Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: JznLtk8bNDFFC8yWZ5ToT76gSdDCMdPcFOVVAaChrGY=
Subject key identifier: 5D:6B:60:C2:20:3B:11:AA:8C:CD:8F:96:95:44:49:35:BC:0E:D0:3E
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 019A4EF5793714F6A40FAE99A773F000F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 13BF
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: BuuqI3xeq9ruEYZnxbMqW1V2MWK1Vj4y1RTFvjzzxZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:79:37:14:f6:a4:0f:ae:99:a7:73:f0:00:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=5d6b60c2203b11aa8ccd8f9695444935bc0ed03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:42:f6:b3:93:66:e9:3f:25:19:3c:dd:70:
8c:94:41:c3:03:82:bf:7d:1e:60:7a:30:3a:86:d9:
9d:bb:7e:46:c5:7a:f6:47:0a:a9:59:37:6d:be:3d:
97:2e:97:36:44:e6:d7:b9:c7:1c:46:20:c7:43:ea:
59:cb:82:bc:89:fc:86:49:00:e8:f1:ea:7e:16:e0:
2c:d7:6e:10:5a:9a:62:69:88:81:2f:bf:37:11:e8:
4c:d4:ec:2f:74:de:3e:ad:7f:3a:cb:45:fb:dc:1d:
47:d0:34:77:61:05:b6:11:3f:b8:0f:53:1c:c8:46:
32:07:f9:eb:3d:f4:43:9b:b4:ae:6d:12:43:39:9a:
f1:5e:d4:c4:79:9d:6b:60:c0:3c:ad:03:2c:04:9f:
25:ec:0d:fb:e8:fe:ca:d5:c6:27:9a:a2:40:c4:99:
5d:69:bd:f0:18:35:0f:75:53:ad:6b:0b:e6:93:cc:
4c:be:8e:09:60:45:4c:01:22:49:07:46:15:d1:16:
85:7f:3c:7a:58:85:fd:68:09:b8:8f:11:03:58:0e:
2a:bf:b5:0b:34:bd:d5:14:e4:64:5b:2c:dc:fd:24:
e0:7a:ba:e7:14:a8:df:e9:f1:d7:3e:6e:1d:2d:dc:
3b:df:02:c3:42:2c:36:e4:f8:09:c8:21:ac:f9:63:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:60:C2:20:3B:11:AA:8C:CD:8F:96:95:44:49:35:BC:0E:D0:3E
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5d:53:99:24:15:ee:cc:7e:24:63:4d:a3:67:de:ca:12:39:
9b:83:4b:2d:99:6e:e3:99:ed:41:f3:86:2c:c7:2b:ab:53:78:
64:91:41:0f:67:b4:eb:72:3d:8a:f1:ec:25:30:72:a9:21:f4:
a4:83:d9:dd:a3:cc:ce:70:c4:17:18:9b:75:90:11:a5:4e:24:
b9:f3:d7:10:d5:5b:56:03:a6:57:5a:2c:22:51:0c:6f:11:81:
3a:e1:c7:9c:95:94:6b:57:d7:01:64:bf:30:54:1c:70:55:fb:
15:43:18:8c:c6:7d:3e:c5:19:fd:18:c1:9a:e1:1b:c7:8e:54:
26:4e:11:68:25:be:ea:79:c2:df:a4:4a:2e:2f:b0:17:36:06:
8c:48:ed:54:45:f1:64:97:04:b6:76:72:98:77:89:14:d3:32:
f1:9b:7f:fe:bf:4a:47:df:35:d2:46:c8:48:4b:70:4d:3d:0d:
57:f7:a8:aa:e8:91:01:df:fa:31:56:b1:3a:29:30:06:80:ab:
43:f8:d1:a8:c2:49:50:36:c6:33:60:2e:03:c2:e0:3b:19:7a:
b4:98:5e:91:ee:a2:95:fa:e4:ad:e4:71:3f:b7:8b:d9:c7:65:
2b:8e:eb:34:bd:84:67:c3:c5:f5:8e:5e:9f:d1:22:72:ab:69:
e5:64:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:50:00 2025 by rpki-client