Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: hD3sYvP1wWBL/x8JY/PmInkdZ4LqFuaMrRFrzlMyDLQ=
Subject key identifier: 5B:59:A5:48:02:D4:0F:D5:38:A1:0A:CD:64:08:6D:69:7B:0F:FC:63
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019A4F62497C1F517742CF07DB64B30BB70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:32 +0000
Manifest this update: Tue 04 Nov 2025 15:00:32 +0000
Manifest next update: Wed 05 Nov 2025 15:00:32 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: u/LfUmzrQFZJ1tQ01qesQL8UKIdUkO/85UUwDU5quwM=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:49:7c:1f:51:77:42:cf:07:db:64:b3:0b:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Nov 5 15:00:32 2025 GMT
Subject: CN=5b59a54802d40fd538a10acd64086d697b0ffc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:e9:ae:51:c0:b7:c7:d8:68:b9:9a:11:ac:
22:02:8a:80:a5:c1:59:ad:f0:46:68:77:3d:1e:8a:
6b:6a:85:58:f9:bc:6a:2d:82:c1:ec:fb:38:85:60:
50:27:50:e5:2a:96:33:77:54:1d:7d:35:66:11:46:
d8:75:bd:a5:7e:ed:16:cb:06:33:ca:3f:b6:d3:c3:
97:68:97:a4:43:97:66:7d:bc:d6:b5:83:ed:60:ee:
35:e4:43:85:a5:46:c8:0f:31:e7:23:46:a4:d0:26:
26:ca:08:db:a1:ff:c1:49:56:67:75:36:3b:bd:d5:
50:ae:a5:7b:05:b6:69:55:c1:a3:6f:03:1c:4d:2b:
40:57:f5:29:92:f0:65:d8:f1:d1:7c:97:c9:cc:26:
94:6f:65:21:da:3a:cd:72:41:89:52:be:2a:4d:12:
8c:7d:e7:86:21:ef:b1:1e:00:b2:7f:de:81:ae:2f:
ba:7c:c0:5c:57:6d:e4:9f:bd:94:74:b9:64:f8:5c:
3d:80:7b:cf:c0:45:2e:43:37:d8:0e:86:fd:3e:b8:
e6:1d:2f:92:78:1e:87:39:67:b0:59:03:33:4f:e6:
c6:16:cd:b6:19:6f:c8:4a:5f:a2:75:9a:30:0a:7f:
1c:07:ae:ae:10:2c:05:de:1a:38:23:72:94:24:b2:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:A5:48:02:D4:0F:D5:38:A1:0A:CD:64:08:6D:69:7B:0F:FC:63
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:98:39:68:75:85:db:51:81:ad:cc:41:84:94:48:0f:ec:3a:
83:7a:6c:56:c2:44:f6:74:11:34:28:69:61:18:8f:fa:94:f0:
d5:30:f9:3c:c3:5e:4b:77:f2:08:90:a8:45:87:f3:82:67:d5:
f8:f1:9e:f6:76:19:9a:b5:c9:98:1e:c0:8a:02:23:1f:8e:d0:
d1:19:92:0a:1d:cd:af:87:e9:84:e5:14:b2:63:23:d5:86:b6:
fc:ed:90:3e:2e:96:ad:20:80:ca:b1:2a:8d:f4:9a:5c:36:2e:
ec:7c:c9:f7:0b:00:8f:6c:18:2f:83:bd:83:e9:ac:57:3a:82:
13:be:3a:40:d0:9f:b8:4c:9a:c6:e4:fb:db:ef:6b:6b:6f:fd:
fb:60:69:ce:88:f6:4d:9c:87:e8:42:94:2f:22:b7:07:64:43:
1a:57:76:03:b6:d3:14:e3:fa:75:c7:9d:ab:cc:8f:5b:7f:05:
0a:8e:9d:af:f6:0b:79:2f:c9:1d:f2:1f:a6:71:bb:43:85:fd:
9c:12:20:d3:7d:64:12:c8:ec:99:13:f2:12:f6:3d:a6:6d:5f:
cc:7b:d0:4d:9b:3d:f2:02:96:9c:ad:1e:22:c2:45:e8:d1:d3:
ed:c7:cf:0f:05:30:c3:13:9d:d1:ca:cd:a2:ba:3e:85:9c:bf:
24:c3:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:13 2025 by rpki-client