Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File: eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier: 7dUjehuSA1tT/Ya+tLcGJcc7hsN/JchZ9uucMwkR3Oo=
Subject key identifier: 64:72:00:B5:BF:48:2F:45:21:5B:4E:F0:C3:05:7A:49:86:57:E1:29
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer: /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial: 019A706DEA7895A29A517F8A0744004B6F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 01:00:42 +0000
Manifest this update: Tue 11 Nov 2025 01:00:42 +0000
Manifest next update: Wed 12 Nov 2025 01:00:42 +0000
Files and hashes: 1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: VGiTK+mODjcKpTKXmf8MTSDHoKf93wBy9Bd9K0lDLuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:ea:78:95:a2:9a:51:7f:8a:07:44:00:4b:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Validity
Not Before: Nov 11 01:00:42 2025 GMT
Not After : Nov 12 01:00:42 2025 GMT
Subject: CN=647200b5bf482f45215b4ef0c3057a498657e129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:59:11:d7:e8:6b:13:d5:e1:7e:54:05:dd:
a4:9d:d5:6a:3f:fc:14:b7:1f:d9:77:9d:eb:a2:7e:
24:4e:83:ae:f4:37:90:bc:cf:98:97:2a:94:c3:9e:
b8:f4:1f:8d:01:af:d0:a1:ae:44:ed:1f:66:c7:a6:
0a:a6:04:48:32:02:ab:03:5c:8a:f1:a3:fb:05:d3:
15:27:47:86:c2:54:72:5a:dc:36:7f:3a:41:57:35:
ec:ce:53:8e:20:a6:6e:df:92:46:4c:28:6e:f3:3f:
fc:59:8e:69:a3:89:91:94:2f:38:50:37:b5:59:e8:
96:10:0a:9f:33:34:22:42:f3:64:f1:86:54:dc:70:
6f:48:9e:e8:92:4e:35:2a:4e:5a:4e:a5:d8:c8:c9:
07:0a:5f:be:77:51:f4:0b:23:e4:e7:a3:bf:02:12:
cd:39:b8:81:25:95:74:97:0c:18:8c:b1:27:ff:1a:
b5:72:ea:fa:73:3e:a6:23:2a:f4:d0:13:e0:5f:66:
80:cc:e2:94:27:77:2f:d2:50:7c:bf:70:5f:96:bc:
99:69:d7:78:b2:7e:a7:2b:c4:92:d0:77:30:e6:0d:
cc:8e:e3:4b:00:86:06:ac:90:70:92:80:64:04:88:
d4:50:43:c1:fd:47:ed:19:9e:d4:b0:a5:b1:40:5b:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:00:B5:BF:48:2F:45:21:5B:4E:F0:C3:05:7A:49:86:57:E1:29
X509v3 Authority Key Identifier:
keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:73:7b:78:a5:10:54:39:8d:27:57:3d:22:24:d6:e8:18:91:
67:10:16:ba:f3:87:d1:23:8a:1a:e2:c1:92:3f:08:f8:1e:eb:
5c:3e:76:75:93:66:09:8c:7c:4e:69:8e:6d:d7:51:8f:d5:d0:
5e:a2:14:6e:9d:a7:09:aa:a0:e6:0e:00:af:fb:a2:c5:dc:67:
fa:83:c9:d5:22:fd:54:10:56:10:94:26:2f:ee:62:cc:c0:7d:
ec:ee:57:e4:c8:ca:ca:19:20:93:43:01:25:e9:de:f9:d1:f0:
47:7a:f6:50:9b:8b:51:e1:26:46:69:57:6f:d9:de:ac:80:dd:
be:56:7a:33:6e:9c:2f:ba:fc:cd:55:ba:12:33:be:8e:ea:a2:
b9:dd:45:ea:b9:85:4b:29:49:7a:e6:79:40:81:f4:92:e2:3a:
9d:1d:89:58:6c:cf:0a:80:20:57:40:0b:66:ad:79:ab:fe:35:
67:e3:96:06:80:ff:43:c2:75:91:11:02:40:6f:8c:27:43:50:
8e:e8:d9:8f:b0:af:4a:4d:c3:50:7e:7c:b6:af:92:24:60:8a:
ef:eb:a5:d0:05:fa:b6:15:aa:e3:9c:b0:44:c4:a0:f6:99:63:
0c:66:b7:7c:c7:a2:8f:d2:f0:f1:d9:c0:08:1b:35:30:2d:7e:
2a:da:77:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:42 2025 by rpki-client