Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: wa4Bg5JCM/hPIsRwYFFSa+zAaufVh6Nd4/q0tsJAnQY=
Subject key identifier: 83:3C:EB:F8:35:DC:0B:7A:C4:1E:0C:0A:40:29:8A:9E:83:E0:AB:72
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 019A4EF5E490454FA40EF147E41847580142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 10D5
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: Upl43SRt3EZy6eS8PNu6CYtJl7HRAb4ioBqjJfmYy4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e4:90:45:4f:a4:0e:f1:47:e4:18:47:58:01:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=833cebf835dc0b7ac41e0c0a40298a9e83e0ab72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:28:43:f9:95:8e:97:08:7a:cf:10:62:c1:
19:72:c8:f0:23:97:1f:97:4f:e9:e4:17:65:a2:27:
5e:52:b8:88:c4:4c:e2:05:ef:61:8f:76:fe:eb:6d:
dd:b3:d7:14:aa:82:52:55:4d:a3:52:da:cf:30:14:
31:07:59:71:29:2e:29:e1:21:e5:c4:2b:7f:1a:28:
57:2c:e3:03:41:07:76:24:2c:92:b1:37:3c:fe:5b:
82:95:b2:3c:d7:87:7d:7a:d7:97:f6:92:01:92:ea:
c5:c1:d9:38:57:45:24:f2:7f:d2:1f:34:f6:b9:99:
e4:dc:bc:d4:5b:f6:e5:d0:b1:86:c8:d8:84:2b:a4:
a2:a8:35:b5:74:79:32:d2:02:88:ed:d5:8f:b2:78:
13:8a:5b:6d:f7:a1:f7:c6:4e:cc:22:a6:a7:6b:b5:
c1:de:41:71:8a:f1:fd:98:9b:66:9e:c7:78:df:79:
33:34:d3:22:91:4d:8d:99:1d:1f:d9:e9:56:d8:90:
6a:9f:56:81:d4:38:ae:3a:2c:6b:4e:2c:0e:66:33:
eb:77:5c:86:40:62:58:f8:df:3a:92:be:50:3e:4d:
30:40:ef:36:71:78:84:42:97:a2:57:b2:09:bf:97:
cb:17:06:d3:33:54:dc:f3:48:d0:b5:05:10:27:6f:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3C:EB:F8:35:DC:0B:7A:C4:1E:0C:0A:40:29:8A:9E:83:E0:AB:72
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1f:41:49:74:ad:5a:55:b9:9d:06:21:e1:4d:e5:62:4f:86:
3c:f4:fc:24:03:e9:99:2c:62:ab:ff:b5:08:24:41:8a:50:62:
22:0a:67:b8:81:1e:a5:20:d5:05:9d:93:e6:90:20:dd:e0:fa:
5c:4d:56:bf:56:5a:0a:22:d4:65:71:7a:cf:fa:b2:aa:ff:36:
04:7a:f2:28:3d:25:06:ec:60:21:21:14:32:61:bf:73:dd:fd:
7d:68:0d:83:bb:36:9f:e9:93:db:10:f5:7e:8c:3d:be:70:f4:
a4:d6:e0:f8:91:b9:11:63:05:3e:7f:8e:68:46:85:ec:a9:9c:
28:3d:50:4b:f0:8b:22:0b:86:dd:42:ec:ac:a6:d8:af:1c:a2:
cd:2d:d4:85:d3:3f:90:0c:00:ab:7f:79:15:7a:b3:36:92:93:
57:9f:b9:4e:0d:0e:f3:c7:e0:58:39:88:f9:e0:09:f4:92:bb:
c5:9d:81:dc:06:da:84:61:c1:1d:36:e5:89:2d:3c:d2:f2:22:
41:5d:e8:54:7a:e9:3a:48:a3:d6:86:72:66:f5:e1:c3:83:03:
f0:70:b9:e3:0e:fa:a3:bb:f7:d5:70:0a:5b:fa:5f:23:97:0b:
ec:31:0c:98:7e:22:bc:51:09:1f:a3:f4:01:ee:c7:42:2c:ff:
22:4f:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:06 2025 by rpki-client