Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File: eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier: xpy0Plxc+wzI9UxMMqvK427zsAB+Yq8oC0qGixhhN5A=
Subject key identifier: 2A:AA:43:AF:4B:63:EA:8A:21:5C:D4:B5:19:2E:4C:9E:05:72:53:3E
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer: /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial: 019A706E6BB084A6F4A1B278BFA2FF8B998D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 01:01:15 +0000
Manifest this update: Tue 11 Nov 2025 01:01:15 +0000
Manifest next update: Wed 12 Nov 2025 01:01:15 +0000
Files and hashes: 1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: hm58WVM0XujSmj815OHd2OJZzv3Yfgz6iq2bWVVYpUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6b:b0:84:a6:f4:a1:b2:78:bf:a2:ff:8b:99:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Validity
Not Before: Nov 11 01:01:15 2025 GMT
Not After : Nov 12 01:01:15 2025 GMT
Subject: CN=2aaa43af4b63ea8a215cd4b5192e4c9e0572533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:2a:7f:b5:af:1f:bf:33:59:ca:d4:d0:de:
e7:1f:60:78:8b:f8:41:20:7d:e3:11:48:67:05:45:
74:bf:47:2f:cb:20:3a:7b:a3:30:d4:c1:db:12:50:
08:8e:4d:8f:7f:60:8f:8e:fe:10:c6:6a:ba:e7:8e:
b4:40:ad:8a:07:1e:ae:3e:6b:82:d0:9a:83:d3:34:
1e:7b:61:75:03:f8:bf:67:13:64:62:20:40:9e:46:
53:9e:7c:39:18:e3:57:6f:bf:86:4c:16:66:74:96:
d5:97:00:cd:19:5c:90:92:3c:49:e4:ea:57:b1:77:
10:e2:d7:cd:f9:20:21:b0:7f:fc:fa:37:75:f7:be:
3e:00:84:b8:d2:1d:27:bc:c1:cb:9b:bc:35:c0:53:
80:cd:07:84:37:81:57:ad:02:47:3e:55:ad:51:48:
5b:f7:36:c1:cf:f1:2e:fe:9c:6e:03:b8:5d:c5:38:
02:d5:36:ba:cc:48:7e:bf:95:c3:e2:c2:e9:d9:8a:
f9:1e:de:e6:ec:03:8b:8e:06:45:76:12:35:2f:31:
76:a1:1f:82:da:3e:f2:1a:fc:54:c5:a6:71:48:3c:
a0:c3:a8:45:f4:39:64:95:09:35:3b:a3:8e:f0:da:
ba:03:70:f5:be:fe:75:65:ad:07:fe:eb:b7:ac:08:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:43:AF:4B:63:EA:8A:21:5C:D4:B5:19:2E:4C:9E:05:72:53:3E
X509v3 Authority Key Identifier:
keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:b6:13:5d:f3:9c:b1:a5:19:e4:9a:f3:5e:27:7b:5c:a9:
0c:f9:8b:96:75:1c:94:14:fb:f2:84:c0:6a:70:43:f7:d9:00:
11:46:e7:a4:0e:53:a3:b2:0a:57:38:53:40:dc:e6:b8:99:83:
a8:59:59:0e:85:d0:52:4f:65:56:24:8a:f8:c0:7d:60:ee:c3:
f7:07:0a:48:31:48:1f:dd:a8:a3:04:91:a6:25:52:d1:4f:e6:
7a:c3:15:8d:2a:84:2d:9e:85:c0:23:ee:90:01:6b:18:1f:a6:
b0:d4:37:62:b7:19:e8:e1:42:58:4b:1d:3f:31:f0:93:24:91:
dd:34:22:96:d1:33:93:56:a5:5b:95:53:99:12:9a:8c:e6:26:
e6:e8:7a:0c:84:6b:3e:fd:f3:90:5b:41:ab:67:ca:30:fc:58:
24:47:59:24:ef:c1:9c:d2:f1:37:54:e8:4f:8d:16:a2:55:4e:
e5:80:47:c3:a9:dd:3b:89:96:2f:78:d3:cd:9a:4d:30:92:e1:
e7:b9:cf:f9:39:86:03:90:d5:0c:0a:0c:cf:5f:88:04:ff:e5:
3b:c6:1e:96:52:f9:24:70:6a:66:34:84:6f:f1:d1:0a:29:88:
7c:c1:aa:95:8b:50:0a:79:c9:2d:f5:1a:35:4f:db:51:f5:be:
c7:d1:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:44 2025 by rpki-client