Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File: E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier: IsNRfDePrERYp3mDD6uxAw/MGH5hNve8mv8GNdpTj00=
Subject key identifier: FC:75:35:78:E9:14:86:0F:11:BF:3C:77:CF:49:10:F2:3C:24:1F:1E
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer: /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial: 019A72936F3450B473541F2C8B150B6FD390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number: 036B
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: kCzIPYUr2pcctL1EJ0KDfEelbcldaRiiXPphmdQoIRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6f:34:50:b4:73:54:1f:2c:8b:15:0b:6f:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=fc753578e914860f11bf3c77cf4910f23c241f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:c5:bb:ea:95:1e:58:4f:7f:4b:73:cf:65:
68:69:e3:dd:e6:4d:dd:d9:17:9e:32:30:44:27:6e:
c8:3f:78:e3:22:ed:47:f3:44:2c:ac:29:bc:dc:02:
53:02:97:74:6c:12:22:69:dd:cd:d4:71:2e:7a:c2:
67:80:33:be:4d:68:7e:65:07:6b:b9:75:51:c1:d6:
1c:cd:1c:3a:16:db:c0:5e:29:c4:96:0c:87:df:6d:
8c:0a:97:f3:f0:5c:93:c4:a8:24:bf:62:27:61:2a:
39:6a:b7:4a:6f:73:6d:c0:cd:c7:b5:e2:cb:52:54:
f3:e0:22:95:32:45:1d:23:5d:c3:e2:0b:d9:11:04:
02:2d:74:6a:12:1c:e5:1e:63:5f:49:cf:14:55:56:
57:ed:69:e9:91:4e:57:93:c8:a0:21:18:2b:e1:b6:
54:05:d8:40:e2:6c:95:c7:af:35:fa:ac:21:d2:04:
ed:b8:46:31:64:25:1e:be:ce:fa:15:4c:6f:4e:8f:
8f:dc:ae:6b:ed:80:fc:44:cd:b4:a4:eb:04:63:a6:
36:84:4e:6e:9d:5d:2e:5b:53:49:90:7c:62:9a:18:
d8:5e:ab:b4:ab:f2:55:2b:03:de:1d:8f:e3:c2:6b:
8a:95:4e:64:2d:ba:9e:05:85:77:82:58:09:ca:9a:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:35:78:E9:14:86:0F:11:BF:3C:77:CF:49:10:F2:3C:24:1F:1E
X509v3 Authority Key Identifier:
keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:56:18:bc:86:84:2a:55:8c:54:ed:55:6c:16:d9:97:a7:39:
ff:a9:cb:a0:c2:7f:45:31:05:f9:d4:d6:70:0d:8a:c9:05:83:
d4:31:be:fd:05:ac:c2:54:68:38:76:03:b4:0c:e2:9d:59:42:
fb:d3:bb:11:d3:35:2f:8e:96:2d:9b:f1:07:20:bd:8b:c8:14:
4d:9a:04:d7:eb:4b:cc:ec:8d:da:e3:95:f7:4b:ce:9b:dc:f7:
54:d5:d3:df:97:19:e4:e5:4e:e2:dd:49:05:80:bc:99:c4:35:
28:f3:a8:96:51:61:94:1d:33:65:b8:d6:90:a2:9f:c3:26:b5:
31:84:30:56:a9:3c:cd:28:72:98:8f:6b:01:7f:ec:d0:95:fa:
7a:b7:15:36:44:6b:bf:3a:7f:e3:21:51:05:3b:5a:cd:9a:9e:
ec:30:10:3b:8a:a3:61:72:4a:b3:d9:fa:57:e3:08:10:60:71:
26:3e:6c:a5:b9:e9:38:18:b2:38:a1:0b:95:1f:06:4e:a2:d8:
7a:af:60:85:ea:45:35:36:8c:73:41:48:cc:9c:19:92:d4:df:
32:4c:e7:48:d8:3e:fe:6c:a0:ee:9e:a1:7f:27:6e:8c:ba:f4:
09:e8:97:b7:8c:56:6e:b2:ce:7d:d6:2a:5f:c2:c1:52:1a:e3:
f7:0b:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:36 2025 by rpki-client