Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
File: 7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json)
Hash identifier: 4mICPSpKk/4LVSgLUTGdOSvTYFMD0roMW6+4LmZQ+ko=
Subject key identifier: 53:33:C5:13:18:37:36:81:92:EC:34:9D:DE:08:EE:DB:22:1E:4B:EC
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial: 019A4F6291C93A4A9228AFEAC2C53E2A4E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:51 +0000
Manifest this update: Tue 04 Nov 2025 15:00:51 +0000
Manifest next update: Wed 05 Nov 2025 15:00:51 +0000
Files and hashes: 1: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: 1ag0Y+oikKD29rx/qV1+BOtPY/2V/7pKWhTukmimIfU=)
2: FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa (hash: V3224FLOv1W7X3uBW6dltktQIsCoHudHe1QUTyJjYBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:91:c9:3a:4a:92:28:af:ea:c2:c5:3e:2a:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
Validity
Not Before: Nov 4 15:00:51 2025 GMT
Not After : Nov 5 15:00:51 2025 GMT
Subject: CN=5333c5131837368192ec349dde08eedb221e4bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:db:f7:3e:45:7d:82:57:94:0d:4e:ea:43:
cb:df:33:cd:15:cb:3a:28:5a:db:f1:bc:4a:43:f6:
c6:d1:0f:52:40:84:aa:32:94:78:62:cd:45:0c:f4:
f6:fa:93:96:fe:4c:64:e4:94:3b:93:bd:11:92:46:
00:b7:59:92:6c:3a:4d:87:ce:17:e5:63:24:0b:7d:
54:e6:2d:f7:d2:78:37:42:91:72:5e:8b:70:83:00:
b4:87:70:ed:1c:13:f2:bb:b0:2c:7e:5d:7b:46:a2:
2c:c0:95:4a:14:5b:f3:12:5c:8e:9d:66:9b:10:b3:
33:2a:0c:13:a2:c0:b6:8d:80:80:05:f1:5e:35:c2:
4c:cb:d6:21:e6:38:65:35:45:83:e5:64:68:28:19:
72:f6:69:0e:75:f6:2d:4c:dc:c3:5b:41:bf:b5:89:
11:b7:95:eb:1b:da:23:e7:22:03:45:23:7d:34:db:
c2:ea:2c:b7:18:5c:b8:cf:54:40:fd:ec:c8:84:24:
9f:10:cf:7c:70:d5:95:ce:a0:2e:31:af:d0:34:f2:
6b:b6:cc:bd:05:8e:5a:75:35:ed:0a:99:c7:9e:ac:
9a:98:93:c5:9e:b2:d1:4f:aa:87:c2:b0:d4:c0:1b:
c3:6d:7e:4e:ec:b0:d2:6f:c8:43:1f:eb:de:7a:14:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:33:C5:13:18:37:36:81:92:EC:34:9D:DE:08:EE:DB:22:1E:4B:EC
X509v3 Authority Key Identifier:
keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:cb:98:c9:81:a8:36:99:91:b1:b4:d5:10:cc:5f:66:46:
b5:67:18:61:00:2f:51:e3:88:00:58:61:86:2d:4b:27:48:a0:
35:cd:a0:f1:7f:28:4d:ec:03:8b:2b:9f:5f:98:98:31:4e:ed:
57:5f:15:76:0f:04:25:c0:50:5f:93:2a:74:1d:7a:b7:70:3c:
55:f2:b0:f3:b6:6b:93:e2:9b:fe:7c:89:94:0f:65:3c:3d:ae:
b3:34:63:e9:70:29:95:d8:bf:10:7d:17:31:f7:4b:e0:41:2a:
a1:e3:42:a3:4a:3c:ea:46:60:a2:f2:09:63:c5:a5:fc:7e:ba:
9f:d2:c0:45:ab:50:e3:8b:d0:79:b1:78:b4:08:3f:4d:2e:a3:
00:08:9c:df:9e:f2:5f:97:89:33:31:c5:fd:e2:31:37:04:c1:
ce:41:c2:70:3f:aa:95:86:df:3a:1c:e3:76:d1:b7:ad:17:d3:
78:9a:46:26:c6:dd:74:18:4d:63:3a:69:78:d3:22:f2:fb:3a:
eb:50:4f:2d:bd:7f:9c:d3:f3:02:11:67:41:89:35:ed:30:45:
f0:cf:11:c2:d2:c5:4e:2b:24:4f:82:5d:7d:f6:6e:49:aa:69:
4d:fc:23:a6:d3:62:20:52:44:d3:5c:50:75:64:49:e1:ba:07:
61:07:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:44 2025 by rpki-client