Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: 7eb3uf+va3D+Wn4rHV3x0v3blthdINKTrKqi0MuIjxA=
Subject key identifier: BA:88:E5:EF:25:41:87:06:D4:8A:6C:AB:89:E0:E7:26:10:94:94:EA
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 019A722611268CCE623E275C0A7F9BBEF333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0BDC
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: WEt9oPoJY3f87ZWb2VC9CeYxHePKZ3Ah19SrSiLzw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:11:26:8c:ce:62:3e:27:5c:0a:7f:9b:be:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=ba88e5ef25418706d48a6cab89e0e726109494ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:fa:a1:62:89:29:e2:a1:45:74:c5:4c:ed:
cb:b2:e1:73:88:be:4c:0f:35:7e:19:63:f6:b2:49:
fc:3c:b5:2f:70:39:11:0e:71:f3:64:42:05:91:d2:
1d:be:82:a2:89:f8:e0:33:66:8c:eb:14:94:79:6d:
43:3d:b8:81:6f:9e:68:d7:ec:9e:a5:6d:b0:14:2b:
5d:18:e0:19:f0:3a:f6:84:a1:93:9b:ab:ff:82:34:
1c:38:aa:b8:b8:ab:c6:7d:21:47:cf:59:1b:61:a1:
d3:e4:aa:b1:ea:7e:73:b4:6c:99:7f:5e:dc:80:1e:
83:53:69:26:2a:95:b7:fd:20:90:aa:1f:1b:c7:c6:
17:34:eb:17:97:14:b2:4a:f5:e9:6e:c9:d1:86:10:
ae:f5:51:85:aa:bb:2d:f9:f3:cb:75:8d:50:ca:90:
82:b7:62:f6:a5:88:51:23:c8:6f:b4:7a:dd:02:41:
70:77:d4:21:54:c9:d9:2d:9e:b1:3f:32:10:7c:3e:
4b:8c:64:79:ef:41:12:90:43:b7:98:50:ec:7f:38:
9c:5a:4a:f3:5d:ae:e1:4b:db:87:ec:37:9a:80:f0:
3c:ba:e2:e1:57:12:5e:7d:95:a2:a4:a3:eb:b9:2f:
e2:5e:e2:76:91:80:33:24:a2:60:d4:6a:69:b6:9a:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:E5:EF:25:41:87:06:D4:8A:6C:AB:89:E0:E7:26:10:94:94:EA
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4a:35:3e:cc:0d:6a:3c:c7:dd:8e:8d:fa:e9:1b:48:ed:71:
85:8e:55:e5:8d:ce:25:60:74:f9:77:47:53:cb:a1:8c:ea:22:
81:30:00:22:07:b9:06:ee:e1:aa:a8:96:43:3f:69:49:7e:75:
75:89:6b:0f:d7:ce:f4:8f:e0:13:1d:0d:ae:37:35:f2:46:c3:
39:2e:27:f5:0b:82:e3:5d:4b:f8:96:6d:fc:3c:01:ff:a0:4d:
c9:e8:8a:5e:f3:a2:2c:2f:3c:67:f2:15:ac:85:f3:6e:8b:18:
7b:be:36:9f:4b:dc:55:b6:73:11:fc:ef:66:17:59:08:01:ac:
dd:4d:64:c0:7c:f4:0d:a8:61:8d:bd:bd:30:db:ca:21:38:26:
3c:35:b2:03:9a:d7:2d:c3:09:63:fe:81:03:6f:a6:80:ba:3f:
2d:03:ad:54:ad:6d:95:60:0d:6a:ad:ee:11:1b:9d:dd:c8:dd:
83:00:58:7e:03:2d:bb:68:05:9e:e3:b9:4d:e4:b5:ac:10:de:
62:65:09:4f:84:1b:03:6c:a4:cc:66:54:c8:a3:c0:3c:4d:1e:
7f:f8:38:06:be:77:b9:bd:ed:b1:88:11:73:81:97:8e:6f:64:
0d:56:df:78:4a:3b:08:9c:f4:b1:c5:d5:96:c8:8a:6d:a1:51:
31:73:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:16 2025 by rpki-client