Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: czXhzZGej1U77lAh+XXq8+Sui7+gZQXpH3qxdyA6WBM=
Subject key identifier: BB:22:70:C2:44:77:84:49:D8:F9:47:C8:DC:72:8B:86:11:92:2D:60
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 0199FC587C910ADA26DFDCBAEB1420EED80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 0726
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: ZFMlF1JPNbdi2YqJvNoBmRQIcSQW95OleEClNMIYg74=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7c:91:0a:da:26:df:dc:ba:eb:14:20:ee:d8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=bb2270c244778449d8f947c8dc728b8611922d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:a2:94:3e:97:fd:91:58:88:4e:16:62:13:
ee:31:12:e8:68:53:46:00:9e:52:23:cc:7c:b6:2e:
6e:d8:a9:b5:ca:3d:de:8e:07:f5:86:e8:79:5b:bd:
50:74:9b:b9:1f:28:1f:01:24:b6:44:87:3a:cb:72:
e7:2c:51:ef:a5:cd:1f:df:42:af:ac:72:b7:77:c7:
02:15:ca:aa:bb:bd:22:c8:e0:b7:b3:fe:04:1d:d9:
ad:90:78:94:6d:33:bd:38:cd:1b:b7:4c:d0:b2:fa:
ef:f2:63:b4:7c:e5:4a:00:00:c4:ac:81:8d:dd:d0:
dc:46:3a:1a:7c:4d:0d:54:a9:fa:c6:01:5a:e3:de:
f2:2f:1c:ce:cd:8a:a2:50:6f:be:e7:92:5d:be:36:
cf:20:ad:74:d3:83:cf:66:b8:29:90:ab:4c:da:a5:
a6:48:13:59:ef:bd:8c:19:aa:56:39:20:a5:7f:97:
9c:2b:8b:e1:a3:21:59:43:61:df:f0:d0:cf:1d:81:
26:40:f6:4a:d7:57:4b:0a:f5:67:fe:44:84:61:89:
7f:cb:e9:03:69:40:23:57:ad:0a:50:69:64:d3:57:
71:dd:64:af:67:da:a1:f2:e0:97:dd:fc:23:68:2a:
f1:43:2b:b0:34:dc:1e:df:9b:09:6a:54:2a:fb:bd:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:70:C2:44:77:84:49:D8:F9:47:C8:DC:72:8B:86:11:92:2D:60
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:4f:1e:4f:ab:2b:93:b0:52:d0:35:fa:c1:d6:0d:bd:34:
97:c1:88:35:69:f1:79:a8:76:88:71:10:b4:97:f7:89:cb:f3:
30:dd:70:53:fa:b6:f9:84:dd:af:a1:7b:d0:1b:1a:57:cb:6c:
cb:5f:10:14:3a:91:e2:9e:5b:85:66:44:01:c7:dc:51:f3:5e:
05:88:7c:61:34:25:ee:97:bc:ae:3f:98:43:25:a2:c6:c6:7a:
82:36:a2:17:b5:60:46:a2:de:d5:eb:a8:3a:08:6f:68:58:a8:
5c:7f:47:04:80:2c:0a:17:b1:a4:0e:0d:0a:a8:f0:8d:23:1c:
d7:21:da:a3:af:04:79:76:bf:65:80:9f:b5:15:bc:d1:20:be:
2a:b8:2e:be:7e:54:6b:94:e2:86:be:d7:3c:6d:94:8c:67:4d:
a6:9d:09:8e:65:65:31:6e:96:8d:6d:f5:03:80:03:80:05:a5:
3c:e0:11:e2:7d:9a:95:c3:9c:29:2b:85:40:f2:8a:51:67:61:
29:cf:05:41:40:0e:ae:38:0f:84:0d:a4:d6:51:54:62:cc:16:
b4:63:b1:9f:ca:cf:5d:66:a0:c1:ee:2d:7d:e9:d1:ba:1a:72:
92:b1:b2:9e:68:87:1b:5c:61:96:46:ee:60:15:4e:5f:ca:4b:
9c:63:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:42 2025 by rpki-client