Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File: 7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier: 4y7NEHpYd2/2LqHpx3NtPOd7CE6YcOARIIk70D7mYzk=
Subject key identifier: E8:CD:14:85:F0:85:DB:0A:EB:FC:9A:C7:0D:C9:25:BC:69:A0:28:D6
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer: /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial: 019A4E188FBF9BBC2552F7B7DEC4E5D328BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number: 068E
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: vtkLA6F28nMTS/1LgCSZevNuGOmuQw5EwyqVeXDDhRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8f:bf:9b:bc:25:52:f7:b7:de:c4:e5:d3:28:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=e8cd1485f085db0aebfc9ac70dc925bc69a028d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:ef:7f:f6:52:cf:33:90:d3:13:d7:90:be:
81:b2:c5:b1:c9:74:d5:6d:04:12:bb:fa:70:47:bd:
fa:79:47:6e:9f:69:7d:70:17:9d:80:06:d5:43:7a:
fb:5c:5a:9d:a8:e3:e3:3a:19:7d:2c:2c:ab:85:e8:
bd:17:3e:08:07:df:c2:47:58:2d:81:46:09:79:6c:
54:06:6f:47:b7:da:90:c1:1b:8b:c5:a4:8e:81:d3:
a5:4a:1a:ec:2d:24:9a:f7:f7:e2:82:2c:ca:db:44:
4a:b5:1e:cd:8c:a4:57:38:10:ce:d3:b6:76:08:b4:
80:9e:a2:56:1a:2b:b3:ba:49:82:2f:9f:c7:58:e5:
cf:47:f8:c0:34:d2:88:a5:0f:e7:b5:f3:fd:ea:46:
c7:ce:78:e1:83:fc:dd:a2:ff:b9:01:d8:c0:64:f7:
ab:d3:7d:c9:cc:4a:80:c2:b3:eb:46:29:f0:e9:ce:
7e:47:e6:12:4b:d4:6b:d5:ba:f4:f8:bb:f2:ee:29:
b0:ae:e3:93:5d:4d:56:8a:ce:44:5a:91:79:7a:31:
61:4c:e4:87:61:04:d8:ed:81:9f:87:d2:40:73:9f:
c2:be:97:c1:e2:54:72:16:a1:0a:7e:9c:cf:76:58:
99:fb:37:71:13:34:9c:e0:3b:d5:79:21:54:bb:1f:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:14:85:F0:85:DB:0A:EB:FC:9A:C7:0D:C9:25:BC:69:A0:28:D6
X509v3 Authority Key Identifier:
keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:7f:05:73:2f:0d:15:06:59:06:7e:fc:1c:e3:68:18:d6:
f9:f8:73:d4:b5:8f:fa:f0:81:49:82:6b:f2:d6:f6:08:36:9c:
98:ad:96:be:4f:10:3a:b7:bb:ce:d4:d1:1f:c5:0b:b8:0c:5f:
32:70:1b:96:b1:0e:7b:14:d9:fa:31:5e:a0:97:1d:b9:c8:3e:
3f:cd:d0:d9:97:3b:f1:18:29:e2:75:dc:12:ee:bb:af:20:c0:
45:e4:ef:20:d5:3b:d2:a6:7b:c6:bc:f4:dc:44:6c:2d:b6:22:
59:04:8e:67:cc:1a:49:6f:a6:01:64:8d:71:ce:c7:c4:31:a5:
65:56:31:2b:8e:03:cb:5f:1e:9e:4e:59:be:c7:43:13:f0:90:
8b:ae:07:65:e7:0d:1d:63:5e:f9:b7:df:08:c4:94:9a:da:9d:
7d:83:d6:1d:2d:2f:3e:17:29:a3:17:3b:da:2d:5c:9b:e3:c4:
70:1e:c9:cb:28:0f:c9:68:ed:de:61:87:7e:7b:ef:ae:6f:13:
4f:ba:2f:4b:cc:94:d8:02:a3:e6:ec:9d:5a:f7:b5:8b:0b:d2:
3a:ac:75:7a:36:8c:93:76:4f:83:0f:f9:71:c5:ea:3e:96:dc:
35:00:f8:2d:09:6c:86:f6:ef:2d:b4:79:93:b7:5c:83:6f:25:
18:e0:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:43 2025 by rpki-client