Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: QXWZx0jpliL6unrtGulkVni1pUzbc1NXzCGRDpnD2n4=
Subject key identifier: 37:BD:D4:40:B1:B0:4A:54:6D:25:2D:86:A4:19:9A:CF:91:90:D8:21
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 0199FBEACB9A953C5391FFA0243585D4E865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 10AA
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: 7jm8NOCBH9KPO84Ck141MCNE+KgiCvkszVtREqPtpsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cb:9a:95:3c:53:91:ff:a0:24:35:85:d4:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=37bdd440b1b04a546d252d86a4199acf9190d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:48:a2:4a:23:49:3f:77:0a:0f:83:39:85:
bd:dc:75:c4:27:50:af:2e:8e:f8:06:51:ae:c3:c2:
4c:99:c0:57:1d:d4:68:d9:bf:d5:e7:82:3d:2f:5b:
72:d1:49:f2:26:f2:68:aa:90:25:61:2f:46:b9:cc:
bf:e4:7e:06:e6:62:32:fa:34:06:26:04:26:9a:1a:
b9:df:bc:8c:97:0e:da:80:3a:4e:90:da:cf:70:94:
3d:3c:66:4d:2d:04:45:13:ae:26:5e:3b:5c:42:b0:
30:f9:4c:fa:a0:33:73:38:5e:db:e3:ce:3c:5f:9f:
f1:b2:7b:91:97:a8:5e:93:98:5c:f7:49:31:2e:c6:
59:8f:5b:a6:bd:22:51:3d:e3:ee:ca:9b:da:37:03:
ab:3b:06:bc:e6:d1:a5:1b:37:ac:bc:04:01:93:3f:
24:e3:2f:a9:e5:31:79:a5:3e:b8:c1:84:ce:d7:ba:
bc:28:8b:3f:eb:64:38:26:23:88:c7:57:03:f7:f5:
dc:38:c6:6e:ab:5a:1c:f9:38:70:c9:17:69:3a:70:
fd:cb:38:52:db:27:44:d5:17:a1:f8:ff:fc:06:0f:
5b:dc:bd:fe:40:a6:3e:57:8f:b9:c0:5e:06:16:03:
4a:05:a7:94:c3:4d:03:1d:25:a3:0e:3b:44:d3:40:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:D4:40:B1:B0:4A:54:6D:25:2D:86:A4:19:9A:CF:91:90:D8:21
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:a6:71:b8:b2:63:51:bf:dd:07:8e:4c:b8:8d:c8:37:e3:
01:ed:8d:7a:ca:47:e1:b4:10:73:4d:73:85:b4:40:25:8b:5a:
c8:b6:16:e6:d2:45:82:08:30:0a:05:c1:e0:f9:15:d2:d2:4c:
80:d0:60:97:91:8b:cf:a3:c3:18:e7:07:aa:5d:07:69:b2:7c:
ce:77:02:3b:42:69:8f:32:33:bc:5a:3d:fc:46:c0:13:1c:e1:
3f:72:19:de:7b:21:67:25:a1:2f:f4:66:2a:10:8b:8a:8d:9c:
79:45:ac:bb:49:a3:0e:41:91:5f:5c:fc:ec:ac:67:e5:a1:73:
ef:05:28:a1:fa:72:57:01:72:f1:4a:cc:6f:2a:bc:8d:ec:62:
79:66:b6:8d:fd:e3:ef:65:95:d4:cb:07:fb:c3:d8:6b:20:57:
3a:1e:d9:5a:a9:59:59:4f:d6:66:b3:8b:dd:e4:00:f0:3b:d9:
88:79:80:4f:8e:1d:8a:3f:aa:71:4f:15:bd:4b:e7:bb:93:c9:
e3:6b:34:4c:43:b7:55:2e:24:9e:bf:95:d0:28:13:2e:a6:39:
92:a1:51:9c:14:6e:13:1f:b3:cb:0b:11:d9:68:d2:ec:52:cb:
a2:3e:5e:62:8d:30:8a:50:f7:d3:8d:90:c7:ef:92:94:e1:c4:
1c:77:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:16 2025 by rpki-client