Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: tP1BSK1LknIzIJ72zOV+0w7NqV1qZ4c/y3WM/U9/mjQ=
Subject key identifier: AA:7D:A2:3B:80:16:8B:70:B5:C5:1D:97:C6:7C:62:C3:0B:06:4F:62
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 0199FC8F5C40CA8D25AFEDBFA93E8C905CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 06E7
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: XYjAPRFqnPSJTAHHo8ilsSKkr8A2v9j+He5dSsEh24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5c:40:ca:8d:25:af:ed:bf:a9:3e:8c:90:5c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=aa7da23b80168b70b5c51d97c67c62c30b064f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:bc:4b:74:e0:fa:87:f7:da:e4:e6:3b:0d:
2b:af:23:38:96:23:a9:d5:38:7f:2e:a8:93:29:3e:
a2:ed:e0:a6:a2:72:cb:c9:7c:d6:3e:13:12:dc:02:
f9:e6:98:82:ca:03:26:33:1a:6c:99:dc:3f:62:71:
87:cd:10:b1:e3:1e:39:a5:49:92:9e:e3:2f:fc:54:
e8:24:5d:50:19:fd:2f:4a:02:cb:cd:27:61:b6:06:
b0:00:a2:73:ee:0b:ba:76:30:f5:bd:83:3b:7c:b3:
95:94:d1:47:19:df:97:1b:4c:be:97:8b:19:17:a1:
76:3e:89:9d:d5:ff:0b:8b:84:58:69:46:3a:0c:cf:
55:4e:6b:38:89:5b:d5:56:75:3c:e6:2a:eb:2a:c8:
de:16:94:56:0f:2e:6b:b6:27:4c:d6:c2:ec:9a:af:
4c:01:40:b2:6a:1a:8e:69:95:73:cf:8f:c6:d2:bd:
bb:1e:49:65:f0:b1:7b:1b:d2:1b:ab:0c:ee:26:52:
3d:eb:46:3c:31:86:7f:35:18:fc:e5:5d:89:45:5c:
b2:a9:83:e7:2e:66:d0:d3:06:3a:c2:6b:03:69:e1:
3b:39:cd:15:9a:d2:3d:94:c9:60:5b:67:35:72:c4:
40:ee:11:b2:c3:32:02:ab:3b:29:f8:db:26:c6:6f:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7D:A2:3B:80:16:8B:70:B5:C5:1D:97:C6:7C:62:C3:0B:06:4F:62
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:04:1d:5a:cb:5d:6c:a8:fc:75:62:4e:d6:c5:d3:28:0d:
9c:ee:1d:d4:f0:16:69:46:9d:0b:7d:b1:b7:1a:91:21:9b:07:
9f:89:21:d6:87:b3:49:e1:fb:26:ad:ad:1b:ec:7a:b0:db:85:
94:93:e1:85:0d:01:bb:2c:12:ff:9a:ce:af:d9:5a:2a:e2:2d:
b8:61:ff:9f:78:55:ac:1f:ea:fc:b8:77:be:c0:0b:dc:6d:6f:
43:ec:e0:b3:9f:2a:52:f8:43:1c:9c:90:80:ca:8c:de:3a:c9:
f2:51:59:94:dd:92:f6:4e:56:05:84:d0:1d:d4:7c:43:81:a2:
38:d7:0e:ab:d3:db:2c:94:fc:69:96:cc:8a:31:b4:87:d4:24:
4e:b9:17:d9:fa:5e:da:b5:b8:91:05:3a:50:fe:57:fd:77:23:
f0:d2:43:df:c8:87:c4:a4:6a:56:b3:5d:54:3b:73:94:1a:40:
b1:71:95:f8:84:2c:f0:7b:9e:17:ee:7f:16:6b:01:bd:3f:65:
eb:76:e2:b3:89:f1:1e:e6:d3:85:e5:13:d2:b5:c8:1e:0a:b4:
a5:e0:12:ee:de:f5:a3:6a:cb:bf:e4:d2:eb:01:b7:fd:1d:9e:
ea:2b:98:28:66:8f:c4:4b:2f:c7:32:8c:2b:8b:b1:af:6b:cf:
dd:56:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:02 2025 by rpki-client