Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File: enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier: NR8LlvDwvfCDGbDJgrSmYFN3lOpSffQbvopAEcWjpSE=
Subject key identifier: 40:88:88:B5:4E:62:45:8F:DE:69:B1:FB:00:C7:D1:3D:45:C5:F2:BB
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer: /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial: 019A72266F8E99BFC8F3C6448E133DF1917F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: XhAk3KPQ74GlncvpXllK2y3CaP7xPwnF5eb1j+brUJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6f:8e:99:bf:c8:f3:c6:44:8e:13:3d:f1:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=408888b54e62458fde69b1fb00c7d13d45c5f2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:31:32:64:b3:3a:6f:1b:78:cc:4d:a8:c4:
43:c6:ca:84:3f:89:ca:89:c2:ed:14:d2:8b:a9:ce:
9d:2a:41:24:d6:cb:a8:99:f0:57:eb:ec:cf:6c:f6:
1e:69:07:c8:35:75:89:3d:ad:cc:df:c3:81:ac:ff:
42:13:22:ac:4b:66:59:9d:18:ff:80:70:47:95:50:
57:10:d0:c4:95:06:4f:cd:f0:e6:e4:de:e5:64:76:
88:21:fd:b9:d2:e0:47:84:f2:7d:22:e6:98:2d:d9:
ff:a1:76:70:86:36:a0:c7:0c:18:b9:ae:82:5c:ef:
11:ee:75:3f:1e:27:4d:7e:0e:5e:2d:34:03:2f:45:
92:0d:19:17:ee:1a:d4:c7:ab:fd:a3:c7:06:e6:b1:
e1:97:69:de:3d:fd:d7:90:8b:8f:cf:da:b6:de:49:
dd:c9:16:d0:e8:86:94:5e:97:00:4f:01:96:30:60:
1c:8b:6c:1a:b5:81:60:61:23:b8:0e:02:f3:13:33:
e3:87:1b:43:c6:93:f6:8d:6e:81:23:e6:24:02:f5:
e3:de:cd:e7:8d:9c:c4:d3:a9:9c:e3:47:2a:24:19:
b8:04:2f:bb:97:ce:76:a4:aa:3a:ea:21:92:23:25:
56:5c:16:a5:1f:b0:d7:e7:14:1e:33:e6:d6:c0:5e:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:88:B5:4E:62:45:8F:DE:69:B1:FB:00:C7:D1:3D:45:C5:F2:BB
X509v3 Authority Key Identifier:
keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5b:5d:23:31:88:22:6f:50:01:ce:ef:b6:bf:f7:91:f4:9a:
14:8e:79:fa:e3:0d:84:a4:bc:f6:3b:33:aa:25:0d:de:cd:af:
57:c2:c4:d8:fb:35:17:1a:24:51:d9:22:2e:f3:84:ab:48:35:
1e:d9:ef:b0:0e:a0:c1:79:f9:9c:ff:91:29:da:76:16:be:b4:
de:46:2b:62:0b:46:ef:6f:ff:b3:be:e0:df:71:a2:89:cd:f8:
fe:a3:ce:54:a8:80:b8:16:41:09:aa:e8:35:a5:90:86:fa:33:
5c:58:8d:f2:8f:1e:8d:5f:12:12:60:dd:71:8e:c1:54:bf:16:
ee:43:c0:b8:d0:03:f4:76:27:0f:60:38:93:4d:1c:1b:ca:05:
91:a0:f6:b5:09:21:3f:e7:bb:4e:7c:29:41:7d:18:20:a9:8e:
22:98:7e:ef:f6:07:e6:ce:89:ef:2c:32:6e:94:3f:04:48:eb:
68:ce:cd:f3:69:60:bc:df:c4:b9:bf:6f:73:04:37:d3:23:28:
ba:d0:b7:34:e1:c9:e1:7d:d6:d0:18:66:e4:db:2e:c3:e9:7c:
fd:eb:61:37:08:6a:a6:13:1f:b9:49:e2:f5:28:f5:f7:b9:8f:
8f:e8:ac:1f:61:05:25:46:09:b8:0f:d1:90:43:3f:ca:db:f3:
02:a3:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:23 2025 by rpki-client