Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File: EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier: YnZ0KzWP8hfh6rHscOSvfOJuYPy620sCgek/4U1NP6E=
Subject key identifier: E1:39:0D:DF:FF:4A:23:B0:9E:DF:C0:B8:9C:F1:86:EC:2D:FB:2D:76
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019A7225F05396C1547325D064DF35BF26B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: c3SxQ3v6ejVxGuquNTQtNPiGO9tO0oWNw41491sfYCs=)
2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f0:53:96:c1:54:73:25:d0:64:df:35:bf:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=e1390ddfff4a23b09edfc0b89cf186ec2dfb2d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:55:95:1a:94:19:aa:62:84:7b:7e:8a:9e:d0:
10:83:90:bc:50:98:de:ef:4f:31:79:ba:29:2a:ab:
ef:56:3e:2c:2b:f2:33:e2:47:17:d2:cb:67:fd:a1:
27:dc:d1:aa:31:4c:55:91:2a:0d:13:96:63:2e:b3:
3f:a8:40:54:a2:f9:ee:70:f3:eb:6a:ec:6a:f5:b0:
b5:5e:d8:b0:01:8c:dd:04:90:84:fc:fb:b1:16:ec:
86:e6:ed:37:c6:2a:00:ef:91:bc:e6:62:52:34:69:
27:ea:45:c4:a3:fc:4c:fd:be:0b:3d:32:f7:3b:1b:
c1:94:8f:17:c0:3d:b9:cb:a7:eb:cb:bd:f8:cf:1d:
a8:4a:e4:68:89:06:13:96:b9:ef:91:e6:90:ef:80:
cf:91:21:a8:1b:42:66:c8:94:b1:14:3d:d6:f4:39:
33:85:ec:93:f4:31:e8:5c:4a:f4:65:51:fa:d0:8d:
39:04:cd:47:d1:74:4a:7a:68:21:b0:98:ab:5a:70:
78:b9:4a:64:4f:66:49:c4:fd:9e:01:76:c2:a3:b4:
76:06:db:78:03:f3:02:a3:36:d2:51:29:fd:ae:85:
20:2b:3f:4a:a5:dd:bc:0f:72:a4:46:bd:ed:0b:f6:
9e:18:dc:27:ee:e5:79:50:11:4a:19:5b:d0:02:e1:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:0D:DF:FF:4A:23:B0:9E:DF:C0:B8:9C:F1:86:EC:2D:FB:2D:76
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ce:36:9a:52:c8:ba:62:1e:f1:56:d8:99:16:02:71:31:bd:
c6:cc:02:ad:0a:6e:68:66:99:d5:50:74:21:5c:ca:1e:1f:ff:
0f:78:f4:d7:c3:2c:9a:93:46:46:ec:33:6c:21:45:14:39:b4:
d8:a7:b5:22:c0:09:90:12:7a:b6:ae:9e:6b:03:10:c5:64:cf:
e4:00:2c:e3:39:bf:8a:a6:d6:2b:33:01:5c:4f:1b:52:b6:7a:
e7:e1:65:5a:de:fb:85:7f:d8:74:9b:10:ca:9d:5b:4f:e4:a0:
b5:ae:e3:ec:e8:16:b7:8e:a7:97:d0:a5:41:7e:db:28:21:a4:
73:c9:9d:d6:25:5a:40:10:be:be:46:55:c2:8b:2d:93:f0:a3:
df:9d:c0:9b:84:6c:bc:39:c9:c8:09:e7:62:a5:f9:a4:ad:37:
9d:c8:52:63:e8:fb:1d:cf:60:b0:0c:df:d1:d8:77:6d:c9:e7:
4c:d4:4d:ab:e0:f6:74:f8:8d:3d:57:45:1c:15:ac:9f:1a:e9:
c4:57:cf:54:99:f4:dc:aa:0f:9e:08:8d:07:7b:e7:7c:f1:3a:
9f:7f:99:f4:24:a3:ce:03:d9:50:0d:c2:73:72:da:e1:16:00:
c9:74:1f:d8:b2:9d:42:8e:d5:46:1a:a1:cf:dc:4b:da:95:86:
c0:90:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:06 2025 by rpki-client