Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: G+viXI/YMc0IzZ47+uAJ9tzOlUP5K/k2Ta5Hd/VaYOY=
Subject key identifier: CF:3F:64:4F:25:84:B3:C1:F7:5E:FC:F3:35:60:AA:28:0C:CB:93:95
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019A71B834C63BE2320D30C250BDAB14DB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: HwOvoxBmL+kibiAq9oaAwCTy5AghHZwK17uPhbE2YS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:34:c6:3b:e2:32:0d:30:c2:50:bd:ab:14:db:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=cf3f644f2584b3c1f75efcf33560aa280ccb9395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:2b:51:67:ea:6b:a3:05:d1:9f:67:bd:f6:
05:8f:55:3d:dc:b4:e7:d1:31:d1:3f:a4:ec:8d:b5:
64:6b:c2:ca:7a:40:4e:88:92:c9:96:43:d2:9d:50:
f5:01:4f:16:14:fe:cc:f5:77:38:91:47:91:ae:7c:
a5:f8:dd:47:76:4b:9a:06:88:1b:e3:62:05:4a:e1:
d3:81:1a:06:13:46:04:a6:40:c4:3c:be:71:4c:ff:
47:fc:f4:21:50:d2:92:a8:cd:30:cd:0d:29:f9:b6:
21:c4:9a:9a:06:76:c4:c5:03:60:65:99:63:3d:4d:
b2:d1:5f:de:7a:9b:3b:7b:9c:d6:79:e8:07:4a:5b:
16:5e:25:10:be:b0:0e:f7:c6:a7:f5:e8:7b:61:3f:
d5:81:c7:f1:a5:82:af:b2:ee:7d:09:69:19:f6:1b:
26:d5:81:a7:de:03:f1:65:e2:b2:24:3f:38:20:28:
9d:3e:df:4f:aa:fa:d0:6c:0f:07:47:b5:a5:55:85:
bb:e9:d6:98:68:48:55:f6:08:a2:4b:6b:d9:87:1d:
4b:5e:c6:cd:27:56:7d:b8:a3:20:d9:ea:ee:cd:45:
51:07:ef:69:73:90:09:24:b4:0d:6a:fb:3e:42:45:
59:ca:f0:a1:f1:ce:e5:a2:65:cd:20:da:1d:52:46:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:64:4F:25:84:B3:C1:F7:5E:FC:F3:35:60:AA:28:0C:CB:93:95
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2f:45:be:ff:e5:19:51:6c:fe:9c:b9:66:8a:5f:5a:72:13:
cf:fd:bd:5a:c7:de:51:fb:bb:7c:8d:85:72:81:db:7a:25:fd:
36:71:d1:94:ca:78:6e:f6:58:9b:4a:15:ea:bb:48:f7:44:d5:
36:e3:4b:86:b7:2d:1c:4d:f3:f0:70:c6:24:61:73:d3:a3:91:
37:71:c0:f1:8b:76:74:fc:d0:8d:57:b0:f6:bd:94:09:0b:23:
77:e0:e4:fe:d3:5e:78:7b:f9:2d:d3:b8:0c:a9:42:ce:be:2e:
be:c8:d8:f5:07:86:ef:ec:39:be:1c:f0:fc:91:a4:c6:61:c4:
8a:ab:dd:34:bc:c9:62:34:3f:e3:a0:81:df:54:f7:5a:71:ed:
01:56:84:16:c3:2a:6d:81:6f:06:2c:b1:fa:c8:c0:8e:d8:20:
16:d4:57:91:a6:aa:75:b4:7b:ca:82:6f:fd:10:78:1b:43:ab:
25:4d:c3:ae:31:bd:4d:a5:23:44:06:2b:f4:85:32:36:ea:5f:
07:49:c7:04:c1:7b:54:c8:ea:7d:e7:b5:0c:b6:b0:12:a9:cd:
1d:e2:0a:32:98:b3:d4:a8:aa:19:6d:4b:e2:ca:5f:f2:7d:77:
f7:78:85:bd:df:e4:2a:81:67:05:af:e2:c6:63:f4:a8:74:b9:
f3:69:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:20 2025 by rpki-client