Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: 4gBlOvEuHsrWot0W0F0qnow6o+kb7fXI2CcKPjmrOSA=
Subject key identifier: A4:F0:FD:F0:BA:48:1D:67:91:EE:12:17:FF:FE:C1:D7:C5:A7:F1:34
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 3F84F546BCF574409841555305233D05B51204D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 01CC
Signing time: Tue 04 Nov 2025 18:31:25 +0000
Manifest this update: Tue 04 Nov 2025 18:26:25 +0000
Manifest next update: Wed 05 Nov 2025 19:32:25 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: Xc1YLBOVt4VkOLH+K+A0Pdi5ZhhXY0uCR9erOXGpJlc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:84:f5:46:bc:f5:74:40:98:41:55:53:05:23:3d:05:b5:12:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Nov 4 18:26:25 2025 GMT
Not After : Nov 5 19:32:25 2025 GMT
Subject: CN=A4F0FDF0BA481D6791EE1217FFFEC1D7C5A7F134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:9c:00:55:02:5a:f2:f2:dd:b2:20:9d:e5:
10:93:bb:b5:32:a0:23:06:81:b7:d0:a7:e1:98:95:
0a:e5:8b:77:59:4b:95:b0:99:e8:a1:b1:65:bb:2d:
56:d3:49:d2:f5:2e:4d:a3:90:dd:7d:9d:d3:97:11:
e9:44:e5:9b:13:1d:89:84:34:08:35:f5:a0:02:7d:
ab:17:5d:3f:cd:3c:eb:96:72:1f:df:e3:a2:ea:f6:
95:dc:06:27:56:3a:26:12:18:12:ba:05:24:ee:6b:
f3:89:12:23:b5:fc:37:ac:fe:f7:a0:42:d2:a6:fc:
f4:60:92:89:c2:0c:6a:e7:5a:96:91:92:e2:30:1f:
ac:1a:71:5d:74:24:d2:5e:ae:61:d2:74:44:45:c0:
a2:33:e2:66:b2:dd:fa:fc:a9:7f:ed:a8:22:c1:6e:
3c:2f:ce:7f:e1:81:a6:c0:59:5f:b9:fa:9a:24:fc:
c1:18:9f:83:b4:93:2f:83:e5:00:8c:07:54:9c:36:
6d:1f:d9:e7:34:ba:14:93:71:c5:0f:5b:cc:d7:a3:
c5:7f:93:63:d5:25:1f:ef:71:05:90:af:61:f9:6c:
fe:3f:b4:90:9b:ce:6e:55:d1:ff:b9:d2:a5:27:05:
9b:f0:27:0e:12:3e:e6:99:33:28:b9:61:09:d0:db:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F0:FD:F0:BA:48:1D:67:91:EE:12:17:FF:FE:C1:D7:C5:A7:F1:34
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0b:1c:4d:f3:fd:b3:86:90:e3:54:7a:9f:33:dc:2d:21:bc:
ee:ad:9c:7d:8b:27:dc:a3:f5:a4:5b:28:15:8b:c5:d4:ae:93:
aa:3d:d0:96:1a:2c:0a:41:40:3b:62:9c:dc:3b:85:62:e6:f0:
db:ea:62:3a:02:7e:0f:f2:19:b6:69:4d:60:8d:48:62:b6:64:
37:64:ea:4d:ce:31:91:2b:db:18:c4:56:1f:4e:c1:21:4a:1e:
00:05:36:7f:91:2b:73:c9:0d:db:c1:ee:46:bf:a6:76:8e:bf:
91:a0:af:9f:e9:18:95:44:cb:6a:14:31:b7:5c:02:5d:cc:f8:
80:0e:3a:c8:8b:21:db:9d:88:47:2c:b5:b8:7c:8f:18:d1:67:
63:01:26:15:4a:8b:ae:51:7f:ee:48:b8:d3:01:13:76:2d:01:
6b:5a:47:5a:3e:6e:53:cd:cd:47:ea:2e:eb:47:ae:e3:92:d1:
53:8c:a7:a1:d1:48:27:58:98:20:b7:ae:bc:94:75:aa:52:a3:
e3:6f:0d:f8:14:d1:fd:30:6c:f6:70:03:b1:33:61:65:b9:78:
ae:ca:0a:79:9c:04:b3:dd:98:c2:50:f2:a9:58:6f:9e:e4:80:
8c:de:2a:1d:8d:22:97:b9:70:75:d9:1a:37:f1:47:ce:51:d4:
b6:27:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:21 2025 by rpki-client