Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
File: EYKb9HZLMe40tE2AYpIJqMcGXq8.mft (raw, json)
Hash identifier: CzcbpXRaf+OScY1xUOSD22ImvlqDzfJht/DQ6RzPgI4=
Subject key identifier: 45:3D:C3:8A:D4:1D:24:7E:05:AF:A9:01:64:02:F4:3F:AA:40:E5:38
Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
Certificate issuer: /CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Certificate serial: 019A71B775751E384D3E03C460747C57E8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
Manifest number: E3
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: EYKb9HZLMe40tE2AYpIJqMcGXq8.crl (hash: ouiDvIxkvslnLvsBnwwd8s8n6A1H/vtw/ytBIF4eK40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:75:75:1e:38:4d:3e:03:c4:60:74:7c:57:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=453dc38ad41d247e05afa9016402f43faa40e538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:7c:ee:ca:5d:23:6c:17:28:5f:f1:02:07:
5f:17:b0:d9:ce:4e:2c:1d:9c:a4:e4:1e:7e:9e:5c:
7a:bb:0b:62:15:ef:11:71:23:cc:76:86:e0:81:0f:
bb:ea:54:c1:bd:7e:f2:dc:b5:9e:2b:22:32:2c:bc:
50:8e:80:f1:8b:28:87:2c:63:87:bf:a5:91:32:d7:
ca:0d:7d:af:cb:8d:a6:8f:fd:cb:7e:65:c8:f1:b4:
5c:84:be:27:09:f8:8e:0c:0a:86:dd:9b:d3:11:07:
dc:0a:09:6c:a2:5f:f3:e0:ae:84:70:80:cc:50:31:
fc:39:67:0e:9d:b3:56:c9:08:7e:7e:e3:79:75:ec:
04:99:d0:49:e2:32:36:e0:31:28:4c:f7:77:e9:8a:
e0:81:a6:11:f6:a7:7e:49:73:58:99:80:e9:e8:b5:
1f:51:d9:3c:e4:0c:e5:c7:eb:52:c9:00:1c:a5:49:
63:10:df:1c:56:f7:02:a7:e0:f5:b3:28:cf:8f:74:
b9:fe:c5:65:4a:47:2d:ec:62:6e:47:a1:a2:f8:f5:
03:51:95:55:c3:c8:78:7d:80:01:a4:e9:aa:45:d6:
33:e0:e8:16:f4:be:a2:32:1c:17:22:86:f7:90:33:
da:ce:7d:9f:5b:30:75:5c:10:fa:b5:67:de:cb:5f:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3D:C3:8A:D4:1D:24:7E:05:AF:A9:01:64:02:F4:3F:AA:40:E5:38
X509v3 Authority Key Identifier:
keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:62:93:f2:f0:9d:ad:b3:e4:e2:ff:a8:9e:c0:04:fc:e7:1b:
7b:77:02:61:32:b9:b8:ac:6b:de:e7:01:32:9e:5f:86:bc:db:
df:ef:10:7f:df:61:59:49:2d:29:4f:9a:bb:52:6e:41:a7:18:
79:46:1d:11:ca:39:58:99:f5:4e:1e:92:5b:eb:8b:03:63:20:
a3:50:12:9a:97:e0:f8:b4:ad:4f:7a:1b:ec:cb:57:fc:46:55:
b4:94:77:be:bc:35:60:8b:2b:3a:3c:9a:b9:eb:6c:39:30:c6:
99:ed:67:70:0f:a5:53:fc:d3:1b:e3:39:5f:b1:28:41:d4:44:
d3:5b:13:9d:5a:39:fe:4b:c0:10:ba:e6:f6:0a:ab:6b:b9:59:
85:28:84:75:4b:83:2a:bf:8d:f3:0d:be:2c:53:6f:03:9f:c0:
5d:1b:86:36:1d:84:05:67:d6:5b:7f:d9:42:f8:4f:4c:03:19:
f8:06:65:d3:24:08:fd:f8:fb:3d:4a:50:19:6d:f7:a3:91:7a:
12:d6:92:d1:8c:55:11:56:08:c3:3f:97:c4:bd:6f:fa:b1:ba:
21:e0:ec:e0:5b:f0:a3:ca:9f:c5:71:8c:12:e0:70:00:cf:10:
d4:49:de:92:f4:66:a4:0c:b0:d0:da:fd:79:e3:1c:38:18:ed:
33:7e:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:05 2025 by rpki-client