Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: mjxDVxGe8awv4D/6HIayy4UfcQJ/mpIXEmV01PQkO2M=
Subject key identifier: FA:52:8C:09:00:43:44:E7:E6:87:85:52:1D:91:FC:9A:27:C1:93:54
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 019A706E3E93BF336AA0160828B60D542259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 02C5
Signing time: Tue 11 Nov 2025 01:01:04 +0000
Manifest this update: Tue 11 Nov 2025 01:01:04 +0000
Manifest next update: Wed 12 Nov 2025 01:01:04 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: +Wyq4FoClCjXHtjXJB0DswUttW4+cO+uLEyF1uYc8TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3e:93:bf:33:6a:a0:16:08:28:b6:0d:54:22:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Nov 11 01:01:04 2025 GMT
Not After : Nov 12 01:01:04 2025 GMT
Subject: CN=fa528c09004344e7e68785521d91fc9a27c19354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:5a:d0:ab:2f:9d:45:8b:d9:53:73:ef:b4:
3a:65:13:65:bc:70:c2:db:6d:5b:54:6c:fe:eb:32:
b4:c6:84:cf:76:46:76:0b:91:87:e4:35:63:8d:89:
c8:a1:2e:66:47:16:af:07:1e:b7:d5:22:4c:54:d5:
8f:e4:7e:d1:72:25:c2:db:66:6a:40:a4:24:ff:44:
07:e8:ad:8c:57:e3:8a:ca:67:bb:1d:3e:b5:85:14:
b9:37:14:4d:4f:97:1d:b6:60:96:54:64:74:85:dc:
c1:af:9a:15:70:30:36:64:7a:35:57:78:c1:b3:31:
74:73:78:b9:b4:01:7c:c7:17:61:5e:94:48:9a:e8:
d8:eb:0a:92:01:dd:e3:c5:61:c5:1f:d3:4b:87:03:
03:ef:19:50:4d:03:6c:3c:f2:a4:e6:81:be:4c:33:
70:71:d0:9f:34:67:6c:8b:b1:dc:0a:40:68:6a:bd:
cd:e8:ba:87:b5:92:6d:77:48:e0:0e:a6:8e:09:e6:
06:00:80:42:5d:19:db:a3:9f:20:49:8f:a2:49:5a:
0a:50:e6:30:67:8c:02:ae:8d:0a:cb:dc:6a:35:11:
29:f8:08:b8:32:00:f1:fe:5e:c7:21:49:f1:b6:98:
2c:30:71:9e:c9:af:dc:64:f9:ad:09:71:c2:3a:f6:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:8C:09:00:43:44:E7:E6:87:85:52:1D:91:FC:9A:27:C1:93:54
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:65:35:67:73:10:c7:a7:53:62:5c:0b:ce:70:08:2e:b0:c4:
19:b7:68:ec:8d:06:fc:45:cc:23:08:37:ae:f8:e6:a8:57:90:
dc:cf:c5:ad:8a:09:b7:21:85:f5:11:85:2f:a7:a6:31:13:93:
dc:05:9b:7a:1c:19:7b:58:4c:93:44:17:63:be:f4:08:2a:ac:
84:88:4c:b1:01:53:44:4f:c6:b6:4b:84:41:e5:3c:7c:fc:4d:
aa:72:85:b2:99:0a:2b:86:06:bd:60:51:34:70:49:c3:dd:d8:
03:ad:03:af:ba:99:11:8f:14:7e:ba:7f:68:1c:4b:a7:6c:e2:
82:25:e9:0d:07:68:bf:4e:03:86:c4:e2:d5:75:6f:77:b1:6f:
11:16:78:9c:cb:13:26:fe:06:07:eb:6c:ba:5d:07:a5:9e:1d:
c5:53:26:19:2f:78:80:a5:ca:00:c8:ef:41:5a:53:d3:e7:f3:
a7:5b:e9:e7:9d:70:90:97:8e:0b:50:2a:f8:1b:73:8c:93:0e:
f2:18:d6:ac:35:b9:52:fa:e9:8b:b3:88:5e:84:c1:38:b7:2e:
75:76:96:c0:da:e6:f1:10:cd:f1:21:4f:4f:d9:d1:be:02:08:
ef:dd:bb:a9:f9:d1:2a:78:07:83:48:95:17:61:0a:7f:db:96:
84:1f:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:59 2025 by rpki-client