Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: JJxlxublYPvlSyKBAJuHWLL2+aSyNoq8GqHG4stTxAA=
Subject key identifier: E2:67:F2:05:18:74:5D:D0:42:D5:C6:D0:9F:BD:73:D6:BC:9B:5C:C3
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 019A4E4FC893A24ECD65FC685BF1944067C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 0607
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: 9zQDSC4A0He53VBZNyfhextAi2rejzHtptXLJiSxFwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c8:93:a2:4e:cd:65:fc:68:5b:f1:94:40:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=e267f20518745dd042d5c6d09fbd73d6bc9b5cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:f7:d5:0b:03:de:91:8e:94:01:76:23:f5:
98:a1:01:50:cb:52:e2:b5:f9:9d:2f:5c:ce:af:c8:
75:94:bd:a4:76:e4:5e:eb:85:dc:5d:39:0d:ec:9c:
f7:42:9b:ee:ec:e3:e5:d3:ad:9f:5d:f7:3f:44:af:
24:e4:0c:02:34:60:35:d8:7c:b8:8f:95:7e:4d:e4:
8a:6e:7c:e1:51:99:5e:70:a0:e2:83:64:d4:9e:2e:
d9:b2:e2:2d:5d:66:88:39:c1:92:cf:c9:ba:60:1d:
13:44:d5:d1:48:f2:fe:8f:76:b8:42:0e:4d:02:52:
06:96:0d:22:a2:e3:ce:99:fd:50:a7:21:12:a3:df:
17:6c:d9:d1:7d:16:68:d1:89:72:c4:7a:1d:79:12:
dc:5b:19:c6:e5:4d:27:bc:b9:09:8e:d1:b4:e3:1e:
d9:20:74:f9:0a:ed:d7:5f:c3:d3:bb:cc:63:21:82:
87:73:72:3a:a4:c5:a0:8a:9a:09:a4:c5:1c:eb:07:
9c:f6:3e:18:36:70:b1:75:8c:b2:5e:7d:b4:47:e4:
f7:ed:1a:a8:8d:b6:93:9c:78:1f:d0:af:de:b0:f1:
77:9e:52:e1:4c:7a:b9:68:57:d5:b2:68:a1:63:cb:
7e:12:ae:e1:3d:f3:c7:13:49:c7:09:c5:81:c6:81:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:F2:05:18:74:5D:D0:42:D5:C6:D0:9F:BD:73:D6:BC:9B:5C:C3
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9c:18:1b:08:47:ae:ef:de:a6:84:b7:84:2a:77:c0:2b:cc:
6e:a5:91:b9:37:87:33:78:88:53:4b:b6:74:b0:d7:9b:81:d7:
c1:c8:1b:44:88:8f:d4:21:65:62:18:ba:e2:30:18:b0:e7:45:
0e:4d:32:e6:2b:e2:61:9c:88:50:62:20:88:18:90:0f:2e:f6:
99:e0:7b:17:21:53:e4:9a:8e:4f:e5:e2:f6:52:17:8c:77:76:
48:da:1f:87:aa:0a:96:ab:9a:af:57:95:a4:62:98:c4:a1:6d:
d9:5f:99:bf:e4:0d:ac:01:a0:2e:fc:fe:dc:c5:94:ac:9c:26:
82:78:e9:26:17:8a:d5:50:a7:83:ba:5a:d0:96:86:b5:14:5e:
40:5a:ed:09:d8:ae:0f:0f:0d:0a:19:15:fb:bf:83:70:f0:b4:
6f:6f:bb:35:61:ce:9c:69:af:a3:4f:63:31:3b:2e:82:f7:34:
fa:23:61:ab:23:53:64:24:4e:e2:28:c5:34:09:fe:c6:ad:6c:
1d:29:84:2f:1a:57:73:c0:55:3b:57:5c:43:8a:d2:79:fa:1b:
96:ca:07:f7:ee:47:32:32:53:11:7c:18:58:ad:52:23:21:7c:
f6:6e:f8:66:3f:a9:79:cb:2a:71:51:6b:fe:04:59:0a:46:ac:
21:1c:b0:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8iTok7NZfxoW/GUQGfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2M3MTAwMDY0NTBjZGU3NGE0MTlhNzE0MzI5OGU1NTA2
NmYyNmMwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
EyhlMjY3ZjIwNTE4NzQ1ZGQwNDJkNWM2ZDA5ZmJkNzNkNmJjOWI1Y2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhX31QsD3pGOlAF2I/WYoQFQy1Li
tfmdL1zOr8h1lL2kduRe64XcXTkN7Jz3Qpvu7OPl062fXfc/RK8k5AwCNGA12Hy4
j5V+TeSKbnzhUZlecKDig2TUni7ZsuItXWaIOcGSz8m6YB0TRNXRSPL+j3a4Qg5N
AlIGlg0iouPOmf1QpyESo98XbNnRfRZo0YlyxHodeRLcWxnG5U0nvLkJjtG04x7Z
IHT5Cu3XX8PTu8xjIYKHc3I6pMWgipoJpMUc6wec9j4YNnCxdYyyXn20R+T37Rqo
jbaTnHgf0K/esPF3nlLhTHq5aFfVsmihY8t+Eq7hPfPHE0nHCcWBxoEUHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJn8gUYdF3QQtXG0J+9c9a8m1zDMB8GA1UdIwQY
MBaAFO88cQAGRQzedKQZpxQymOVQZvJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAt
NGRiZDUyZDQ1NDEwLzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lYjE2ODMtNzgzNS00M2Y5LTg5NDAtNGRiZDUyZDQ1NDEw
LzEvN3p4eEFBWkZETjUwcEJtbkZES1k1VkJtOG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJwYGwhH
ru/epoS3hCp3wCvMbqWRuTeHM3iIU0u2dLDXm4HXwcgbRIiP1CFlYhi64jAYsOdF
Dk0y5iviYZyIUGIgiBiQDy72meB7FyFT5JqOT+Xi9lIXjHd2SNofh6oKlquar1eV
pGKYxKFt2V+Zv+QNrAGgLvz+3MWUrJwmgnjpJheK1VCng7pa0JaGtRReQFrtCdiu
Dw8NChkV+7+DcPC0b2+7NWHOnGmvo09jMTsugvc0+iNhqyNTZCRO4ijFNAn+xq1s
HSmELxpXc8BVO1dcQ4rSefoblsoH9+5HMjJTEXwYWK1SIyF89m74Zj+pecsqcVFr
/gRZCkasIRywqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:21 2025 by rpki-client