Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: 9qW+yyQNUGB8zvfUUps//cUDPQoAogfh9bPHcxuzONM=
Subject key identifier: 44:78:4F:3F:42:2A:0D:96:82:A8:05:CF:30:9F:9B:A3:46:3D:72:92
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 019A4E86AD6172B961209440E675AB704F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 03B1
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: BgPQWZB8OT7ThJP+fMK/pTINRSf9xjM7Jmi1p3l+E6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ad:61:72:b9:61:20:94:40:e6:75:ab:70:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=44784f3f422a0d9682a805cf309f9ba3463d7292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:79:9d:1b:47:99:e0:fb:02:90:e7:0c:2f:
d4:e8:f3:6d:71:9b:86:f2:2a:9b:61:6f:46:35:00:
ef:7c:77:b3:3a:ca:8c:43:85:5d:1c:21:42:f4:0e:
9c:1d:29:84:09:e6:e9:5c:2c:db:09:81:83:fb:86:
ed:41:85:09:e3:0d:c0:dd:7e:1d:eb:eb:10:06:df:
ac:12:c3:44:2f:24:ff:bb:2e:89:8f:70:cd:f7:22:
8c:df:72:ad:60:7f:f2:30:34:9a:7c:e6:be:f9:a7:
a8:a3:31:c5:e2:48:da:38:a9:2d:a4:c3:d2:61:26:
13:0e:7a:50:6c:b8:17:ec:7a:3c:99:e1:e0:44:b4:
cc:7b:e2:73:35:ab:44:3f:c2:1d:f7:ef:e1:85:dc:
3f:d2:20:65:92:4b:e4:59:85:57:e4:e0:5c:2b:6c:
0c:dc:51:ac:95:ce:d3:e0:cf:8a:e2:d7:7c:3b:07:
12:9c:0f:c2:19:19:f6:a4:d2:88:41:b6:da:80:0b:
3d:9d:db:76:c5:ee:0d:c4:27:11:8b:4d:db:ca:80:
41:a5:af:0e:2b:51:58:f9:16:29:2f:33:3e:ec:f9:
55:c1:ae:d1:8d:7b:c6:1e:60:ee:f7:c9:c7:4c:ca:
0c:e3:85:a5:b8:31:2a:94:8c:4e:86:1d:2d:7d:1c:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:78:4F:3F:42:2A:0D:96:82:A8:05:CF:30:9F:9B:A3:46:3D:72:92
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:31:be:71:b9:3c:79:6e:e8:c1:b2:4d:35:06:f2:5f:f7:
25:43:bf:b1:1d:6b:9e:63:36:36:13:b3:c8:77:ba:50:e2:39:
6e:57:aa:75:a7:dd:03:f8:cb:61:72:97:59:61:a6:dd:14:b0:
85:b4:18:41:bc:43:81:d6:34:15:00:01:53:7c:e7:01:ff:78:
10:f7:0d:58:72:0d:69:bd:32:cd:a5:24:ea:b7:00:6f:26:23:
30:f8:53:f3:85:b4:b2:90:aa:d3:3b:84:91:98:bd:b8:5a:36:
dd:4f:1d:e0:4d:a4:73:c4:96:32:99:60:62:f5:ea:f2:38:33:
57:e9:49:4e:24:75:be:c9:1e:f1:85:9e:72:b5:d2:de:e0:5f:
c7:1d:07:4e:8b:c9:bc:8a:b7:6b:2f:15:80:6b:fd:17:8f:9c:
8c:e9:cc:d4:86:58:68:8e:66:b1:32:f9:6d:1e:94:aa:5e:c8:
94:8e:03:f1:67:1b:07:66:d9:f6:71:b5:c0:c8:e3:8f:e8:4f:
d8:70:74:37:66:c4:40:14:ee:4d:73:e9:5f:83:c6:be:34:c6:
e8:e1:75:6d:c4:d3:43:f1:da:7e:30:45:15:79:50:52:51:bb:
90:30:6c:04:4d:91:54:26:c8:32:b8:09:d1:7f:d2:a0:77:62:
80:b9:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:06 2025 by rpki-client