Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: 86sVdqKFCHgH4zXPek40apq8ik418hD/N3zoJSolug4=
Subject key identifier: 3B:0C:CB:C4:B5:90:CD:E4:1A:39:29:ED:24:B2:CA:22:BD:22:CA:77
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 019A733876E69ECA8168504AD08CDF5FAC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 114A
Signing time: Tue 11 Nov 2025 14:01:11 +0000
Manifest this update: Tue 11 Nov 2025 14:01:11 +0000
Manifest next update: Wed 12 Nov 2025 14:01:11 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: ats4u4NpsNv0eBA2okzEkUsIUjkiTOOdhOY8t+0vtCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:76:e6:9e:ca:81:68:50:4a:d0:8c:df:5f:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Nov 11 14:01:11 2025 GMT
Not After : Nov 12 14:01:11 2025 GMT
Subject: CN=3b0ccbc4b590cde41a3929ed24b2ca22bd22ca77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:53:27:f3:91:7c:15:47:86:7b:5e:27:cd:
71:fe:9b:59:7f:ff:38:1b:b6:71:26:f7:5d:6f:6f:
ab:5f:53:a7:e6:29:5e:56:a4:37:5a:81:89:c6:0f:
97:5e:04:74:34:11:dd:af:aa:62:61:6a:d4:a0:9c:
69:82:c5:31:00:24:2e:cd:6c:4b:f3:39:03:ea:00:
51:04:db:06:83:4a:81:15:03:7a:c0:09:f9:2e:65:
bd:48:5f:ab:a8:dc:dd:5a:bc:61:f1:91:b6:a2:f7:
20:ce:22:b5:14:46:9c:6d:ae:21:8b:f2:65:83:85:
6c:ef:56:56:39:f5:9e:3d:c9:06:36:a3:63:fd:43:
c6:5e:c1:28:d4:1b:bf:eb:92:60:fb:fa:ab:ec:30:
b3:4f:6d:8b:60:1f:3d:74:26:44:11:e5:0f:af:ff:
0a:49:c5:c5:48:05:06:90:77:98:ae:f8:b3:45:14:
d8:f9:08:26:b1:2f:9f:0d:7f:3d:92:75:27:8e:ff:
97:1b:9f:5c:0d:12:a9:e7:68:1f:61:5e:fa:4d:26:
31:a9:9e:e2:bf:99:f1:8a:f6:e2:2e:73:a8:06:1a:
64:a4:5c:fd:6b:1f:6f:d8:ee:59:cf:99:ac:e8:ae:
c4:5a:6c:74:24:6e:3d:aa:6b:d1:61:08:76:ca:ac:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:CB:C4:B5:90:CD:E4:1A:39:29:ED:24:B2:CA:22:BD:22:CA:77
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:48:8d:9f:e1:7d:31:dd:e1:99:ee:fe:05:28:5b:8e:9a:
8e:9b:7f:ba:36:35:43:9a:db:e4:3a:44:c1:38:c4:4a:f0:5d:
b9:e9:7b:87:16:cf:e7:ea:01:b1:7e:19:09:05:fe:1c:90:d8:
da:c8:28:7d:0b:51:66:63:4d:5a:d3:46:da:8f:14:71:e1:fa:
5e:42:bc:60:ff:26:9a:9f:40:66:1e:92:4d:5e:58:fd:5c:7e:
51:47:52:f2:90:65:43:a0:a8:36:7c:36:c9:b5:9d:7f:de:7f:
ad:87:5a:28:2c:33:bf:b5:71:00:38:f7:8f:5c:68:91:ed:51:
ba:bc:39:af:86:ce:92:77:38:d9:cc:28:ff:0e:68:7a:f0:ae:
59:14:7c:1c:92:e2:46:8d:28:8b:dc:cd:db:fa:3c:57:2e:c5:
fb:d9:c1:ac:b9:98:c2:38:37:c5:9b:19:41:fd:2d:23:0e:82:
67:cd:dc:43:d3:78:dd:e1:95:86:ae:f8:b6:2e:ca:77:ba:4f:
42:c3:6c:94:de:06:5a:9a:8a:05:d7:99:45:89:ad:30:14:d9:
fa:04:9b:66:cd:52:7b:7e:44:00:d7:d0:4d:8b:84:ba:c3:bc:
19:a7:30:84:3f:2c:6c:f3:3b:00:d2:95:d6:f8:3c:48:27:9a:
28:fe:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:29 2025 by rpki-client