Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json)
Hash identifier: 8fV6vi3BpNNGfvX8YINKxvxMk8Zt1AsGlbYUE0eMhm4=
Subject key identifier: 80:E4:DC:A6:B7:C8:A6:D8:C1:6D:3F:D9:C1:64:39:40:1D:89:D9:8A
Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Certificate serial: 019A722626D539845EC3AEEDAFFE4ABAA3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
Manifest number: 0108
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: Bn8OhUoOcT0Nnnc+tArZhJMOxRSQa/KqfQl5JGYYt5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:26:d5:39:84:5e:c3:ae:ed:af:fe:4a:ba:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=80e4dca6b7c8a6d8c16d3fd9c16439401d89d98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:a3:ee:af:2e:1e:ea:a0:9f:27:f3:2b:9e:
fa:3c:c2:a3:5c:81:a3:fa:8f:8b:8c:bc:82:10:fe:
fd:02:71:2f:6f:a4:81:25:a4:a6:78:d0:7a:cd:b2:
eb:45:b1:aa:6c:88:15:98:5e:e3:1e:df:7c:21:5c:
2e:25:2b:8b:8c:fe:76:0d:36:63:d4:1d:4e:8d:c0:
78:21:1b:08:43:c4:2a:29:84:72:11:40:b5:52:4a:
5e:09:86:fe:81:ca:fb:71:7e:22:16:85:ed:d6:4f:
03:90:1a:1d:ed:e1:7d:e5:ef:be:76:e3:af:54:f9:
67:13:49:27:92:26:cf:ee:00:eb:e3:d4:61:ef:25:
d6:d2:86:ad:c0:44:65:6f:f6:07:f0:95:b1:77:70:
88:82:62:f1:1d:26:68:44:77:3d:9c:b6:70:2d:48:
46:a7:f2:be:6d:a7:5e:b3:ed:ba:2b:54:10:84:90:
d0:c4:a8:b8:c0:b2:cd:00:49:91:02:6a:24:95:b3:
6b:3d:eb:75:d0:0b:9f:ce:f1:24:d1:12:bf:ad:7d:
64:46:6d:d3:24:af:b1:6d:2c:f7:03:a7:09:b0:f0:
5f:83:0c:d4:bb:b9:2e:39:db:5a:c6:d6:f2:cc:01:
bf:2f:87:b7:1d:79:38:71:c7:37:3c:3b:33:fa:1b:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:DC:A6:B7:C8:A6:D8:C1:6D:3F:D9:C1:64:39:40:1D:89:D9:8A
X509v3 Authority Key Identifier:
keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:19:7f:7f:62:d2:0d:e0:eb:0c:4b:e3:25:4b:66:68:ed:
15:a2:d9:b7:ed:30:ba:12:42:a8:5b:6a:a3:4f:b5:f2:e0:60:
d6:65:f9:27:97:53:c9:d0:3e:05:5f:87:3d:7f:d7:d1:87:28:
e2:83:eb:35:9e:91:7d:f5:56:bd:ea:b2:64:62:e6:54:8a:4f:
8e:96:2e:67:b4:0b:7c:be:2b:e6:0d:55:bc:a7:b4:0e:b6:72:
cf:7f:c8:5c:b3:68:e9:aa:0b:7c:f6:1a:1e:b3:94:68:c8:70:
4c:ee:43:f4:04:fb:ec:13:c2:fe:39:55:c1:f1:1d:9c:d7:ae:
bd:38:36:90:ad:42:3b:7c:94:89:38:1e:da:31:c5:a0:e9:5c:
6d:39:70:59:8a:ae:10:35:56:fb:be:5d:33:19:b0:93:52:cf:
5e:b2:1e:5d:71:dc:00:3b:b2:b9:9f:82:49:a9:b0:d5:eb:dc:
06:ef:5d:88:21:80:1d:f6:45:b3:33:b3:53:a6:e4:28:6c:62:
05:3c:39:04:e1:85:48:0c:88:96:3d:bb:55:78:19:d9:f8:cd:
63:62:36:18:30:3b:5d:93:5a:67:6f:88:a5:1f:9c:c8:bb:01:
65:bf:92:0f:0c:b5:0f:89:92:e0:92:4b:aa:b6:70:42:f6:68:
66:fd:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:44 2025 by rpki-client