Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: gISdAy+QGr1P6tY7+v5/o7fs/EI4CT74bq+I7jUiY88=
Subject key identifier: AE:87:CE:0C:86:7D:A8:60:C7:B4:45:8A:BF:EB:FC:9A:32:73:1A:14
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 019A4D742EB9259726A8F9A77299A6B92721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 0750
Signing time: Tue 04 Nov 2025 06:00:50 +0000
Manifest this update: Tue 04 Nov 2025 06:00:50 +0000
Manifest next update: Wed 05 Nov 2025 06:00:50 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: zmzb6UF9D+dtmQHOd7rWaWItEhHjc+7XB3TJ9EtgbJ4=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2e:b9:25:97:26:a8:f9:a7:72:99:a6:b9:27:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Nov 4 06:00:50 2025 GMT
Not After : Nov 5 06:00:50 2025 GMT
Subject: CN=ae87ce0c867da860c7b4458abfebfc9a32731a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:21:af:ec:0b:85:9b:82:e3:12:86:b1:da:
2f:b9:d6:ac:4d:0b:49:0e:c7:70:11:20:d2:60:0c:
2c:a7:14:47:d4:8f:56:e1:ce:c5:99:3f:bb:cc:1a:
e1:18:fc:08:7f:c2:36:0e:39:1a:e5:6d:52:44:68:
d3:2c:a5:51:e3:fc:39:98:d5:95:66:59:16:1d:fb:
e7:5f:5e:13:29:17:a1:8d:72:9f:eb:c2:c5:cd:0e:
51:a4:c3:f9:29:72:e8:86:44:1d:c8:0b:cb:89:92:
55:f5:ad:16:74:b4:67:72:46:e1:6c:b7:d1:13:b4:
b2:cb:be:87:9f:c3:3a:f9:db:d5:9f:cf:3d:9d:4b:
db:51:ef:1a:97:de:13:cd:08:b3:cf:c5:ac:63:0f:
6e:6d:6e:7d:49:42:96:87:96:1e:18:70:f8:84:65:
56:bc:3f:a2:9a:23:72:30:d2:6d:a6:34:1b:3a:9b:
40:f7:05:f3:e1:84:6e:1f:dc:b1:12:c3:a0:9a:a5:
24:80:83:6a:96:65:d2:20:5a:b3:c7:bb:8b:9c:4d:
e2:15:d9:ed:b5:d7:6f:cf:83:6f:94:c6:c6:91:e9:
e0:de:af:fe:df:46:cd:6d:de:c2:6a:b5:fb:66:98:
41:d7:70:1b:ec:1d:46:f4:45:27:7f:55:3a:e1:54:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:CE:0C:86:7D:A8:60:C7:B4:45:8A:BF:EB:FC:9A:32:73:1A:14
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ea:a2:6a:46:24:3f:c3:40:f6:39:0c:1c:88:f0:55:30:d0:
68:cf:c1:a8:5a:b7:16:67:a8:e7:ee:2c:b6:38:0d:75:e5:ad:
11:50:11:54:93:37:48:23:75:98:6f:35:9c:32:3d:e2:1f:41:
d7:fe:04:c8:cf:c9:80:3f:2b:3c:a2:d3:65:d9:5e:ba:dc:2b:
cd:f7:a9:5a:eb:f9:60:a9:3b:72:e2:67:f2:b1:af:78:71:00:
60:bd:51:8e:4d:5a:1e:39:a9:dd:e7:9e:24:dd:37:cf:31:87:
79:4d:a7:89:3a:38:68:29:d8:53:2a:4d:a4:e2:fa:52:3c:46:
01:04:29:54:c0:bf:e8:07:f9:d0:12:aa:fb:17:46:4b:55:f1:
a8:9b:c0:68:f5:80:9b:b5:30:2f:78:b0:00:10:d8:85:c1:1d:
4d:bc:22:13:01:7e:b9:27:0a:45:84:5f:67:57:73:83:af:cd:
4d:3a:64:5c:c1:3e:79:c4:9b:dc:f4:df:9c:d9:ea:6d:24:f3:
29:7e:73:f9:34:c2:b1:ef:be:a7:68:03:88:42:f3:15:95:ec:
d7:02:a1:93:1c:b4:3f:46:a2:0f:2f:02:7b:e6:cc:4a:a1:8e:
8e:ce:7a:df:69:34:ef:49:7d:16:a9:68:0d:9e:d0:3e:cc:83:
59:15:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:45 2025 by rpki-client