Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
File: ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json)
Hash identifier: qhdTzEZLrJ3ctkhHuA/Avy6mDubePOwfIQHykgtYCzQ=
Subject key identifier: 97:A4:4C:B5:E2:7B:F6:94:CB:17:BA:09:66:51:41:28:E4:2A:D5:CB
Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
Certificate issuer: /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Certificate serial: 019A71EEB8B746334B68C4370CEB6A4C7F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
Manifest number: 0630
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: zDN1KsVrS0O/uIdhJ8wvh/hbp+C99PUCZQhHbcFN8HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:b7:46:33:4b:68:c4:37:0c:eb:6a:4c:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=97a44cb5e27bf694cb17ba0966514128e42ad5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:10:fa:46:5a:0a:d3:95:e2:94:33:f4:a2:
e5:65:14:ec:78:71:bc:38:ba:2c:5d:e3:59:14:1b:
c2:80:d2:15:80:16:46:41:96:74:77:24:68:2c:d9:
fb:d7:4f:63:66:59:23:0e:fa:33:cb:4e:8c:21:4f:
1a:8c:47:07:96:65:97:1a:36:0a:20:32:1b:99:54:
6b:40:4f:85:2a:5e:0f:ea:f1:8c:eb:4d:88:bc:4e:
da:33:a5:5b:12:36:68:4c:81:bf:cf:a8:25:d3:97:
16:ee:49:eb:f3:1f:c9:f3:d3:6b:33:e2:2a:bf:50:
c5:51:c9:c4:8c:14:75:3c:fb:fc:62:11:33:7f:ce:
8f:8c:ed:d0:49:14:a6:d5:ac:4c:27:e0:9a:6f:13:
96:6e:f3:35:37:6f:90:6f:1b:3a:c5:22:f6:7f:ee:
b6:fe:b4:4c:0d:12:07:1d:43:b4:3e:4c:d1:dd:d3:
2e:71:78:aa:04:bf:5b:3f:60:60:ed:19:46:0e:85:
5b:bd:34:c7:2b:db:b1:64:0f:f3:12:dc:e5:9f:e8:
a8:f7:79:fa:c6:b1:0a:a0:89:fb:83:c3:1f:45:c4:
94:ff:d5:67:56:59:8f:77:b1:e3:64:f5:41:aa:33:
7b:b7:dc:bf:95:f7:4a:f6:37:84:6b:36:4e:5b:30:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:4C:B5:E2:7B:F6:94:CB:17:BA:09:66:51:41:28:E4:2A:D5:CB
X509v3 Authority Key Identifier:
keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:79:29:0e:af:b7:fb:15:67:88:9c:6a:f4:bb:55:fa:37:
93:63:da:90:d6:d2:b6:d4:cf:bf:e7:12:9c:d8:da:6b:22:bc:
7c:b7:16:17:70:f6:a2:95:70:ae:89:39:87:c7:b1:30:71:f3:
3c:03:25:7f:06:e8:d9:74:76:17:53:8f:e0:bf:5b:a2:6a:65:
02:a0:e8:55:b4:49:a0:7c:8a:d6:50:4a:84:a6:e7:1e:23:4b:
8b:86:e6:be:ef:7f:d4:47:d4:37:98:cf:f1:0e:37:cf:15:97:
20:90:5d:4d:ff:90:a2:14:de:89:0a:69:a5:e4:e9:6a:f2:4d:
30:62:1f:a8:b5:6a:6e:7c:d6:ab:23:46:9d:d6:ef:86:06:dc:
34:43:dd:3a:56:52:ae:a2:13:97:e8:b9:e9:5d:f2:78:b0:dc:
53:68:3a:50:6c:98:f5:0a:b3:02:47:34:af:0d:af:25:24:ba:
b0:93:bd:f2:7f:35:4f:b6:8a:b2:04:1f:1a:9d:95:b6:50:00:
ec:9f:56:1e:d8:5f:65:c9:f0:a8:43:1c:0f:81:c2:51:88:77:
93:9f:02:f8:b9:51:f6:a2:0d:44:70:fa:d4:e1:48:2c:0b:56:
b7:bf:05:73:b7:29:6a:6d:c2:c4:37:bc:9a:59:88:a7:7c:07:
7d:2c:5b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:02 2025 by rpki-client