
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File:                     7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier:          dG0GwVQPRKgimu6NQWtEL8HPOnDwziQiNn30tMQpAHQ=
Subject key identifier:   C3:A7:50:A7:84:43:5C:73:18:F7:AA:56:05:08:7D:23:62:8D:BB:15
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer:       /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial:       019A4EF5872429C65ECC44A6B5995AC8682C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number:          0A6B
Signing time:             Tue 04 Nov 2025 13:01:45 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:45 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:45 +0000
Files and hashes:         1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: BBSFtzgYzGCEJtS/CjIh+H7xkE02APG4ZFbtlCs7uHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:87:24:29:c6:5e:cc:44:a6:b5:99:5a:c8:68:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
        Validity
            Not Before: Nov  4 13:01:45 2025 GMT
            Not After : Nov  5 13:01:45 2025 GMT
        Subject: CN=c3a750a784435c7318f7aa5605087d23628dbb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:d7:88:6c:19:35:b2:5b:fe:17:a0:5e:9e:
                    6a:93:b0:eb:d1:fb:ee:a6:1d:e4:7f:0f:be:84:1f:
                    5a:9c:b8:b6:57:11:2e:30:96:7e:14:ad:dc:87:8e:
                    d5:6a:9a:09:73:12:cd:3f:43:4a:3b:ed:45:e7:6a:
                    aa:68:d0:df:47:5a:79:84:fd:ee:13:b6:61:be:3e:
                    5c:57:30:71:ac:f1:f5:3f:06:f0:f0:83:ff:fb:d7:
                    e7:f6:d9:85:91:ab:ea:e9:c5:68:ad:de:61:97:a4:
                    5f:0c:9d:26:61:d5:a3:12:d2:f3:f9:73:50:d0:b6:
                    ba:2b:7d:b0:5e:49:5a:46:94:61:de:b9:bc:28:da:
                    74:53:ee:bd:4e:ea:12:4c:04:99:3f:8d:58:a8:9d:
                    1c:53:a1:90:0d:e5:86:c9:a7:59:f7:56:f3:d2:0b:
                    19:2d:e2:c9:a1:17:7b:48:05:5a:18:55:6c:f8:32:
                    2a:7e:10:16:09:98:32:72:13:d7:3d:3e:b4:a4:79:
                    e7:22:19:3f:06:12:4a:d7:fc:2e:2d:0d:12:c6:a0:
                    18:89:fd:37:27:2d:75:33:48:65:10:10:31:50:00:
                    04:22:7e:04:0d:07:d4:74:a2:78:23:39:da:b7:6a:
                    12:80:eb:7f:37:3f:e5:4e:8d:24:e6:9f:d4:be:a8:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A7:50:A7:84:43:5C:73:18:F7:AA:56:05:08:7D:23:62:8D:BB:15
            X509v3 Authority Key Identifier:
                keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         72:c0:08:f0:8b:1f:2e:5b:87:08:44:47:f1:50:fb:59:f2:aa:
         e4:14:6a:5f:d4:02:73:a0:67:d8:7d:80:94:73:5e:7b:6e:60:
         2f:d9:72:54:5d:ba:01:6d:c8:76:f3:0e:dd:16:50:f4:a8:6d:
         a6:0c:f4:f5:45:9b:f5:45:ba:45:09:e4:e1:37:18:dc:6c:2e:
         3a:52:f9:d0:5f:fb:dc:63:5c:e1:6d:23:39:79:66:50:29:27:
         fc:35:44:03:8c:81:a6:60:51:cf:a4:ed:25:b8:01:f9:31:e0:
         8e:25:0c:87:6f:90:13:f3:d0:ee:a5:8f:a4:1b:2b:18:a4:9f:
         63:fc:15:50:76:6d:c4:22:c2:37:2b:67:d2:12:9b:79:d0:49:
         e4:dd:c7:0c:e2:76:cb:7f:71:65:89:e0:be:81:f3:e7:ac:55:
         52:52:da:5b:d0:92:8a:70:dd:dd:92:69:ee:0d:56:99:3a:60:
         77:1b:be:22:0c:d5:ae:d8:b5:7c:d8:54:64:8d:87:2e:5e:fb:
         f2:6d:24:3f:bd:de:63:63:02:b2:29:34:82:e2:0f:3f:de:90:
         af:1b:a9:a8:0e:00:64:a1:de:23:24:da:cc:ca:af:10:41:d0:
         eb:7f:0c:12:46:e3:18:44:68:ca:70:e1:8f:d9:01:c2:af:f5:
         da:fd:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:46:46 2025 by rpki-client