Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
File: eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json)
Hash identifier: mBLvdlGHhWMVAY+hnhrP9feVKrvfLf95g/QEE6bCxFg=
Subject key identifier: 73:FA:9F:F3:F6:5B:8E:14:C9:AE:64:8F:0F:E5:47:34:06:D8:C7:95
Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
Certificate issuer: /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Certificate serial: 019A71B9028E365A8E236C2C58B382F124EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: S+51HyBp6u3MUUJ4N+lXVJQUUeYrylm00gf8WY8AasM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:02:8e:36:5a:8e:23:6c:2c:58:b3:82:f1:24:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=73fa9ff3f65b8e14c9ae648f0fe5473406d8c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bf:8b:75:70:30:e7:59:ff:5e:8f:78:d1:db:
97:af:83:55:6a:ec:74:16:94:f2:16:1b:0c:3b:76:
3d:29:fc:4d:4e:fb:da:14:6f:08:c6:d1:91:30:5d:
70:52:ad:d7:36:b0:7c:e0:15:25:e9:75:0d:63:77:
32:7f:f3:2e:3b:b1:28:de:2f:a4:ea:c6:b4:ce:b6:
a1:6f:a9:0d:15:dd:f6:ce:5e:bd:f3:7e:0c:2f:46:
c7:6a:09:35:ba:1f:74:45:84:c1:8b:8e:b7:04:bf:
7c:2f:55:b0:a6:85:d3:69:7d:aa:46:a4:a9:59:55:
c1:ae:cc:b0:13:37:a2:63:20:7d:60:09:45:51:ac:
87:64:44:2d:9f:ee:33:88:58:87:c2:dd:5c:da:84:
59:7d:4c:1b:dd:ad:60:09:ca:68:47:68:92:b7:a1:
71:6f:ed:9e:1c:d2:94:14:58:76:6f:92:6e:37:8c:
c5:1b:f5:e6:a6:5b:0f:0c:9f:39:00:0d:3c:7e:57:
82:52:b1:d4:64:73:66:1e:dc:12:c4:ec:be:70:58:
4d:82:f5:a1:90:33:00:ff:b2:5f:0b:aa:4f:08:84:
56:9f:8d:95:c9:d4:3a:71:40:df:60:83:37:85:a9:
28:e9:97:ee:b2:16:f7:30:a6:42:f0:b2:62:84:30:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:9F:F3:F6:5B:8E:14:C9:AE:64:8F:0F:E5:47:34:06:D8:C7:95
X509v3 Authority Key Identifier:
keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ef:5e:5c:ef:87:59:e9:7a:37:07:a0:2d:f6:c5:c9:37:e0:
f2:a5:ff:c5:92:3f:b5:22:9f:f7:4a:58:2e:89:39:c5:7f:cb:
28:b2:70:d4:01:c3:36:e3:0c:b5:a6:a8:ea:c9:a0:2a:5f:ba:
da:28:0e:09:6d:0c:ed:90:b8:f5:ed:57:74:58:e1:5d:e6:0a:
37:8a:d4:70:2b:82:f5:09:76:b1:fe:4f:42:d1:10:6c:8c:4f:
d2:d8:16:83:ab:6d:73:3b:3f:db:86:29:ad:ff:0d:f2:f3:fa:
49:58:ac:f2:ab:90:5f:f1:f7:06:8d:bb:30:40:3e:cd:8a:5c:
cf:da:6c:1b:59:53:3e:2f:74:ff:ba:99:89:6f:37:40:7a:29:
ce:2e:e0:1b:37:14:d4:d5:0b:6b:75:04:e8:e5:e3:20:65:ce:
e9:00:aa:f8:f9:7c:99:1a:34:e8:d9:50:a1:13:ed:ad:4e:e8:
5a:f0:ce:32:da:43:10:e8:58:b5:f4:a9:af:66:a9:a8:38:3b:
49:21:43:52:b8:47:bf:c0:e2:ca:22:53:05:c7:2a:54:a3:36:
9a:6b:fc:0d:1c:6a:15:b5:8d:e4:47:70:93:0c:94:7e:2d:5a:
15:9f:93:48:f6:7e:81:ad:1b:72:30:ca:7b:af:88:78:5d:27:
99:c8:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:54 2025 by rpki-client