Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier: bZTU2QPEGSJxoKeXdIlFZgwcZV2mCJH0qL0l9GyV38Y=
Subject key identifier: 84:90:1F:82:08:DD:30:C6:15:1F:D1:F2:E9:1E:0D:C6:49:B4:E2:FB
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial: 019A503E001584D8B9C171807729D900956D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number: 0DA6
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: jVq482OFzs7MHKD4m1f27DtRYDC8U0YpKrsvSqZhOco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:00:15:84:d8:b9:c1:71:80:77:29:d9:00:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=84901f8208dd30c6151fd1f2e91e0dc649b4e2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:ce:c8:89:28:be:70:ff:d8:27:a3:f3:f2:
3d:8a:e0:e7:22:c0:66:24:5d:62:63:22:77:b1:33:
05:4f:2e:75:38:f8:3f:c8:7e:86:39:54:53:cf:6f:
cb:27:3a:d0:a8:36:49:8a:99:7c:df:55:34:fd:43:
95:d9:d2:30:53:67:85:1b:67:1b:2e:ad:e9:a1:d1:
01:1f:ab:01:0c:ef:39:38:d5:30:d9:63:61:5e:f0:
3b:09:0c:b3:9b:19:28:b5:f6:e4:4f:ae:12:d8:f3:
8b:27:a6:93:8d:b1:17:22:96:1c:d4:92:09:2d:f9:
c5:4a:15:30:b0:92:94:85:e6:1d:0c:0c:25:40:7e:
9c:51:c4:b3:21:ca:b3:c2:19:c4:7f:31:a8:e2:fc:
1f:8f:05:16:e7:9d:c9:46:16:e0:b9:56:38:d2:57:
fa:e3:01:ab:52:99:59:ad:fd:d9:14:b8:30:66:d4:
a0:ec:a4:fa:36:4f:b3:ec:08:6f:3c:69:42:5f:70:
04:8d:1b:0b:09:ed:ab:59:7a:d1:d6:12:db:6a:6a:
a0:93:d5:6a:0c:9b:dd:8c:a7:8a:60:0e:27:ae:4b:
03:b8:f7:de:6f:7e:92:3f:12:b0:1b:51:d6:9f:94:
c1:67:67:f7:9b:21:2f:fc:24:8f:89:ea:d6:db:f5:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:1F:82:08:DD:30:C6:15:1F:D1:F2:E9:1E:0D:C6:49:B4:E2:FB
X509v3 Authority Key Identifier:
keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:35:8d:97:b5:ea:9f:51:91:33:31:4b:53:1f:4e:50:24:
8c:dc:be:cb:c4:b6:b4:4b:89:9a:5d:7c:62:97:cc:a0:9e:c3:
6e:ee:2a:fe:92:25:c1:13:6e:a3:d2:d8:5a:d8:94:08:9e:85:
d6:b5:6c:7b:da:b4:45:fe:15:90:c2:f1:cc:aa:8e:41:01:f8:
29:96:7a:bb:b7:e0:34:5a:e0:7d:71:8f:2d:3d:1c:36:66:43:
0b:cb:d1:00:dd:95:9c:46:e3:4c:c7:35:84:20:34:13:5f:46:
5a:e2:e6:f9:47:29:fb:a3:a2:3c:fb:e9:65:85:2e:90:cf:7b:
b2:d6:0e:c5:b9:37:37:57:a2:ed:bd:79:08:8c:ba:40:0c:0c:
13:d5:0f:d0:60:28:85:c9:82:c7:a0:c0:ab:4d:87:0a:3c:b4:
ed:25:83:da:78:00:da:fa:04:f6:8c:ec:15:6b:57:8e:6b:69:
d4:14:aa:be:5f:91:dd:7c:84:59:d5:8f:4b:fe:90:16:28:ec:
f2:a7:b7:0a:05:19:41:fe:c6:e3:64:6d:c5:c5:94:e3:7c:95:
12:5f:39:08:87:b3:fb:ef:75:f7:75:27:1d:63:5a:69:96:fe:
18:bc:cd:8d:f1:87:41:05:f7:90:76:c1:ae:e7:e3:51:6f:ec:
82:1c:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:23 2025 by rpki-client