Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File: eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier: IuYqIGhK4JkThoCq1pXDS+Npjam9ExVfhafdReSLPHI=
Subject key identifier: 91:A1:35:0B:44:94:7C:0E:CC:5C:48:8B:C2:33:83:2A:08:B2:05:0F
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial: 019A711377BB3A8FC2A32D7EF579D2075F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number: 0EAC
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: PoDIIeWz6agx2XhejlaHBVwBMpVox7S6FgSqKPVPi5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:77:bb:3a:8f:c2:a3:2d:7e:f5:79:d2:07:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=91a1350b44947c0ecc5c488bc233832a08b2050f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:03:96:62:67:3c:57:48:21:b5:8d:36:6b:
f6:ba:ed:d4:1a:1a:86:b6:ef:5c:db:e5:21:b6:7c:
71:6e:53:03:ab:d6:63:64:ad:08:6c:98:80:ed:91:
e0:bc:0c:74:2c:62:74:40:47:89:6e:ab:7f:df:33:
8e:4a:0a:84:cf:e6:0c:23:2b:bd:fe:d7:c4:6e:08:
c0:dc:04:12:77:80:e1:c5:95:68:a7:d8:5e:77:94:
7d:11:b8:37:26:29:01:0c:d7:40:3b:57:60:bd:68:
2d:b4:47:10:71:b6:3d:22:69:8f:6b:e6:59:02:d3:
17:e2:66:e9:bf:0e:9b:2d:51:19:69:60:0b:a8:88:
d1:ab:57:3d:bd:be:64:dd:13:04:e4:ff:2d:42:3e:
5e:aa:ce:36:3c:e1:d3:cf:10:2d:63:f1:ce:ad:e1:
30:98:9e:5b:bb:b2:81:1f:0b:71:f9:4b:13:1b:f3:
15:8f:fe:b6:a6:48:14:85:71:f4:57:a8:73:f5:cc:
d4:d7:97:92:79:d2:9e:de:d5:24:71:e7:87:83:28:
c0:c8:81:6e:44:81:a4:e5:cd:25:81:1d:2e:d7:3b:
77:39:bd:5e:f5:68:0d:ce:29:fe:33:11:4f:13:74:
48:d0:db:61:e2:4f:4f:88:cf:64:00:e9:d8:5b:00:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A1:35:0B:44:94:7C:0E:CC:5C:48:8B:C2:33:83:2A:08:B2:05:0F
X509v3 Authority Key Identifier:
keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9e:01:77:59:be:c8:fd:95:f9:49:1b:cc:11:f5:f7:ef:c1:
12:8a:b8:95:8a:a3:f8:e6:21:e1:82:bf:29:9c:e8:4f:23:cc:
75:61:41:7a:6c:41:52:5d:83:56:41:d5:0f:6e:49:2e:e0:02:
a4:b1:70:34:f9:21:5b:ea:f8:23:d3:1f:29:11:a2:45:0c:96:
91:24:59:d5:14:db:a3:2d:34:8f:6d:27:8f:0a:69:65:5a:17:
63:8e:0f:78:ee:21:e2:54:91:c1:56:19:96:73:40:84:16:67:
13:45:e8:ac:9a:f4:95:b5:23:0b:3c:2c:c5:4c:11:7c:58:d5:
8b:17:1a:25:12:95:18:85:40:e2:df:df:ea:06:11:39:f3:54:
87:59:cf:65:74:f7:f5:17:4c:26:54:2f:b2:4f:d9:72:1f:bb:
43:4f:9b:29:f4:b6:b7:09:d3:61:ee:17:c7:19:9b:95:09:ce:
76:93:1c:f2:60:d1:f3:f5:5b:ad:f3:5a:39:1a:6f:32:ae:4f:
c7:7f:63:54:20:ec:97:f0:d8:ff:71:e2:a8:c6:63:18:5e:65:
c7:ac:de:a2:3d:f9:8a:ce:e8:c7:7f:8d:90:0d:c2:b7:b5:43:
81:59:54:ef:82:2c:ad:0f:80:64:21:a5:10:4e:6e:2d:2e:d8:
c6:c2:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:01 2025 by rpki-client