Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: sKoP2JVXOyU6nFpqruNSZwY9T8KiisD+yFalUc0GOJk=
Subject key identifier: 34:10:93:A0:61:6C:A4:71:E6:91:65:BB:76:18:88:D5:FF:0F:66:87
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 019A73A5DEF6958202DC8736DA1CCEB35701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0DC7
Signing time: Tue 11 Nov 2025 16:00:41 +0000
Manifest this update: Tue 11 Nov 2025 16:00:41 +0000
Manifest next update: Wed 12 Nov 2025 16:00:41 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: PVAjV70k5mJ5K1xrEEYZKNyNwtKcC+WZFu+d6138h24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:de:f6:95:82:02:dc:87:36:da:1c:ce:b3:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Nov 11 16:00:41 2025 GMT
Not After : Nov 12 16:00:41 2025 GMT
Subject: CN=341093a0616ca471e69165bb761888d5ff0f6687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:16:ac:36:c5:a1:ce:f7:04:3d:c9:b1:5d:
22:ef:b3:da:bb:2c:ec:12:33:7c:98:e0:e8:0c:ab:
9a:fa:63:98:eb:8f:06:ee:f1:a9:de:dc:30:ae:f2:
60:ab:ee:fe:c3:67:d6:d7:ad:8d:d2:f4:23:34:33:
df:0f:ba:6a:e5:33:76:2d:98:3a:f7:c7:d7:ce:77:
22:5f:3d:6b:e2:7d:1e:c6:e0:f8:0f:54:a3:64:a1:
92:a4:85:9f:4c:f0:8c:8b:41:fb:19:b8:d8:b9:6f:
22:61:0e:aa:d1:24:2f:e8:8d:bf:5a:86:07:b1:2e:
d2:51:af:c1:94:96:93:57:fa:67:c7:8d:d5:7e:3a:
0a:f5:71:bf:6c:22:97:7b:57:d1:a4:30:3c:40:8d:
57:d4:cf:73:b5:87:4f:15:7d:7a:8f:22:78:32:b8:
bf:e8:c7:90:f8:86:9b:54:81:76:c3:17:d4:ad:9c:
c5:23:a3:1b:d1:01:68:86:b9:aa:ba:82:d0:f0:ed:
db:ef:96:f4:e2:ba:c6:17:7e:93:cf:0d:6a:27:50:
a4:d1:1e:0d:8a:c5:7d:0d:19:02:eb:01:ea:e2:dd:
03:33:de:04:6b:6c:90:94:70:b1:0e:b4:18:62:8d:
c2:7c:55:04:72:21:25:a5:e1:17:51:1c:16:cb:e4:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:10:93:A0:61:6C:A4:71:E6:91:65:BB:76:18:88:D5:FF:0F:66:87
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:d5:10:5c:eb:15:5b:e3:47:1a:e2:0b:d2:dd:cc:8a:cf:
50:ce:44:0d:38:c3:72:ce:b6:27:1c:7d:3a:16:91:16:21:7c:
1b:c2:37:5d:d0:8b:eb:73:40:ec:29:e0:f6:62:78:0b:9e:27:
85:a2:00:59:94:46:57:8c:91:ec:97:c4:f2:7f:95:d3:c7:ba:
27:25:4a:18:7a:9e:f1:6e:1b:9d:98:d5:77:ff:44:44:b5:35:
d1:e3:e0:77:77:a8:0b:cd:a1:7b:cb:03:d1:d5:5d:9b:5b:3c:
68:31:fd:6b:f9:81:ff:63:dc:e9:3f:ef:10:47:b7:23:ad:c5:
f0:e6:6b:16:0c:98:4e:c3:18:58:fe:2c:11:1e:a3:8a:6a:dc:
03:8e:1a:9d:43:f5:e5:0e:0b:03:b0:97:74:b7:e3:7c:c9:1d:
32:c8:7c:46:a2:ba:ab:35:57:28:56:8d:2c:e0:9c:b8:45:d7:
aa:48:d7:8c:f9:9b:84:da:ef:dc:09:aa:d0:6f:25:b3:98:96:
92:df:8e:14:45:bd:50:9e:6c:00:4b:28:a8:74:79:e8:c3:d2:
d7:6b:bc:a3:fb:83:b6:8c:14:91:80:ef:6d:9e:d1:d7:22:12:
91:02:1c:99:fc:04:99:5d:ce:0c:a8:92:84:9d:95:6c:bd:3e:
bd:94:01:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpd72lYIC3Ic22hzOs1cBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTgyM2M2NDI3MWY3OTY5NDZhNDY4MjU5NmU3MzI4MzVj
YzRlYzgwHhcNMjUxMTExMTYwMDQxWhcNMjUxMTEyMTYwMDQxWjAzMTEwLwYDVQQD
EygzNDEwOTNhMDYxNmNhNDcxZTY5MTY1YmI3NjE4ODhkNWZmMGY2Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fgWrDbFoc73BD3JsV0i77Pauyzs
EjN8mODoDKua+mOY648G7vGp3twwrvJgq+7+w2fW162N0vQjNDPfD7pq5TN2LZg6
98fXznciXz1r4n0exuD4D1SjZKGSpIWfTPCMi0H7GbjYuW8iYQ6q0SQv6I2/WoYH
sS7SUa/BlJaTV/pnx43VfjoK9XG/bCKXe1fRpDA8QI1X1M9ztYdPFX16jyJ4Mri/
6MeQ+IabVIF2wxfUrZzFI6Mb0QFohrmquoLQ8O3b75b04rrGF36Tzw1qJ1Ck0R4N
isV9DRkC6wHq4t0DM94Ea2yQlHCxDrQYYo3CfFUEciElpeEXURwWy+Rc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQQk6BhbKRx5pFlu3YYiNX/D2aHMB8GA1UdIwQY
MBaAFBGoI8ZCcfeWlGpGgllucyg1zE7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAt
MjRmYjI0YjVhZTViLzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAtMjRmYjI0YjVhZTVi
LzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsnVEFzr
FVvjRxriC9LdzIrPUM5EDTjDcs62Jxx9OhaRFiF8G8I3XdCL63NA7Cng9mJ4C54n
haIAWZRGV4yR7JfE8n+V08e6JyVKGHqe8W4bnZjVd/9ERLU10ePgd3eoC82he8sD
0dVdm1s8aDH9a/mB/2Pc6T/vEEe3I63F8OZrFgyYTsMYWP4sER6jimrcA44anUP1
5Q4LA7CXdLfjfMkdMsh8RqK6qzVXKFaNLOCcuEXXqkjXjPmbhNrv3Amq0G8ls5iW
kt+OFEW9UJ5sAEsoqHR56MPS12u8o/uDtowUkYDvbZ7R1yISkQIcmfwEmV3ODKiS
hJ2VbL0+vZQBcA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:16 2025 by rpki-client