Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: lXtA2sMoPtEH+g3BpeUUcOoKeQuCMJPAVyhWijQHPk8=
Subject key identifier: 40:25:5B:BD:5C:B0:C3:8E:F2:27:34:5D:DD:68:C6:33:DE:02:18:B7
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 019A4EF41918985FBC6A295FA2523849993E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: DYFzWgXuaJJNt6e8sgoMI5gyBbGd4GH2hrrkTq4E5ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:19:18:98:5f:bc:6a:29:5f:a2:52:38:49:99:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=40255bbd5cb0c38ef227345ddd68c633de0218b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:df:85:20:4c:a2:14:de:e2:c1:d6:a2:8b:
66:57:98:c1:d3:f8:5e:57:fd:b1:30:a2:92:5a:e0:
6e:8c:3d:62:11:9a:f2:ec:7d:f5:d5:3f:93:7e:b7:
b6:9e:49:42:50:b5:21:f3:56:f7:05:0c:cb:7e:2d:
f6:3a:90:72:25:d8:0e:6d:00:18:53:a5:0e:38:83:
2d:df:ad:f5:23:aa:11:97:05:f0:05:c4:2b:16:1b:
de:08:52:ac:bc:e7:5d:e7:b8:d1:fa:e2:e2:f5:33:
bd:7b:f2:be:47:00:74:84:f7:c4:b4:fd:c2:5e:83:
af:78:87:fa:fa:30:38:22:e2:9a:a2:91:33:42:b5:
3b:e7:39:66:0f:ea:dd:e6:ba:d7:7a:a5:34:66:b1:
1a:cf:e5:2d:dc:b7:df:48:35:89:ed:76:92:c8:e9:
3c:02:0b:48:60:a4:59:13:66:3b:c1:79:de:e4:3f:
cf:70:39:6a:a3:8a:56:b8:e6:a9:a9:f3:b0:1f:9d:
9c:32:cc:43:8b:70:26:e8:16:d5:ab:58:04:94:b6:
df:3e:d9:07:a2:70:b7:3e:60:d7:c8:d3:a4:24:51:
85:e6:20:65:f0:17:3d:38:c5:16:ba:4e:89:0c:7e:
9e:4b:5a:10:05:8b:ba:4b:72:7b:28:bc:9c:80:dd:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:25:5B:BD:5C:B0:C3:8E:F2:27:34:5D:DD:68:C6:33:DE:02:18:B7
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:80:de:94:c3:42:59:d6:bd:f2:9d:e7:02:e9:fd:bd:39:6b:
54:3e:c8:e4:5f:35:36:a7:61:15:57:9d:38:fb:48:19:3f:76:
fc:f4:e2:ca:2c:76:25:7b:85:dd:3a:6f:56:d9:c4:a9:26:14:
37:4a:4a:ad:b0:07:7f:db:75:e3:af:31:a3:bf:51:19:d8:2f:
84:57:d9:00:16:7d:9a:0c:8b:bc:9f:0f:6b:de:28:1a:53:89:
27:28:76:ca:3b:db:8b:09:8b:43:9e:cf:01:da:7d:7d:0b:b0:
99:20:fc:1e:c3:81:b5:fc:b1:bb:75:95:17:d3:a8:e5:f2:52:
8a:46:21:60:aa:d5:d1:f0:fd:6c:fd:da:39:46:8d:69:e3:3f:
b3:92:14:27:7f:8c:f7:a2:bc:8a:39:6e:85:c3:c8:66:bb:f6:
75:6d:9c:a7:84:cf:c7:6c:4f:42:c3:95:c9:ea:47:71:45:3d:
13:5c:d3:f2:3a:0a:eb:71:05:ca:eb:36:45:13:1f:cf:ab:0a:
33:c0:e0:a8:a8:47:5d:49:db:6c:0c:cd:e0:3e:9c:7e:e6:33:
3f:9b:4f:ee:8e:7e:11:48:1b:76:21:c8:80:e6:ef:3d:c6:96:
0d:74:b3:48:34:0c:ff:21:15:e9:eb:dc:ae:c3:a5:bd:42:89:
18:19:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:48 2025 by rpki-client