Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: XpzCqBePS6mQp0YlaHRPGw0xejAYDeFUkEBPD4Qbx4w=
Subject key identifier: 64:FF:C4:4F:5F:BF:47:E5:C1:0B:BA:37:FE:A5:28:AC:F9:AD:53:3B
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 019A71EE70ED22CF450E4EF23769E765BDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 0231
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: 39jx+7h6SdlzaYZd/VetviSeniPI2yTjHbnTsAtk3Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:70:ed:22:cf:45:0e:4e:f2:37:69:e7:65:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=64ffc44f5fbf47e5c10bba37fea528acf9ad533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:21:4c:79:de:aa:4a:d9:3d:61:10:d5:26:
b9:03:51:a2:6e:a0:51:90:5d:79:0f:60:88:9d:46:
4c:6e:d4:aa:ad:a9:b2:57:99:57:76:1a:2b:c5:43:
ae:9d:33:fa:0c:e7:c8:62:b1:8c:0b:41:b9:af:23:
8e:1e:42:87:25:31:49:50:86:7e:8b:a1:30:c2:1c:
5f:f0:0f:6d:65:7c:45:aa:01:23:d6:a2:6d:42:e0:
09:87:a5:33:56:9d:da:19:6a:2c:5f:da:3c:8f:47:
4b:7c:df:5d:4e:c8:7b:0a:5c:d7:fc:bf:69:e3:d5:
dd:7d:40:3e:52:5d:9f:f3:22:8a:83:16:d7:54:d4:
c8:4b:c3:b2:c7:3f:64:8b:43:4a:14:95:23:ad:5e:
e9:f9:a8:51:e4:fe:52:4d:51:6a:c6:ac:66:f2:f5:
57:57:1b:f9:dd:f0:58:0b:7b:96:ac:95:3d:6f:df:
1b:6b:14:22:8e:ba:14:b7:ef:75:a2:2c:0c:d0:8f:
f9:01:d2:4b:35:ed:c9:ed:36:d6:10:48:af:96:8e:
47:c6:5d:42:22:c4:91:aa:f0:4c:3e:7b:1d:9b:a3:
11:a2:9b:fb:8c:c4:22:fb:b7:b4:f0:a3:03:84:51:
e3:1b:8b:58:6d:fb:d7:1c:fb:38:b6:9c:81:f2:06:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:C4:4F:5F:BF:47:E5:C1:0B:BA:37:FE:A5:28:AC:F9:AD:53:3B
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:70:a7:f6:c0:90:7b:a8:74:f0:51:a5:51:f1:b6:b6:c8:9b:
00:2a:0e:bb:43:d0:93:8f:73:6a:fd:2e:ab:71:97:47:2d:7b:
cd:ae:eb:ea:74:98:50:08:76:24:fb:75:1c:77:ed:2a:ae:ef:
2a:b0:0c:81:dd:98:3d:02:41:36:aa:bc:1c:36:42:16:57:16:
50:8e:d8:51:bc:38:6a:17:32:ce:7f:be:fd:d1:9c:19:94:15:
dd:a8:4e:ee:69:78:3a:70:95:96:0c:59:e2:71:cc:93:e7:ad:
64:21:96:2f:66:1d:c1:4d:5b:eb:6a:b3:39:47:f6:e5:bf:22:
c7:dc:10:d0:22:b8:75:97:fc:23:43:7b:3b:be:6d:00:87:35:
a9:c1:c8:53:20:98:e4:ca:5e:c3:49:bc:13:70:3d:e0:dc:f5:
bb:79:7a:eb:9c:71:77:30:ec:95:9d:bc:60:1d:3d:ff:1b:87:
06:46:06:b8:a9:a4:04:46:83:80:b6:01:d3:a3:ee:7d:b8:a4:
a1:1d:8f:5c:d7:2a:1a:1d:0d:02:d6:b6:6d:ef:fd:45:8e:9d:
ac:2c:ea:dc:9b:38:53:d3:8e:ca:48:77:a1:61:6b:54:c3:80:
df:61:4b:b5:50:9a:35:a4:b5:15:8e:e3:ae:bc:c2:3b:79:55:
36:4f:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:54 2025 by rpki-client