Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: zGYX4ji8Nohv+ZtTe8/PncXkGKhfxjdm12oMM5ZFr7s=
Subject key identifier: 2D:D1:A0:58:B1:3E:F5:63:5F:26:94:FE:3A:8F:2C:12:28:5B:39:D1
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 019A72260EE793AF3D965A4A484BA532CC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: 6CarkxIu2ICMZkkK9POuuSFsWZCqkulVtPelBrwF6Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:e7:93:af:3d:96:5a:4a:48:4b:a5:32:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=2dd1a058b13ef5635f2694fe3a8f2c12285b39d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:a5:0a:6e:ad:bc:f0:e2:a3:11:f3:74:4a:
aa:30:df:a1:1f:7d:c9:9b:5f:47:98:59:7e:9b:72:
f5:0d:7e:57:6f:17:24:36:04:99:09:12:04:12:ee:
e9:ff:db:56:0c:6a:44:b0:a1:e1:88:9e:f5:fd:f6:
d1:39:f2:74:99:23:87:86:24:14:83:9f:55:25:cd:
fc:e4:9a:fe:c5:b4:23:93:ab:be:9a:41:0e:e5:23:
ec:ac:18:7c:8f:4e:62:45:70:30:a9:cc:60:92:f6:
f5:5b:9f:59:13:41:94:05:23:f5:86:a2:90:f6:a9:
5e:1d:de:64:1b:4c:31:b4:63:1c:27:d5:8c:c9:55:
35:5e:0a:fa:7c:7f:cd:97:7d:df:8d:a0:cd:ac:bd:
92:2f:d6:6d:9d:c4:2b:73:aa:d9:4c:15:df:db:7b:
36:37:63:ec:85:68:de:a9:58:19:6e:3b:5f:70:ba:
42:f8:a3:4e:65:f3:e4:f1:0d:ca:67:49:b4:6a:2f:
6f:7e:fd:c4:57:6f:0c:32:b6:90:dd:48:54:2b:1f:
45:ae:f3:d4:4f:77:9f:39:c1:b2:2d:89:2f:62:1e:
37:9b:ad:b4:97:64:04:af:79:f7:73:49:88:55:39:
97:66:e6:ae:ee:8a:b7:1f:bd:b9:57:7e:78:ab:a6:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:A0:58:B1:3E:F5:63:5F:26:94:FE:3A:8F:2C:12:28:5B:39:D1
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:20:6d:ac:72:d0:a6:99:31:b2:92:d7:79:99:bb:88:52:
1f:f2:58:6b:f0:d7:77:8c:3d:00:5d:4f:16:76:4b:43:08:33:
ba:f8:09:5a:10:f0:ac:0a:d2:13:67:b9:a1:7f:03:1b:82:36:
38:f9:fe:44:c2:9b:6e:49:9d:ba:2d:df:73:61:f5:24:35:56:
dd:4d:28:7d:1a:be:88:dd:97:c2:1f:35:2d:0b:37:df:7d:58:
2d:40:12:88:90:ed:93:f0:8f:f1:58:22:61:ab:60:b2:7b:63:
68:f7:37:3d:4e:0d:b2:00:14:86:16:fc:5e:bd:47:8d:f6:c2:
25:d7:83:9f:df:a6:ae:38:03:81:c6:af:61:b1:dd:2d:dc:be:
70:06:0d:df:82:4e:e2:01:e5:ae:88:f9:08:9a:7b:20:a8:66:
59:16:b0:b1:03:60:1d:b3:61:7d:7f:fa:a1:76:bd:33:30:90:
56:cc:e0:ba:c6:eb:02:2f:63:f2:14:79:c2:6e:b8:23:3a:88:
8f:44:f3:63:6c:e6:b2:9a:3a:fc:bc:03:80:6c:46:37:2d:65:
27:e4:32:20:04:f3:9f:3a:c5:46:25:91:0c:0c:2e:5b:9a:61:
89:16:71:d8:4b:4c:f0:17:fc:df:55:52:e2:86:b7:f4:88:2a:
85:1e:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:09 2025 by rpki-client