Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: ZHdXMlFS+zc4Fx/6720tG15Y66zCRpQR6N4VyRyrj+4=
Subject key identifier: EB:BF:84:CD:71:E7:3C:F6:07:5E:6E:27:39:8B:96:BE:00:BF:E7:2C
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 0199FFC81D4CF3B33F6264E5F4E8F0DD550B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 0FA6
Signing time: Mon 20 Oct 2025 04:02:08 +0000
Manifest this update: Mon 20 Oct 2025 04:02:08 +0000
Manifest next update: Tue 21 Oct 2025 04:02:08 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: DUT8M7y+GFSzigX3KcEbG9xbJVBEFYaXLRJ5WDo1354=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:1d:4c:f3:b3:3f:62:64:e5:f4:e8:f0:dd:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Oct 20 04:02:08 2025 GMT
Not After : Oct 21 04:02:08 2025 GMT
Subject: CN=ebbf84cd71e73cf6075e6e27398b96be00bfe72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:e9:01:60:53:6d:ab:b5:6c:55:b0:13:f8:
06:6e:1a:d1:af:df:ea:93:1a:a3:09:26:34:a8:0c:
39:58:02:5c:43:75:68:ef:1f:6b:b4:a1:ac:af:82:
41:85:1b:1d:46:62:c1:0c:92:32:d9:d7:e1:0c:05:
a0:ab:4b:55:57:95:3f:8a:72:d2:a3:ea:e0:23:70:
cd:3a:16:d8:b8:3b:ba:dd:54:ac:bb:33:db:e3:21:
33:51:99:13:97:eb:44:26:4c:de:d5:18:8b:88:a0:
ad:6e:5b:6a:ed:a0:37:cc:c0:06:7f:44:71:06:1a:
31:45:83:eb:b0:2d:5b:bc:f2:d2:0b:45:0a:5b:b4:
e1:93:2d:a3:3b:f8:93:37:70:6a:30:fc:47:78:56:
d6:da:e6:ab:06:07:47:8d:0d:8f:ac:fd:ee:e4:31:
eb:97:15:45:3b:e9:18:bb:45:1f:e3:7e:0c:08:13:
06:b6:85:d3:4e:d0:26:2a:d0:a1:92:82:53:b8:49:
6d:17:08:78:8f:b9:d6:11:bf:0c:ea:7e:bc:e3:30:
cd:85:1c:c1:ba:ce:f7:9b:81:a5:90:d6:0d:fa:11:
50:c9:f1:e2:35:b3:57:aa:fc:d4:e4:22:d9:d7:2a:
6d:f5:b4:54:8c:52:a8:c9:b1:33:71:d4:e2:99:8b:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:84:CD:71:E7:3C:F6:07:5E:6E:27:39:8B:96:BE:00:BF:E7:2C
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bf:c1:df:c9:67:9b:8d:ba:b9:55:7a:e6:0f:bc:7a:2a:90:
0d:94:9b:9a:b3:36:a3:ce:5b:fc:02:41:7f:51:d0:a3:93:52:
3c:49:75:47:66:13:0f:99:88:40:56:20:d7:de:cb:bc:26:31:
77:4c:41:3c:bc:5a:77:a1:a3:42:e1:5f:2d:44:37:10:11:06:
35:b6:2c:95:f4:a5:ba:24:77:83:a5:36:c8:9f:91:9f:f2:2d:
19:b9:d3:d6:38:ec:f2:a0:03:8b:2f:d6:df:17:70:dc:e9:43:
5f:4a:e4:79:45:31:54:b8:2b:f8:c1:2f:37:a3:78:1c:a2:b9:
bf:da:cb:c1:d8:43:94:25:0a:2c:d5:7e:38:72:80:d3:f2:bd:
2e:09:48:42:a2:db:0c:5b:69:3f:c5:e6:10:3d:54:c2:08:18:
60:5f:43:af:d5:2f:43:5d:10:b3:14:0b:60:2f:65:44:9b:6c:
cf:ba:b4:f1:66:01:a6:0b:bf:00:bf:c8:44:ca:0b:08:76:7d:
37:dd:63:cf:e9:68:2f:bd:d3:17:af:69:53:15:86:7a:24:5a:
23:82:f3:36:cd:da:ab:df:2d:24:f3:85:79:5a:1e:99:e4:7b:
44:00:49:37:4c:bb:d0:b5:d6:31:2b:e4:af:39:7e:09:08:f9:
e3:1c:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:01 2025 by rpki-client