Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: P2Vjakx4NXA0rDr958V6DZw4na59YsP1Hm42/4ikwpI=
Subject key identifier: 15:39:1F:4B:EF:48:C8:A4:B3:95:DF:0F:20:D0:6C:5C:A7:1E:16:91
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 019A71B7C4CACA972C81EE63BB009D41AC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: FNoi2MBwRhtLBcTZnNr4T6QYAgaGy7lEpvQvNnHMAt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c4:ca:ca:97:2c:81:ee:63:bb:00:9d:41:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=15391f4bef48c8a4b395df0f20d06c5ca71e1691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:8c:a9:97:88:8b:41:75:e4:1f:43:88:7d:
a9:db:57:dd:fd:55:8e:ce:08:8a:ec:35:cf:65:05:
19:f4:3f:29:b3:87:b3:40:07:c6:60:94:d4:14:5a:
88:b7:85:75:db:61:70:d6:82:a7:5a:91:07:9a:d6:
ca:30:c8:2a:0b:56:92:cb:6e:87:da:c6:5c:e9:5a:
44:72:b9:ad:3f:2f:e8:77:b9:57:d9:ab:df:58:26:
66:34:cf:6b:5c:ca:85:10:4b:ee:19:70:bd:51:80:
77:ac:45:6f:9a:59:ad:b4:36:b4:86:01:09:54:fe:
a3:3f:58:ab:a3:bc:80:1d:57:dd:bb:2d:b5:62:ca:
28:0e:6a:6a:00:5f:d2:37:7a:8e:28:12:e5:27:82:
cb:51:2e:7e:0d:d8:dc:91:96:6f:32:2b:32:0c:f1:
ba:5d:7b:54:3b:bb:51:9f:6a:00:b0:ed:e6:95:85:
18:b4:18:8f:24:a0:95:48:72:b5:c9:4b:97:a4:b7:
e6:21:ab:7f:b7:77:26:82:2f:e4:07:d4:c2:c6:8d:
88:35:96:9b:75:42:80:5f:b0:c3:a9:15:30:9b:af:
b5:34:9c:bc:49:83:2a:7b:4d:b9:e1:ae:ae:5e:ec:
f5:b0:30:1f:80:33:7a:8f:b8:21:d2:ad:9e:c3:93:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:1F:4B:EF:48:C8:A4:B3:95:DF:0F:20:D0:6C:5C:A7:1E:16:91
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:de:76:5d:67:ef:c6:33:53:9c:3a:63:c3:0d:e5:52:08:9d:
1b:9e:21:71:d5:30:56:ef:86:af:5b:33:77:99:a2:59:9e:0a:
77:80:d5:7f:04:02:a4:93:64:f8:96:2b:3d:8c:5b:9b:3b:14:
96:3b:13:b2:58:95:5b:8f:55:61:5a:69:6f:44:2b:86:20:5e:
3a:b7:ba:f5:ac:1a:a5:7f:da:dc:97:09:f0:9d:e4:03:9b:66:
92:97:9f:ff:5c:50:f5:95:05:6d:fc:df:3b:76:eb:3b:da:f6:
67:a8:4a:d0:c3:8a:76:1c:aa:cb:43:22:88:86:6e:a4:a3:70:
b2:f5:54:dc:fd:0a:31:ae:49:41:40:52:3b:37:d5:62:34:13:
c4:3d:16:47:4e:cc:bf:86:61:a7:a8:3c:ae:73:e9:16:8a:df:
32:00:d5:61:5d:99:ad:d8:59:b0:66:13:2b:8f:4c:d3:4e:de:
58:43:35:05:6d:12:5e:61:17:99:64:8f:42:11:af:55:7d:b8:
36:52:a5:13:70:f1:a9:67:29:9a:e3:46:a8:8e:0e:41:06:46:
41:ae:53:c0:f1:2b:f8:42:fb:b3:e2:5d:7a:65:61:35:b2:88:
4f:24:ad:74:96:a2:0c:a1:d8:d8:9f:ad:47:d4:44:65:1f:dd:
74:6d:00:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8TKypcsge5juwCdQaw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTc3NWFkZjk3MTcyZTJmNjhmYzkxMDUzMDlkMzc1M2Jh
MWY0Y2QwHhcNMjUxMTExMDcwMTAwWhcNMjUxMTEyMDcwMTAwWjAzMTEwLwYDVQQD
EygxNTM5MWY0YmVmNDhjOGE0YjM5NWRmMGYyMGQwNmM1Y2E3MWUxNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOWMqZeIi0F15B9DiH2p21fd/VWO
zgiK7DXPZQUZ9D8ps4ezQAfGYJTUFFqIt4V122Fw1oKnWpEHmtbKMMgqC1aSy26H
2sZc6VpEcrmtPy/od7lX2avfWCZmNM9rXMqFEEvuGXC9UYB3rEVvmlmttDa0hgEJ
VP6jP1iro7yAHVfduy21YsooDmpqAF/SN3qOKBLlJ4LLUS5+DdjckZZvMisyDPG6
XXtUO7tRn2oAsO3mlYUYtBiPJKCVSHK1yUuXpLfmIat/t3cmgi/kB9TCxo2INZab
dUKAX7DDqRUwm6+1NJy8SYMqe0254a6uXuz1sDAfgDN6j7gh0q2ew5NcqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU5H0vvSMiks5XfDyDQbFynHhaRMB8GA1UdIwQY
MBaAFHgXda35cXLi9o/JEFMJ03U7ofTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJkMXJmbHhjdUwyajhrUVV3blRkVHVoOU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xMTRkMjUtYTFhYS00YTMzLWI3YjQt
NTYwZTliMDUzZGQxLzEvZUJkMXJmbHhjdUwyajhrUVV3blRkVHVoOU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xMTRkMjUtYTFhYS00YTMzLWI3YjQtNTYwZTliMDUzZGQx
LzEvZUJkMXJmbHhjdUwyajhrUVV3blRkVHVoOU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi952XWfv
xjNTnDpjww3lUgidG54hcdUwVu+Gr1szd5miWZ4Kd4DVfwQCpJNk+JYrPYxbmzsU
ljsTsliVW49VYVppb0QrhiBeOre69awapX/a3JcJ8J3kA5tmkpef/1xQ9ZUFbfzf
O3brO9r2Z6hK0MOKdhyqy0MiiIZupKNwsvVU3P0KMa5JQUBSOzfVYjQTxD0WR07M
v4Zhp6g8rnPpForfMgDVYV2ZrdhZsGYTK49M007eWEM1BW0SXmEXmWSPQhGvVX24
NlKlE3DxqWcpmuNGqI4OQQZGQa5TwPEr+EL7s+JdemVhNbKITyStdJaiDKHY2J+t
R9REZR/ddG0ASw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:51 2025 by rpki-client