Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: L9mIJZxBaSbbIjmTaffjhy1rlSTdWKtkZUGpOP35vxA=
Subject key identifier: A5:CF:D7:88:EE:C6:16:BB:8B:AF:01:E2:87:53:72:4C:D0:43:50:20
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 0199FBEBE09A40D72D8304B0F2D779762E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 1394
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: KSD8V3lwGlfyR2KsDwWuNRco+6RcXd7POS1e8gM3tlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e0:9a:40:d7:2d:83:04:b0:f2:d7:79:76:2e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=a5cfd788eec616bb8baf01e28753724cd0435020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:8a:ae:cb:25:d7:f3:53:f4:ed:eb:2b:aa:
43:92:d7:46:a7:6a:bb:1c:ec:93:b9:f7:45:f1:97:
c5:dd:67:08:8a:c7:df:2b:83:1f:8e:ba:51:5a:e1:
a2:de:eb:58:0e:cd:03:78:16:91:96:fd:fe:1f:1f:
9d:6f:32:2b:4b:11:48:e1:f6:98:78:74:8b:3b:da:
df:98:00:83:80:64:6e:71:e2:9d:14:41:3c:f6:f4:
a8:4a:97:58:01:e1:fd:fb:2b:8c:25:52:15:35:b5:
c5:96:d5:b1:71:39:db:75:6e:7d:f8:87:f6:39:9e:
47:f1:43:0b:11:98:45:e1:b4:98:df:c2:61:1d:2f:
ec:49:76:74:17:95:b5:5f:1f:65:e2:77:2b:9b:e2:
48:1d:9b:50:2e:0b:a8:8b:3b:d1:03:65:d7:18:43:
97:7a:cd:ba:91:6d:8f:65:de:7d:bd:82:86:6f:8e:
cb:cd:49:52:88:5f:7c:49:4b:3c:22:09:0e:25:88:
44:16:0f:57:09:6c:71:c1:ae:35:7f:ac:fd:6f:06:
4c:6d:82:f3:af:09:ba:79:b3:f2:c8:48:c4:bb:b8:
06:e3:a0:31:4c:b0:15:7f:43:43:af:b7:45:7d:ca:
42:46:ed:f0:c4:3a:93:23:88:c9:9d:f7:34:d0:fe:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:D7:88:EE:C6:16:BB:8B:AF:01:E2:87:53:72:4C:D0:43:50:20
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c2:b9:86:a0:27:80:22:1e:ae:9c:ba:fc:28:f6:92:9d:9c:
40:2e:9a:94:83:58:0d:b1:23:b7:a3:74:5d:44:55:bf:55:47:
41:8f:79:91:5d:6f:71:8e:b0:6e:1b:16:54:2e:e0:04:96:b6:
ae:29:43:a4:65:ae:ec:59:ef:d3:d4:ec:57:65:e7:c1:af:9e:
0a:cc:d4:29:b9:f1:17:17:bc:3d:45:94:c7:0b:40:fc:2b:b8:
84:4d:84:9e:a4:55:ea:39:1d:6d:8c:ed:30:19:ac:a9:22:2f:
3d:11:58:cd:2d:44:c1:55:67:a6:b9:b4:b3:95:2f:19:7f:83:
d3:79:f4:5f:12:47:48:44:55:04:14:e1:15:c9:00:c4:8d:aa:
ee:a3:15:8f:dd:b1:1e:6a:8c:c2:eb:8c:ff:ae:18:0e:b8:96:
d9:3f:18:a4:b9:56:96:d1:e1:71:8a:89:ca:cc:33:18:1a:46:
55:3b:e1:22:c7:68:a0:93:a8:77:c9:0f:6c:f0:da:77:04:1a:
c6:cc:87:41:bf:6f:a4:7d:85:11:68:82:9f:90:55:08:81:57:
9a:08:03:e7:38:2c:7e:2a:82:15:a3:f2:6d:fe:ac:d9:1e:9f:
68:25:b1:d0:1c:ce:3a:71:34:98:33:84:3f:c8:2f:10:e9:49:
67:4e:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:54 2025 by rpki-client