Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
File: EDjazpcIXLC3fQOb0N_-VsJoolw.mft (raw, json)
Hash identifier: tLLwjuMXaQkOZuMoLhUWcpNMXoPJChY1i0zYmSA1bfE=
Subject key identifier: EB:B2:D3:5F:51:0B:DB:04:7E:C5:DA:D2:FE:D6:1D:34:F3:6F:0B:32
Authority key identifier: 10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
Certificate issuer: /CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Certificate serial: 019A71B919684DE79122D4870A142FB3EACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: EDjazpcIXLC3fQOb0N_-VsJoolw.crl (hash: /J6pYfTlg/6NJ431YD8TkTTrI/CwgWhI3hsy3K+Eyss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:19:68:4d:e7:91:22:d4:87:0a:14:2f:b3:ea:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=ebb2d35f510bdb047ec5dad2fed61d34f36f0b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:68:3f:c3:03:35:40:b0:85:24:a7:71:6c:
ab:00:77:b2:fa:d0:0d:04:5a:13:4e:fe:83:85:31:
d1:b9:91:7c:24:1d:a3:85:77:f5:d1:ec:e5:26:f9:
32:67:33:79:ba:f4:10:ee:9c:30:d8:b2:95:90:83:
b3:9b:0e:76:a6:3c:ae:9c:0c:99:92:8b:38:16:ed:
13:23:b2:29:20:ea:e3:39:87:24:c9:a8:24:43:31:
47:10:85:0a:2e:e9:cc:49:7a:4e:f0:d3:d8:2a:ca:
1c:93:87:3c:46:c9:66:19:7c:57:d4:90:1d:a3:6a:
7b:55:0a:b8:eb:90:e6:33:f1:fc:9e:1b:13:a6:0b:
87:1d:e8:76:d3:9f:0c:6c:81:51:56:f9:b1:eb:fc:
ef:bf:af:14:22:72:9a:08:e4:47:61:82:d6:8a:e4:
6f:56:6f:5a:fc:a2:3d:0c:4a:64:e0:0a:06:02:60:
62:98:3e:7d:cc:34:49:6f:9a:a2:6e:c0:24:2b:32:
de:7c:ad:a7:6d:e8:76:63:39:3a:e1:f2:d1:c0:94:
3a:57:14:ce:09:ab:e6:e0:16:e9:aa:c3:30:fe:ae:
d3:e7:71:30:e6:c1:a2:6d:7c:e0:2e:0b:c9:d5:4d:
61:98:91:4d:40:e7:76:24:ed:29:6a:80:f8:60:71:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B2:D3:5F:51:0B:DB:04:7E:C5:DA:D2:FE:D6:1D:34:F3:6F:0B:32
X509v3 Authority Key Identifier:
keyid:10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:50:7b:ce:e8:a8:d9:0d:2e:ef:d7:4b:3f:8b:de:2e:d5:
97:94:2d:aa:30:34:d6:88:8a:36:66:ee:5c:bf:1f:57:ce:10:
c3:ed:db:c6:2b:b4:3d:35:11:71:2b:b8:bc:dc:37:5d:96:1c:
c4:1f:2c:f7:27:b3:28:bb:49:6e:6d:d5:55:17:6c:bf:65:ac:
b0:29:16:d6:0f:7c:c2:61:29:63:c7:ea:83:25:3f:b9:52:58:
21:59:b7:72:92:a1:a6:eb:2e:96:ae:86:79:b0:49:e9:1b:2f:
af:14:4d:0a:88:c3:f7:89:c1:eb:3e:fd:05:9d:d7:6e:73:1b:
aa:5f:95:1d:82:63:f8:6e:07:c4:74:6b:df:f7:4a:d8:81:20:
b5:ea:1a:f4:de:27:45:b5:6b:c2:0a:c2:2f:12:c4:3a:5b:75:
69:e0:a7:f3:90:40:6a:11:6b:5d:5f:94:3f:16:aa:ad:39:a1:
2b:9e:98:1c:4e:5d:91:41:41:02:9b:0a:a3:e6:37:66:01:23:
de:0d:02:cc:6c:9d:11:24:7b:99:12:1e:19:8d:dd:71:6a:4e:
79:8a:62:05:cc:1b:aa:fd:5d:79:15:0b:d7:87:22:6e:b4:7b:
92:9f:7f:c9:d4:ea:84:fa:3e:e0:0d:18:3c:d2:dc:ec:db:ae:
ab:c8:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client