Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier: 1Jh7AIQs+8Ozn+Zf0UF28+IdOIVO7FrAROa1Gm05bLs=
Subject key identifier: 83:0D:D4:60:25:4D:9A:EC:E8:3B:80:4C:D3:FC:C5:B5:56:4E:A9:FD
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial: 019A7112B1C495FC3F943459AC3DAA42A096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number: 11F4
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: 1hsLBb8l8iw6H0Sm0jM8YKAiAK3daSfsYfVghAEoCYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b1:c4:95:fc:3f:94:34:59:ac:3d:aa:42:a0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=830dd460254d9aece83b804cd3fcc5b5564ea9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:25:b0:ea:ed:46:e7:57:bb:49:c7:0c:53:
27:c2:36:ad:9a:63:57:09:7d:c3:b8:86:00:c0:ab:
27:55:23:91:81:5c:95:75:a6:b7:73:a4:83:a7:58:
fa:3e:82:26:c1:d5:79:7b:48:63:98:bb:db:7c:45:
53:6a:84:b8:53:3d:ae:df:6f:72:95:da:89:1f:73:
d4:0b:26:9d:b7:2c:23:e3:f8:af:c7:d7:57:b1:4e:
42:d4:01:9d:78:73:7b:d4:cb:2c:c8:17:d4:a4:6f:
e0:f0:1a:72:b4:b5:aa:e7:8c:f0:33:d6:9c:b8:55:
51:40:a5:e9:00:21:e1:80:1f:40:db:86:b6:94:ed:
0c:dd:af:4a:10:88:83:75:ee:2a:ad:f2:2f:17:19:
b2:b9:e2:4a:e6:f6:41:a2:37:c9:6f:80:3f:54:3c:
e8:3f:1a:4a:dc:54:59:a6:ee:4a:df:61:e7:ff:b4:
bd:e1:97:f4:c5:9e:7a:7d:46:42:8b:1f:b9:01:a8:
0c:5e:6e:d1:01:d1:9f:8e:8c:20:d3:5b:51:be:ac:
b1:9b:1b:ef:c3:96:40:be:55:a4:2e:71:7e:ad:26:
14:d1:99:33:72:74:d7:d7:2a:6c:43:70:2d:68:98:
03:17:49:24:4f:6f:86:59:4b:b5:63:a5:3c:ce:4c:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:D4:60:25:4D:9A:EC:E8:3B:80:4C:D3:FC:C5:B5:56:4E:A9:FD
X509v3 Authority Key Identifier:
keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:53:12:73:92:81:c9:d1:75:be:64:93:67:63:02:2e:44:cb:
5d:eb:63:4e:61:b5:0f:d1:41:53:e2:a8:6a:be:80:ba:2e:56:
82:69:fe:0c:db:c6:8f:5d:db:72:e3:a6:62:9c:56:13:79:50:
5e:04:90:67:d9:fd:45:01:f0:d8:58:26:7f:4a:a3:e9:b5:eb:
ed:2c:54:ae:d6:60:ac:30:c9:8d:9e:f2:de:63:2f:24:50:2e:
58:2f:db:ea:25:93:26:b9:7b:7f:08:91:d3:66:8d:03:de:cb:
11:a3:10:dc:0e:33:7a:5f:30:b2:ac:47:13:19:5f:7b:c1:1e:
52:f6:8e:fe:a7:90:94:44:f1:ba:32:7c:9d:c7:fa:b4:06:13:
da:27:72:10:a2:6d:76:28:0d:9c:a0:81:fa:40:6b:b2:08:40:
f6:ca:f7:a1:0e:35:a5:55:08:01:83:df:d1:3f:a0:1a:35:97:
9b:d1:bf:c6:cf:fe:a7:95:76:53:ba:df:49:97:8f:6b:c2:88:
73:06:24:f4:0f:a7:74:04:42:ac:0a:bb:2b:00:6a:89:b7:fd:
ab:29:be:bb:dd:22:70:61:21:ab:a8:d4:6f:b6:50:31:83:3b:
ed:91:fc:23:24:ce:14:59:8e:5d:6c:1a:52:dd:08:fd:d5:00:
25:ea:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client