Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier: ir/jQ+LLCv5RosY1JdYbFRdLVtc56PvIHjRUSSeTWhY=
Subject key identifier: 7C:98:EF:6F:D6:95:26:7C:AD:28:55:E7:BF:1E:55:A3:DF:39:E3:22
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial: 019A72262A1CE14BEA763C7AC89AED04EBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: OCTVA2lPehQWxOjrBI3EjNOhghEjIJ1zlIyBRlwRsKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2a:1c:e1:4b:ea:76:3c:7a:c8:9a:ed:04:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=7c98ef6fd695267cad2855e7bf1e55a3df39e322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:28:df:a4:30:d0:71:e1:b8:98:bc:1f:37:
05:75:5e:d8:20:86:8d:a1:8d:d4:0f:71:6d:f0:3c:
6c:29:6e:cc:a0:d7:86:52:e1:66:db:4a:8b:17:58:
7c:b1:2e:8a:3d:86:57:cd:ae:c8:3f:af:58:58:76:
b4:b9:fd:91:76:b9:77:3a:6e:02:4d:0f:0f:6a:78:
83:3f:98:ae:35:0f:7a:b2:df:88:41:d1:62:6b:66:
fa:e0:80:f1:b6:d3:d2:91:c4:83:db:44:ee:49:47:
8f:ae:5c:f0:c3:e1:93:9a:0f:53:51:71:54:3b:30:
1f:5d:c0:16:ff:94:9c:d4:05:c9:62:fb:94:58:f9:
5a:88:3d:1b:6c:6d:e1:d6:9a:d7:28:54:33:2a:55:
c8:73:be:55:7f:a0:b7:f4:13:1d:fd:9b:5b:d6:90:
fc:e1:07:c0:a9:a4:42:cf:4e:da:7f:00:ef:db:ef:
14:05:ec:d7:d8:a8:98:86:39:97:e9:ce:d8:70:19:
19:9f:db:97:6f:63:0e:b0:04:94:a1:27:0b:c2:4b:
9e:85:2e:4e:22:a8:57:07:66:8e:ee:ec:3a:a0:55:
6f:92:f7:ec:8a:8e:d3:69:d0:ce:1d:1d:9e:9b:66:
61:ab:eb:11:2b:02:e4:38:4f:16:20:54:68:45:b3:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:EF:6F:D6:95:26:7C:AD:28:55:E7:BF:1E:55:A3:DF:39:E3:22
X509v3 Authority Key Identifier:
keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:3a:86:12:80:c8:8c:12:5e:53:83:ca:c5:8b:39:74:8d:
3c:44:d4:36:6c:1e:2c:6c:d7:15:4f:d4:14:17:b7:f2:25:c8:
13:4c:74:37:ef:08:af:e1:d8:7f:a5:c1:1a:29:73:e1:cb:1a:
df:93:ef:dd:a7:7d:ad:5f:3f:f7:c1:78:ed:e3:f8:93:56:f5:
ae:a9:25:e9:0c:10:c6:e9:3e:c6:90:62:95:8a:e3:15:52:e7:
db:c0:2c:fb:a8:50:99:b3:46:74:82:7e:fc:53:8d:5f:0f:d1:
a4:de:fb:23:52:7c:ea:02:23:63:5c:6d:f5:59:ea:95:e8:e0:
a9:d9:fa:a2:b9:ee:9c:06:35:68:e6:b4:ee:e5:28:99:8d:57:
53:98:69:eb:e1:50:a9:13:91:bf:6a:c1:05:c7:25:2a:aa:1a:
5d:42:11:d2:49:ea:38:ee:dc:f9:d6:a1:55:73:7c:f5:41:66:
b9:71:e7:cc:b3:f3:6f:c1:3a:68:70:b5:9a:90:b4:b3:d9:55:
97:db:e5:3f:56:d0:67:30:e8:59:a9:e3:a0:d1:bd:85:b7:2e:
a8:65:52:1e:98:69:a6:1a:38:aa:9a:3b:75:dd:44:f0:cf:5d:
2d:f5:3a:9d:88:ca:9e:cd:07:f4:04:59:2d:3c:56:93:31:03:
b0:14:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:18 2025 by rpki-client