Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
File: EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json)
Hash identifier: X7SEjOQJmvhBhzoIW3RUfEm4ghV/PKNFVkaRaWbyodU=
Subject key identifier: D6:3C:7E:45:0D:D6:9F:B5:FE:55:30:32:9F:8C:3D:30:9F:A8:23:09
Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95
Certificate issuer: /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
Certificate serial: 019A706E22B73A8B9489730C4D8B0DB082D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
Manifest number: 13D9
Signing time: Tue 11 Nov 2025 01:00:57 +0000
Manifest this update: Tue 11 Nov 2025 01:00:57 +0000
Manifest next update: Wed 12 Nov 2025 01:00:57 +0000
Files and hashes: 1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: lviYutNNR2PNbVFGJK+ev2KRtDbwBXvvr8wjeJYaYlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:22:b7:3a:8b:94:89:73:0c:4d:8b:0d:b0:82:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
Validity
Not Before: Nov 11 01:00:57 2025 GMT
Not After : Nov 12 01:00:57 2025 GMT
Subject: CN=d63c7e450dd69fb5fe5530329f8c3d309fa82309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:9a:01:8f:6d:89:1d:ad:f5:da:1f:70:78:
05:7e:08:0e:3f:f9:50:fe:d0:8b:ed:ae:3a:48:80:
64:8b:c8:3a:82:a8:f4:cc:05:6c:06:28:28:ef:ca:
27:81:a0:4a:a1:6e:12:cb:2f:df:df:70:3e:91:01:
5d:3e:ff:3c:a7:dc:06:f0:c6:36:ec:a0:12:b8:84:
d2:e1:09:cd:91:e7:3e:8f:de:1f:4d:9f:56:bd:5f:
6f:af:4a:96:fa:e3:92:2d:ef:8f:6c:09:16:54:6f:
d6:06:2d:bf:70:e4:fd:e9:52:6a:e8:61:37:d8:75:
31:89:4d:44:ed:db:70:a8:2c:21:12:15:c3:e3:07:
54:a2:a8:4e:46:10:e8:63:8f:9b:37:21:9c:59:f1:
a5:66:cd:3d:90:6d:53:fa:ee:ec:9b:44:06:f2:16:
80:a4:ef:51:d0:6a:a6:6a:cb:60:55:d3:cf:7a:50:
f0:36:d2:a1:b8:8c:f4:75:96:79:05:51:64:0b:f9:
56:9d:d7:c4:c4:80:d0:88:3a:c7:77:89:74:75:b2:
9e:60:e7:33:c9:9f:0b:21:a2:b9:cc:c4:d7:d3:11:
97:cf:96:46:ac:40:e5:d0:97:78:50:d1:9c:8b:f0:
32:84:a1:ef:3a:92:b4:4c:cc:53:a6:b2:a4:35:f5:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:7E:45:0D:D6:9F:B5:FE:55:30:32:9F:8C:3D:30:9F:A8:23:09
X509v3 Authority Key Identifier:
keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b8:bf:70:fc:d3:c4:39:0b:e1:a6:a6:3b:00:18:8a:fe:6f:
e9:de:be:a2:4c:a8:f5:92:53:5c:65:01:3d:80:af:9f:6f:90:
d3:24:e3:96:b5:81:9a:aa:62:f6:f1:f7:b4:42:78:c1:84:18:
97:c1:9e:bc:ad:a7:d6:ab:41:8f:1b:35:6b:e3:b0:34:b1:dd:
28:cd:ae:2e:af:2d:70:65:9f:99:00:01:ad:b3:6f:40:96:9e:
f5:c2:6c:68:0d:65:7d:a1:41:b1:7b:dc:2d:10:a0:eb:05:50:
66:6f:1c:b5:c7:6f:a4:35:90:02:be:85:2b:1a:6c:03:c6:85:
5d:ea:35:88:1f:e0:f4:b5:ba:9d:ec:4d:2d:92:bd:ee:16:f8:
e9:2b:b6:03:6a:66:84:61:f9:52:81:17:f9:5f:3f:c0:16:22:
79:eb:48:24:54:81:8d:77:5d:be:75:f2:4d:05:c7:15:b8:ca:
66:7b:9c:ad:bf:c1:10:9e:bc:15:9b:86:42:c2:14:b7:d3:87:
56:5d:4f:50:87:b9:67:aa:97:1a:7d:ff:af:2b:77:d4:24:71:
27:87:f5:db:90:0c:8b:36:cb:11:b6:15:12:0c:1b:e1:e1:da:
73:65:10:50:d3:58:93:96:4a:0e:06:5a:4a:4c:9c:fb:a4:46:
d0:66:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:07 2025 by rpki-client