Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier: 51GD78LJrS9qCsWkYVdzr6gRXUTcw2Mgj4t9BQXZsiI=
Subject key identifier: D1:E2:92:98:D5:1F:CA:FE:54:0E:99:D1:36:44:76:37:F0:0D:B5:20
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer: /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial: 019A7225869A7D79D45053083A379BC2863F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number: 01E6
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: EPoWVVIMSDcG8gKArPjffPLnIyN4teZg/4lDjoXf8Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:86:9a:7d:79:d4:50:53:08:3a:37:9b:c2:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=d1e29298d51fcafe540e99d136447637f00db520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:16:68:04:94:4e:a9:de:95:27:d8:0e:e3:
0c:5b:d9:a1:3e:17:f8:c0:89:d2:b4:47:6e:41:20:
71:e2:04:8c:4f:51:1e:21:ac:07:e1:f6:b1:96:9b:
70:dc:7b:46:cb:59:61:cd:74:6f:0e:c6:ad:fb:78:
05:e8:af:53:b5:0b:cc:c8:3f:0e:b2:d0:12:5b:1a:
0d:56:33:ec:7e:27:7e:c7:c1:b3:84:2d:83:a5:f3:
63:d8:ba:22:a9:c2:91:4e:42:c9:cc:cd:06:1f:9f:
25:58:04:0a:1e:ff:d5:ba:45:c7:d0:0d:07:3f:1f:
0e:d9:7b:13:da:ab:25:a5:23:db:b2:e1:e6:f8:fd:
11:52:a8:d1:6a:ce:c2:ae:6a:0f:98:21:bc:ef:81:
cd:26:bb:c6:6f:08:5e:c0:d1:b2:fb:83:a2:2b:74:
46:38:f0:64:86:12:5a:99:f9:6f:4d:f4:78:40:aa:
8d:23:ec:dd:6a:05:17:95:e9:00:d2:6b:7f:8e:64:
1b:d8:13:72:85:60:28:6d:64:49:71:a3:f0:97:f4:
ff:03:f1:e3:6c:e4:41:b9:e4:08:74:ef:df:42:64:
c2:11:f1:49:64:6d:c9:70:97:28:8c:e8:8d:64:e9:
eb:1e:1c:e7:c5:af:8f:71:7d:c8:cb:f3:f0:bd:64:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:92:98:D5:1F:CA:FE:54:0E:99:D1:36:44:76:37:F0:0D:B5:20
X509v3 Authority Key Identifier:
keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c6:df:39:1e:31:2c:dd:3d:ce:75:c1:1b:15:13:d7:07:cf:
de:f6:9a:a3:fd:44:48:05:3d:51:bd:ae:a2:46:88:84:a4:52:
10:c0:b8:1a:22:68:05:1d:ec:fb:c2:87:39:76:a2:ad:c6:8e:
99:10:94:9e:17:10:7f:e9:d2:cc:f7:c6:74:c7:e1:fa:0c:6e:
c1:76:16:89:47:a5:38:3a:84:26:25:28:5e:47:21:35:81:85:
b4:9c:5a:dc:1b:47:63:14:72:83:3e:62:03:60:86:99:b5:ba:
90:b4:6f:e5:10:20:7c:a0:90:4a:77:54:c7:6a:08:ed:e9:89:
8d:b0:cd:40:49:ad:e2:9f:f0:b4:76:d9:80:a4:01:32:f6:34:
d6:38:5a:19:99:be:73:57:f0:53:27:d8:a2:90:00:df:c9:c5:
84:48:c2:99:14:63:51:92:c0:0f:a4:06:dd:b1:40:f2:05:3e:
3d:b9:ab:b7:24:03:23:9a:bf:cf:26:3f:b1:c1:a5:0b:18:11:
a0:f2:1f:42:ad:3d:24:36:26:5b:de:c4:81:f2:43:1a:79:58:
ad:55:c7:dd:cf:8f:4f:4f:60:68:c8:de:2e:95:09:92:fa:fe:
04:e4:17:0e:4c:db:79:af:2a:e9:ca:a7:05:7b:14:46:3c:ed:
9c:3f:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:44 2025 by rpki-client