Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: YVM+jTXQf/DdjlnMr9WbYrXsbK+PVzCMN0RxP9VltSE=
Subject key identifier: 15:26:C5:57:53:F3:51:2B:5B:18:7D:2E:FC:59:C1:6F:68:40:0C:0F
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019A4F6257CD4D1F0C9AE9DB49261E4148D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0B8F
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: cA/txlcQQUC5x8ozEV78LJy89nsyFISog2DWVCutpm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:57:cd:4d:1f:0c:9a:e9:db:49:26:1e:41:48:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=1526c55753f3512b5b187d2efc59c16f68400c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:45:e9:f6:7a:ce:de:47:0b:78:88:c6:79:
c7:fc:7b:78:cb:0d:03:43:63:6a:2a:ab:85:e5:94:
be:e1:42:ef:cc:ee:d4:c8:62:3d:48:78:11:e7:08:
47:ea:7c:e4:6d:19:a9:9c:70:37:5f:e7:e0:08:48:
ba:a4:03:6c:fd:eb:54:3f:c1:73:d0:27:e4:9b:10:
e5:93:84:7b:69:6b:5d:00:fd:bd:26:76:d6:6f:32:
ac:c1:a0:31:cd:6a:92:3d:fd:9f:d3:12:93:5d:89:
4c:ac:63:09:dd:63:64:fd:b2:8c:b7:b0:ca:59:78:
f2:23:00:33:63:39:e9:c6:fa:22:a1:57:4e:35:a9:
05:4b:fd:03:67:29:1f:0f:b8:3c:b7:c0:0f:93:4c:
10:bf:4d:c7:b1:48:1d:79:a1:38:d2:24:42:c9:7d:
7e:da:03:99:9e:91:85:08:e9:91:ab:05:6e:0a:b2:
5e:5c:bd:92:22:8b:4c:d7:e2:25:83:53:dc:b2:06:
24:47:91:23:5c:c8:6e:68:4f:33:a2:05:60:b3:4f:
47:ba:69:d8:d9:ef:2b:ec:14:85:86:48:e7:19:e8:
ca:51:2a:e0:bb:2b:55:79:7c:57:d5:18:be:c0:7a:
a6:b1:f6:17:04:47:60:41:21:50:1a:07:35:39:1a:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:C5:57:53:F3:51:2B:5B:18:7D:2E:FC:59:C1:6F:68:40:0C:0F
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:26:35:ab:16:11:f2:d7:d5:ad:6c:a6:d9:01:c7:72:2e:bb:
27:5b:53:87:41:13:bb:5a:8d:4d:62:16:38:d0:94:aa:65:de:
27:d7:a2:3a:ea:ba:97:bd:72:72:40:1d:a8:d4:4f:fb:9a:24:
08:9f:b4:11:19:e7:d6:bf:b8:93:24:d2:97:89:b2:66:38:79:
33:2d:11:83:38:48:8f:b5:7b:55:01:8a:a7:93:dc:3c:76:08:
2d:a1:10:3c:57:f5:9e:88:81:86:63:53:06:5e:f1:07:59:f6:
df:80:17:41:81:ad:6e:2a:59:da:3a:1a:e0:8f:4d:f9:c5:92:
27:a9:af:1b:b1:6f:76:e4:42:0f:9d:15:6b:6c:81:68:0c:33:
7c:f5:16:c0:d5:a4:bd:f4:2e:36:7e:a7:8c:1c:79:1f:a7:63:
77:4a:a8:24:28:de:4a:cf:1a:2e:ee:2b:4a:f8:e9:6d:5f:94:
89:a9:da:4c:e5:9e:9f:e3:f0:02:42:9c:0d:99:68:f3:23:a8:
47:c6:80:3e:40:d3:79:af:4f:bb:e7:55:a0:cd:ec:ee:ef:9f:
b8:3d:3e:eb:94:ab:5d:55:65:30:39:71:ec:4b:9e:90:63:f3:
ee:61:62:78:52:ba:77:e4:e1:33:2f:35:5a:71:4f:48:07:41:
b9:2e:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:28 2025 by rpki-client