Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
File: EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft (raw, json)
Hash identifier: qGdWJXVn46Hz2X2VEMa41Wjat41mUb4vLRxxOy4w7g8=
Subject key identifier: 80:91:20:AE:54:71:E5:56:47:E1:44:CE:07:3C:E2:F3:5A:74:D6:B8
Authority key identifier: 10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
Certificate issuer: /CN=108ecb64ba2998b6c41501427238518922d630e4
Certificate serial: 019A71EEF7336D896155FEBDE40BA958DDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
Manifest number: 54
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl (hash: XrJlkMb8LXPvtSBjl5QLvf9oRb8/fqW81Cw2MYe/+Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f7:33:6d:89:61:55:fe:bd:e4:0b:a9:58:dd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108ecb64ba2998b6c41501427238518922d630e4
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=809120ae5471e55647e144ce073ce2f35a74d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:51:8a:0c:c6:12:50:75:eb:be:6a:b2:ff:
59:5f:0a:f5:fd:f6:aa:f1:9c:5a:b0:c9:37:a0:e6:
76:87:0f:9a:b6:8c:61:5f:ef:ca:eb:53:35:b3:07:
fe:5c:bb:67:d4:ab:19:91:83:bf:5b:67:b7:41:fa:
53:2a:01:ec:89:02:34:95:74:56:06:6f:4b:48:a8:
67:30:20:0f:15:ee:fb:8d:6c:f0:f8:72:76:54:bb:
98:c1:e6:7b:37:21:de:10:66:fd:b1:3d:04:62:3a:
00:d3:73:e0:de:a3:79:2a:e6:2c:d5:f7:e6:68:cc:
bf:37:25:20:e4:80:85:b6:f6:05:33:a1:d4:55:9e:
7a:83:67:24:51:c2:3a:ec:38:57:1f:7e:0b:83:fd:
14:d5:13:2b:90:da:a2:1d:8c:36:13:2e:68:7d:25:
0d:05:54:35:f7:c1:d8:98:0a:58:bc:24:8a:da:99:
2e:eb:4f:99:db:a7:96:7f:1d:26:0b:0f:65:f4:17:
f1:25:1d:e0:60:10:22:96:82:39:ee:29:ff:d2:7b:
04:79:96:de:72:7e:bf:c1:53:5e:1d:6a:81:fd:ff:
d0:3f:3d:55:26:b3:c5:19:80:d4:dc:e2:07:e5:de:
e9:d9:8a:de:d7:cd:67:7f:fb:95:b0:0d:02:7b:3b:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:20:AE:54:71:E5:56:47:E1:44:CE:07:3C:E2:F3:5A:74:D6:B8
X509v3 Authority Key Identifier:
keyid:10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:83:58:cb:f0:87:56:f0:e6:36:54:82:4a:94:0d:38:0d:6b:
00:b4:37:57:b8:60:54:26:82:2b:18:c8:15:20:25:13:e9:23:
82:3d:ca:38:11:a6:d9:7d:53:bf:bf:75:7f:06:f8:60:ac:22:
ad:98:52:04:39:f2:4f:5a:53:bf:8d:af:61:cd:8d:d6:bb:5e:
88:d0:c0:96:14:c1:b9:ad:c2:11:ad:e1:ad:78:94:67:55:13:
80:08:90:fb:23:29:1c:f0:24:d3:f0:e0:f0:b0:67:68:21:5c:
57:de:49:5d:39:1a:02:aa:37:14:c3:98:84:b8:86:b4:1c:1b:
37:b1:0f:d6:84:a8:b1:22:e9:c7:be:7b:83:da:b8:c1:08:98:
23:c7:d1:a9:bf:75:67:8d:9f:21:e7:44:03:ff:7b:97:7c:d9:
64:84:b9:42:74:d2:03:29:48:5b:c6:c8:29:4e:52:27:70:fd:
3a:4e:c4:77:b7:79:07:e0:1d:b4:92:9d:cc:48:96:d8:0c:be:
a5:5c:6f:fa:c0:dd:f4:58:cd:4c:e4:97:02:73:a8:74:18:97:
4b:e7:52:19:b1:e5:a4:9b:15:56:bd:96:1f:e9:e2:9e:a0:35:
30:09:a4:3d:3f:c9:24:e1:af:b3:2b:69:d2:ee:cf:aa:07:b4:
8a:f5:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:08 2025 by rpki-client