Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: dwCPW/zuhQRGiLeJ1R7BRyXFjz0xfha908NbZLhU664=
Subject key identifier: 97:A2:EA:5D:C6:10:50:C8:D3:25:44:86:8D:8B:5B:59:1B:D8:54:F2
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 019A02FEBB1745F0A60460268EE2401036A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 1445
Signing time: Mon 20 Oct 2025 19:00:39 +0000
Manifest this update: Mon 20 Oct 2025 19:00:39 +0000
Manifest next update: Tue 21 Oct 2025 19:00:39 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: sHXYPdp1LAkz2IeLiSc5NXL+a8xgHag9MaaljzwHBmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:bb:17:45:f0:a6:04:60:26:8e:e2:40:10:36:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Oct 20 19:00:39 2025 GMT
Not After : Oct 21 19:00:39 2025 GMT
Subject: CN=97a2ea5dc61050c8d32544868d8b5b591bd854f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:51:63:80:37:db:42:cf:64:3a:03:cb:f9:
a1:f0:1c:16:75:d1:bb:df:bf:df:bb:bc:f6:fb:2d:
c2:93:b3:0e:6a:ff:c1:1c:8b:81:0f:4e:d4:73:65:
82:30:26:62:2e:f2:5a:aa:58:7a:b3:52:de:3c:25:
01:39:39:ec:74:88:18:f7:c4:ef:cc:7d:0c:de:15:
1a:9c:e2:4a:09:7f:db:72:49:1c:49:ea:f1:92:b6:
60:28:a5:d1:1c:0f:f9:6b:6f:6f:bc:33:44:18:e3:
3b:d3:83:02:58:d9:99:10:0d:a4:76:ef:ed:fe:4a:
4b:61:ec:91:59:a5:e3:c5:ea:29:54:b4:a5:eb:10:
21:64:85:c5:c8:af:74:c9:87:a5:af:00:bd:c4:6e:
35:ca:81:2f:53:55:36:10:15:43:d6:68:4a:24:29:
7f:56:94:65:03:c8:6e:49:f3:88:53:d1:29:59:fa:
0a:d9:fa:1c:e0:2b:01:89:82:8d:9e:e7:b4:28:3b:
ae:40:c0:bb:17:31:38:a4:46:2a:61:bc:a5:80:58:
8e:dc:c3:18:17:ec:fd:9b:b4:16:5b:19:c5:90:47:
5c:b6:4b:aa:c8:6b:16:5a:35:bc:25:70:88:5f:6e:
e6:1a:66:c8:53:e0:ff:f6:2f:50:20:dc:65:28:96:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:EA:5D:C6:10:50:C8:D3:25:44:86:8D:8B:5B:59:1B:D8:54:F2
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:a5:af:81:5c:14:48:8b:34:ea:3f:eb:e0:dd:f0:34:4d:
3b:0d:e2:c1:bc:00:42:6d:e6:0e:2e:1c:c0:51:71:7a:e3:db:
cc:25:48:db:51:ff:0f:8b:8c:fd:1f:11:ce:64:84:11:97:18:
38:7f:f1:39:6c:83:85:52:50:24:e4:54:d3:b8:13:7f:32:14:
a7:fa:ef:31:02:e6:eb:98:dd:04:80:38:99:12:19:66:4a:6e:
00:8a:12:a4:3e:11:37:00:a7:a4:f5:36:c4:91:83:83:14:17:
d8:c4:c2:de:a9:9d:b8:7e:c6:8d:02:42:13:6f:dd:b4:fc:b1:
a4:74:d7:b0:15:de:6b:4d:b6:33:62:bd:b7:51:d8:73:1f:da:
e4:40:ab:0b:e9:32:a5:0b:57:cb:4d:55:7f:cb:93:28:2b:5e:
03:e4:a8:a8:7b:65:5e:e0:34:94:63:04:ed:ec:74:21:9c:0b:
ea:3b:22:e9:c2:b0:de:21:b8:c0:d0:12:7c:60:76:25:0e:cd:
1f:62:a4:f3:51:91:fa:57:60:ca:4b:8e:2b:3e:94:f4:48:ba:
8e:ae:6b:c0:04:0c:c6:27:91:b9:ab:be:82:ca:ab:bc:fe:cf:
35:46:d5:05:24:0a:5e:44:bb:c7:2b:ed:97:c7:63:d3:16:80:
fd:ec:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:27 2025 by rpki-client