Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: aLpSOBRgYtcoz/PPlGAWozL2RSA4Z7mhFWdKbYytg78=
Subject key identifier: 6D:91:CB:F5:98:9C:15:86:4B:8A:BB:25:A4:FA:C7:C3:8C:38:3C:80
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 0199FCC69551BB28A28964C62A258AD9BC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 0703
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: BVd7Sr2IDVIHIiNg21TcaJlP31IcugkeNSwIe0ljWLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:95:51:bb:28:a2:89:64:c6:2a:25:8a:d9:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=6d91cbf5989c15864b8abb25a4fac7c38c383c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:2e:34:6c:ae:1d:00:ba:65:cf:59:cf:37:
09:31:58:64:80:9b:39:3a:15:0b:fa:13:a7:dd:68:
b1:3e:6a:5b:a2:c7:de:88:4f:39:62:75:1e:0f:a4:
84:3e:5b:88:e5:fa:6e:5e:5a:6a:a6:9d:17:75:ec:
a6:17:51:81:61:55:2a:c4:c0:9a:7e:e7:32:56:82:
88:2f:95:c1:e1:c0:1d:cd:f3:70:58:96:b7:c7:68:
fb:a2:bc:cf:c0:81:93:c3:72:6b:f3:b3:4b:74:d1:
7c:fc:6f:5d:24:0f:ef:88:2d:81:d1:c8:30:bf:b9:
e1:45:26:7b:c9:3f:7f:98:6c:30:e7:83:0e:03:e9:
f7:f2:b4:70:56:ce:9d:f0:89:14:d3:54:bd:9e:85:
de:7f:59:d2:88:bd:ec:b4:c0:2c:ea:8c:e6:f9:88:
e0:7b:f1:83:ef:d7:5a:03:d7:11:f4:3c:93:13:d8:
b6:86:db:cf:b0:df:65:e7:8d:98:53:fe:7c:25:9f:
dc:9c:52:6f:e9:ee:a3:b4:90:cf:d4:8a:9f:7f:6d:
5b:40:13:ef:95:5e:52:d0:2e:51:52:a5:60:d7:bd:
5a:49:fe:83:1f:e3:47:be:52:95:8c:c2:da:69:19:
ca:b9:2c:d0:13:79:22:8a:6c:e3:b6:2b:9e:43:42:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:CB:F5:98:9C:15:86:4B:8A:BB:25:A4:FA:C7:C3:8C:38:3C:80
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f2:6f:d6:da:7f:08:08:e6:05:70:19:f8:54:87:d9:eb:26:
d6:4e:2b:55:6b:ff:38:df:ae:c6:55:88:b9:5b:2d:41:6c:05:
3c:b1:85:2b:09:e5:d7:2d:f3:f3:8f:a6:78:27:f6:87:b9:fb:
ce:2c:b6:7b:27:07:3e:88:22:2f:79:dc:51:23:e0:56:14:60:
91:6a:e1:f6:2e:05:1b:27:80:73:f2:b7:03:d5:6f:42:79:44:
f6:6e:c3:85:d9:26:d7:90:e7:ff:17:47:7a:db:75:86:26:dc:
1d:e3:93:d1:4f:47:f2:8e:da:a8:9c:cf:d3:c2:32:1b:53:6b:
a5:5d:6a:1d:99:5b:38:58:db:c9:8a:a0:fb:03:0a:9c:04:68:
a9:0d:6b:80:93:61:2a:ea:0f:2a:74:42:f5:b2:5f:92:c2:9f:
8e:cd:1d:e9:5c:56:e5:9d:1e:d9:34:ac:21:b6:6c:96:ea:cb:
f0:94:7b:56:af:28:1e:56:38:bc:31:49:aa:1a:e4:84:27:98:
42:9d:73:d5:cb:5d:e3:bd:1f:cc:b9:46:c6:71:68:93:9a:7d:
74:72:e9:50:e8:4f:3a:46:87:b9:4a:d1:e1:b5:cf:f3:69:ac:
64:85:27:6e:57:0d:47:11:56:24:b7:c2:82:f3:8a:61:72:8b:
ba:d3:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:55 2025 by rpki-client