Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: T5seLfSUE/kso+nPUoa550aREW3hnRTdGGY4gWyw6vw=
Subject key identifier: 57:4A:D6:83:61:7D:64:48:D6:14:C9:72:A2:AD:C7:5C:04:BA:D2:56
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 019A4DAB1FCB1512462F1FB1EBC669A1BE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 06EB
Signing time: Tue 04 Nov 2025 07:00:51 +0000
Manifest this update: Tue 04 Nov 2025 07:00:51 +0000
Manifest next update: Wed 05 Nov 2025 07:00:51 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: h0oNYfX/2rbnkRjxy3reqhSTcUkljVEHe/q1XNgDeKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1f:cb:15:12:46:2f:1f:b1:eb:c6:69:a1:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Nov 4 07:00:51 2025 GMT
Not After : Nov 5 07:00:51 2025 GMT
Subject: CN=574ad683617d6448d614c972a2adc75c04bad256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:c7:9b:74:d3:84:48:c2:17:c8:be:1b:bd:
ca:53:49:75:a7:dd:2f:11:9f:02:07:d2:b8:6e:bb:
0f:23:97:4d:7a:7d:82:a4:3d:4b:34:03:95:fa:7b:
c3:51:df:df:dd:a3:12:f1:a7:6d:3c:25:a2:fd:88:
0c:29:d5:fb:65:31:a5:1b:fd:f9:e0:45:8f:84:87:
6d:ea:1f:ee:76:23:d3:df:64:bf:2e:67:6d:50:6d:
83:09:c8:41:26:7a:68:db:74:ce:eb:70:39:e5:87:
98:1e:90:09:4f:f6:68:51:c9:b9:d8:18:9e:f2:01:
81:d7:7a:8b:93:fe:00:41:ad:78:e3:85:f2:1d:dd:
a3:01:49:32:9f:05:08:56:1b:33:d8:e7:e5:db:95:
9f:70:ef:1e:f6:0f:54:be:68:df:1a:14:01:e7:35:
4a:08:35:83:b2:e6:c0:e4:99:86:38:6b:a0:b9:87:
64:99:86:ab:68:63:d5:92:c3:9e:4c:5a:36:3b:d2:
23:8e:53:7d:f2:07:35:1b:1e:45:2c:14:70:4d:e1:
2e:13:7a:6f:97:b3:73:a7:79:a3:5b:2d:6c:d9:a8:
ed:92:95:2b:9f:77:19:52:2c:01:5f:68:7a:21:81:
0f:55:d9:3f:c2:d7:52:cd:39:73:d3:bf:3d:cd:05:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:D6:83:61:7D:64:48:D6:14:C9:72:A2:AD:C7:5C:04:BA:D2:56
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:95:39:50:1a:e8:51:02:f8:8a:57:85:ff:21:43:ff:21:65:
61:a4:29:b2:fd:46:82:1d:60:55:83:fd:42:87:85:d7:04:48:
8b:49:d1:54:4b:62:cf:64:79:06:ac:e4:a7:7e:fc:a8:be:39:
a7:4f:2e:ef:c2:88:9e:e3:dd:35:4e:ec:35:57:b8:81:5d:8b:
66:37:96:71:9c:0a:3f:f8:fe:4d:3a:17:5c:18:b0:8c:c2:47:
aa:93:b0:a7:71:6d:29:ed:ed:e4:61:26:f1:4a:1d:8c:e6:8d:
4a:c2:e7:7d:df:6e:df:6d:83:c4:fd:c9:1b:83:39:ba:da:e9:
20:bb:dc:a1:21:9c:6f:94:6b:16:83:1a:34:da:32:6f:73:d7:
cf:7e:da:14:c5:6e:a2:94:fe:6a:36:97:b4:86:54:df:95:67:
26:52:66:0b:d7:69:71:ca:c8:1e:0c:87:ca:d5:18:ef:87:5c:
58:7e:47:d5:50:dd:db:42:e1:6d:23:be:5a:01:29:4b:ee:3b:
7f:3d:0b:05:6d:65:77:2e:92:36:fe:12:ba:19:73:84:82:0c:
f2:a1:15:6d:96:48:4f:cc:b1:b9:ef:08:af:8c:d2:57:ee:a7:
9b:0c:71:91:f5:39:f9:b7:d8:e4:35:ef:eb:15:f9:da:1a:8c:
9f:77:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:58 2025 by rpki-client