Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: mUNS3axKagDYIVOUNg9pGoy77MJri79bi4YbiK152Dc=
Subject key identifier: B3:6D:2B:8A:3E:8E:ED:46:ED:96:97:C0:18:B1:4D:A1:FB:74:CA:F7
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 0199FB45A3886F95DA80B5D040D387B7933D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 05DC
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: gVHLRyqiq2nH0xmmRTl/d3zL9kioMCzaHW5ImMf9A68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a3:88:6f:95:da:80:b5:d0:40:d3:87:b7:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=b36d2b8a3e8eed46ed9697c018b14da1fb74caf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:b0:e2:a0:91:61:05:bb:63:1c:23:79:63:
bd:9b:b0:da:51:b6:92:e3:8e:16:a6:b9:74:ff:85:
18:86:9e:0a:f0:e5:64:f4:6e:a7:ba:e4:fd:aa:5d:
a2:1e:b9:50:00:ee:59:86:bc:e9:4c:0d:01:fa:25:
c4:f1:54:a2:4f:c5:de:6c:9f:43:1f:cc:e8:53:8f:
17:46:60:8f:9c:3d:48:b5:e0:7e:a7:18:2c:f0:ea:
38:aa:fc:93:67:92:fa:b9:61:a7:75:de:06:cf:c8:
ce:d1:bf:cf:db:ab:5f:34:07:ef:38:bb:f2:de:40:
c1:36:63:5f:64:47:f6:bb:a6:15:6d:99:7b:da:35:
f0:43:4f:e4:97:12:fe:32:db:f6:32:f0:69:38:5c:
79:fb:d6:8b:47:5e:3c:a6:02:9c:74:eb:12:08:41:
be:79:1b:8a:e6:e0:fe:c5:4d:46:13:09:67:09:a3:
2f:83:73:e8:1e:bb:a7:07:f0:8f:fa:0f:c0:e6:e2:
57:5a:26:3e:5c:65:e4:24:ef:15:30:8f:2a:e2:6c:
0b:bc:a9:9f:d6:7d:ac:06:39:43:94:89:24:1c:d4:
97:fc:cf:7c:c4:2a:3a:87:41:be:10:6b:ba:e2:8d:
b1:29:46:02:b6:cf:ef:40:5a:ad:52:18:d5:ed:89:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:2B:8A:3E:8E:ED:46:ED:96:97:C0:18:B1:4D:A1:FB:74:CA:F7
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cc:5a:85:59:e7:5e:21:52:76:52:6d:cc:26:f8:3b:ba:ce:
47:f0:27:5e:82:fc:48:2c:3d:cd:c9:5a:bd:2a:b7:c7:5f:6f:
f5:80:64:1e:1a:93:fd:8d:bb:ec:3b:c8:2e:4b:dc:36:a8:8e:
92:cc:b0:3f:f2:f6:e2:76:ad:8c:97:d3:2a:ab:15:51:11:0b:
9d:0e:67:0c:1c:0e:fa:ac:88:97:ae:71:6f:13:ff:89:a6:f2:
51:86:71:aa:70:ed:37:31:dd:8b:1e:16:ce:28:71:96:f3:33:
8b:7b:31:db:b3:7e:e4:ff:5b:f8:20:58:2d:57:7b:1b:26:8c:
89:27:ef:49:a4:49:53:42:68:b7:7c:e0:13:62:2d:33:b4:88:
f5:f1:6f:21:de:b9:09:f8:ab:f8:3c:3a:e5:15:a9:57:bf:78:
f5:a6:9f:52:9c:b7:fb:6f:99:ea:70:70:07:a1:d2:56:9b:38:
a9:33:19:1e:f7:b0:fd:b3:21:f7:ca:2d:bd:42:2d:45:1e:da:
91:ed:0c:d8:ff:5c:e8:39:6a:1f:dc:66:0a:1a:b7:07:e7:62:
0a:ee:40:a0:74:6a:3d:3c:6a:ef:71:84:80:11:99:b4:11:08:
e4:9c:5c:e1:66:f6:1f:c7:d7:e8:4f:18:e9:dc:17:77:49:71:
92:84:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:36 2025 by rpki-client