Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: WcG62pDUMWIdl50aI3YX7F13E+JdpJt7TXL6x6OkJis=
Subject key identifier: 3D:B9:98:48:BC:A2:C5:58:F1:D0:61:5B:CC:26:11:A2:99:59:34:D7
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 019A71B84090A3783763D79C0F142833F42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0DEF
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: H8GW6zBmCjR1cT1k3lrlwouPGoPpcQxLOXviSLkWWBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:40:90:a3:78:37:63:d7:9c:0f:14:28:33:f4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=3db99848bca2c558f1d0615bcc2611a2995934d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:e1:bc:43:dd:6d:9c:7f:64:df:28:2d:63:
4c:2e:17:f3:b7:77:91:34:74:9c:c9:64:62:07:3d:
14:e4:12:d9:dc:b2:fd:8b:2e:d3:ef:1f:54:c7:c7:
61:40:70:e0:59:81:bc:2c:a9:ef:6d:64:15:77:78:
01:35:8e:3e:52:f5:2c:cd:3e:d0:bb:0b:56:71:85:
4b:d2:17:e5:1f:36:52:88:e4:28:77:5b:07:4b:24:
a1:e8:f1:a1:7a:ae:56:16:82:2d:ee:2d:d5:06:44:
f1:48:a6:b5:d6:52:c5:4c:60:ea:b9:86:fa:ed:43:
f9:d5:aa:44:e6:a6:9e:c2:e6:05:58:5b:48:68:11:
33:2f:af:3c:fb:1f:a1:3a:d2:c1:8a:a0:81:1c:ff:
d9:8a:8e:be:7b:a0:9a:d8:2f:98:ff:b2:8a:f3:8f:
89:38:dc:84:56:e8:4e:fe:43:6e:e2:ce:d8:7e:8e:
92:c3:ca:02:34:d6:d9:7d:fe:ca:d0:38:16:c7:e7:
0c:e0:7c:38:aa:e7:5c:c7:d2:df:5f:59:21:71:70:
e0:6e:ad:e2:80:c2:86:50:66:ef:72:f8:d2:3e:f3:
c4:f6:96:4d:bf:f3:57:9d:a8:1b:3c:7e:8b:d6:ce:
96:f9:ff:8c:43:e7:ff:ce:6b:c8:cd:4a:0e:d4:e6:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:98:48:BC:A2:C5:58:F1:D0:61:5B:CC:26:11:A2:99:59:34:D7
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:98:34:5f:e2:8a:c9:c3:36:71:80:f4:ed:06:59:30:22:
ad:08:87:4f:17:a6:1c:a0:b8:65:04:e3:24:0a:e5:13:a3:f1:
b3:a1:d0:32:36:81:a6:51:77:2d:d7:ba:6f:1f:16:f3:29:db:
47:64:41:3c:23:b1:30:0e:76:eb:9e:5a:47:a7:ae:01:73:61:
46:35:75:a6:e2:21:18:b7:2c:97:44:d6:98:5a:41:6a:35:66:
4a:d5:88:63:95:a2:33:74:d6:7c:c6:15:26:02:11:e4:a3:71:
c6:e5:56:0f:8b:ee:86:d5:3b:fb:dd:b0:ec:e0:e8:83:26:00:
37:ad:dd:03:be:0b:53:18:5b:cb:9f:ee:fb:d1:c8:d5:5e:cc:
10:ab:98:86:80:9e:0f:37:e1:13:a5:29:6c:9f:b9:01:ee:29:
73:4d:9e:78:c9:f4:5a:f2:fe:ab:aa:80:85:09:e4:a4:ac:01:
2a:24:66:13:fd:cc:e0:9c:83:50:8e:f2:93:a8:f2:37:c4:0c:
a0:ea:2e:bf:46:fa:87:0c:97:97:46:b7:75:86:15:71:6e:82:
52:09:9b:34:fb:38:d4:b0:2f:00:77:54:cb:b2:8f:db:70:68:
72:9b:b7:d2:8f:61:9d:b0:eb:1b:f9:4b:fd:15:01:db:c5:84:
bf:44:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client