Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
File: eXqQW0595YVil_bgOmViXeIsQvM.mft (raw, json)
Hash identifier: 0i8jp+QhNbENFXgEBuqzz+xMWZnnOR/xhEfCS8eoE0I=
Subject key identifier: 41:CD:85:AF:E1:28:D9:71:A3:13:C4:7D:7C:1E:CE:56:EB:C4:87:F5
Authority key identifier: 79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
Certificate issuer: /CN=797a905b4e7de5856297f6e03a65625de22c42f3
Certificate serial: 019A1127D9EF58F2AA4827DFA9F4EC9C6595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
Manifest number: 0EB8
Signing time: Thu 23 Oct 2025 13:00:15 +0000
Manifest this update: Thu 23 Oct 2025 13:00:15 +0000
Manifest next update: Fri 24 Oct 2025 13:00:15 +0000
Files and hashes: 1: eXqQW0595YVil_bgOmViXeIsQvM.crl (hash: Urt67qLv8QMxo1B6M2kce9YIsdg7zrhvfxCVmWS1Onw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:27:d9:ef:58:f2:aa:48:27:df:a9:f4:ec:9c:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a905b4e7de5856297f6e03a65625de22c42f3
Validity
Not Before: Oct 23 13:00:15 2025 GMT
Not After : Oct 24 13:00:15 2025 GMT
Subject: CN=41cd85afe128d971a313c47d7c1ece56ebc487f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:ce:62:ea:03:2d:6b:c7:ad:de:cb:da:19:
52:2f:dc:5d:68:05:94:40:6c:9e:fa:b8:ff:07:bb:
11:e0:5e:2d:4e:b2:8e:a8:90:9a:b7:47:7a:0b:e3:
27:b3:ab:a9:0d:0a:3b:bf:cf:82:b1:b9:8d:91:4e:
81:66:ee:1e:f9:fd:a2:0e:25:82:b5:a1:30:af:58:
08:d0:ee:fa:c6:55:f5:45:fc:02:ee:03:dd:23:de:
59:20:5c:2f:84:5e:d4:57:41:54:b5:96:16:c2:1c:
7d:42:5c:1f:b9:1b:75:c7:a0:aa:01:7f:d8:cf:bb:
29:d5:c4:eb:fc:17:44:51:9a:56:34:83:98:db:7a:
10:60:eb:28:49:d8:e1:70:6c:93:23:50:a2:90:40:
89:7c:86:8a:88:24:92:6c:2d:5e:ac:49:ae:1f:64:
71:03:73:78:9b:bc:9a:53:9a:74:ea:0a:ed:86:cc:
9a:7b:be:b3:39:aa:db:2d:29:d2:50:db:93:12:b7:
65:c1:73:53:c4:86:b7:13:3e:6e:2c:9e:9c:6c:ab:
03:ba:c9:2b:4e:40:f5:41:8c:0e:b8:7c:82:ad:cd:
d9:df:76:0d:d4:fb:7b:13:a0:98:39:4a:55:03:a1:
60:30:a4:08:a4:d3:b5:4b:43:85:fb:59:0b:da:36:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:85:AF:E1:28:D9:71:A3:13:C4:7D:7C:1E:CE:56:EB:C4:87:F5
X509v3 Authority Key Identifier:
keyid:79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:79:e9:03:ef:da:fd:59:3d:0a:fe:2c:33:bf:90:50:44:41:
80:96:dd:cf:c7:25:c3:14:76:a7:01:bb:20:c0:37:c0:43:0e:
b1:0f:5d:14:65:d4:48:ac:09:d6:19:26:74:92:e6:f1:36:40:
eb:fc:ac:4e:81:a4:95:8b:12:0e:b6:4e:ee:29:35:6e:68:98:
87:4e:e8:b6:ab:a8:2c:27:04:7e:c3:45:c6:4a:83:8a:63:6a:
cd:70:23:cd:1a:0d:7f:56:ae:bf:0c:b3:c6:46:c7:a5:8c:39:
35:84:17:d7:d9:71:4d:04:7f:19:ea:c9:5a:d4:bc:4a:65:7c:
3f:88:45:1c:82:bf:1c:68:3d:3c:bd:e7:21:c9:47:3d:b0:a3:
16:ba:f5:66:06:b8:c2:be:28:0f:fb:23:1e:e0:6c:d2:c7:e2:
46:d5:8a:3f:24:da:27:1e:7f:9b:c0:db:65:9e:74:8a:a8:86:
55:64:f5:2b:aa:7f:79:15:70:da:da:0e:0b:2b:d5:d9:45:70:
b7:70:3a:cd:a7:44:56:a2:10:99:c9:b2:c1:68:c7:04:6c:ad:
70:47:10:ee:b7:b3:aa:cb:6a:22:10:f9:c5:55:37:aa:de:53:
be:51:16:82:35:ae:bc:63:8f:c5:40:9b:a5:e7:9f:9b:6e:c3:
1e:97:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:54:50 2025 by rpki-client