9eOv+Of9Pfmk6324+Z8c79SQBbmlgjs=
Subject key identifier: 6F:E9:DF:83:6E:CB:EE:6B:E9:AD:F2:A0:96:BF:BE:60:89:19:C8:96
Authority key identifier: EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
Certificate issuer: /CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Certificate serial: 019A4F2B4528074C101F7A3C631CD2DAFAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
Manifest number: 03ED
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl (hash: XRia+n6yFKsK29++1J07hnRO8NEqe3y+DUy48wBhqhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:45:28:07:4c:10:1f:7a:3c:63:1c:d2:da:fa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=6fe9df836ecbee6be9adf2a096bfbe608919c896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:1c:64:51:b4:30:28:66:ec:d7:e0:f6:90:
56:c2:32:11:46:23:35:b0:be:2a:c7:34:0f:fc:6c:
14:82:b3:35:a2:5a:34:02:5b:dc:38:42:ae:36:21:
2a:b3:ce:50:9d:a6:de:39:16:bd:57:52:94:b0:5a:
d2:a1:95:ae:7c:5b:a5:ef:35:99:85:56:80:da:90:
9f:85:c6:e0:2d:f9:94:e5:1a:43:f0:26:39:59:5c:
b6:3e:9a:fe:d1:a0:73:e0:61:2c:d3:4b:b1:79:7a:
8e:76:6d:39:09:1a:02:3c:0d:af:f6:c9:5a:b7:51:
54:91:73:50:1a:1b:45:0d:0b:53:d7:d1:67:75:71:
d6:df:f4:61:e2:5f:c3:b0:17:cd:23:0e:cc:fb:22:
3f:01:de:36:ef:84:bd:17:72:8b:c7:18:3c:8e:c8:
5f:3c:35:f5:87:49:47:52:0e:54:21:67:fd:b3:c0:
df:bc:50:54:ed:09:bd:2e:2f:ce:71:c8:8c:f6:23:
0b:bd:22:4c:4c:1d:ca:8a:11:d8:e3:d5:11:f5:14:
05:ef:b4:3d:ba:d8:a4:e0:9e:66:db:d7:87:c2:fb:
45:57:1a:8d:01:65:1e:5f:01:79:b8:49:12:86:96:
50:fe:5a:8f:95:53:d8:7e:af:fb:0f:9b:0c:f1:f3:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E9:DF:83:6E:CB:EE:6B:E9:AD:F2:A0:96:BF:BE:60:89:19:C8:96
X509v3 Authority Key Identifier:
keyid:EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1c:80:9a:a2:98:6d:e8:96:80:07:0e:9d:a0:83:cf:14:30:
73:da:af:eb:a8:00:2d:56:1a:87:a9:08:d5:70:a2:a6:1c:aa:
8d:32:c5:8c:69:58:04:4b:93:a5:0a:97:c1:8d:73:37:57:b8:
36:b0:c5:c3:ca:a8:b7:f8:6f:80:65:52:93:f8:01:6a:a9:c5:
51:c5:e9:35:87:16:56:9c:87:19:2a:8c:ff:ba:61:3d:91:ff:
c1:e8:3f:98:c4:96:89:fb:3e:a6:0b:ef:0e:ca:37:d2:c5:7b:
19:0e:82:a0:fa:af:4b:ca:d4:9e:6b:46:54:1a:d5:ee:83:97:
aa:23:46:7d:91:2a:74:58:51:54:9f:a2:9c:4b:67:fd:8c:83:
10:a1:c7:ac:9e:83:7e:ee:07:6d:fa:26:eb:30:ee:b4:76:a3:
b0:01:0b:03:f0:89:5b:67:84:1d:08:cb:48:07:76:b2:1e:11:
cc:b6:b3:f3:61:2a:47:9e:98:49:d4:3a:0b:48:82:62:0b:9e:
73:cc:ad:96:87:da:58:18:fc:f8:ec:1f:19:55:f9:ca:67:ab:
0e:79:5c:7b:5d:70:d5:a1:ae:58:19:b0:64:d2:0e:70:a2:d8:
ce:f6:39:a0:62:96:7e:74:59:13:0c:ce:a3:61:d7:bd:40:11:
3f:02:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:17 2025 by rpki-client