Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File: E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier: jENq2UN7pAPJ/P4Agdd5g+urhpt/rQ0jjm8UH8G62S8=
Subject key identifier: DD:6F:93:3D:D4:47:8D:07:C1:1B:3E:50:09:0A:15:D7:7E:BC:4B:63
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer: /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial: 019A72939A4AA9D766E02AA7A46A518C1AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: LQTU0RsLkEnodyEK9qu+SAZ5xF+M9KkDMPbhZrPrFeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9a:4a:a9:d7:66:e0:2a:a7:a4:6a:51:8c:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=dd6f933dd4478d07c11b3e50090a15d77ebc4b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:82:41:36:03:e1:d6:44:5f:59:ec:16:d9:
9f:c8:e1:dc:c4:81:6f:de:bc:bc:32:eb:fa:e3:82:
a6:67:d6:7d:a9:87:79:5c:55:b5:6f:11:c3:a2:b6:
c8:90:41:96:9b:b0:69:4d:69:c3:32:2a:93:ed:bc:
86:10:ba:92:db:b9:aa:03:34:05:95:2c:88:c4:cb:
ae:18:ac:bb:08:c1:05:2a:ed:3a:9e:ec:3d:57:61:
81:c8:33:03:0d:23:f1:e9:e9:e1:46:f9:61:f4:25:
2a:4e:40:be:2b:ca:4e:f6:cc:fc:f3:68:a8:43:eb:
a8:33:78:02:2b:f5:d1:c2:5f:28:d0:64:f5:7d:71:
9f:d3:e2:7e:e8:33:45:26:b6:f6:4e:da:b0:46:f9:
67:40:7c:16:22:36:28:b1:be:ed:aa:59:b1:92:fa:
a5:de:21:d2:64:49:92:46:7d:92:c5:2c:3e:c3:83:
8a:09:ba:7f:9d:92:54:db:04:1c:5c:ff:d2:24:ec:
6f:0e:33:10:a1:57:2e:d4:4a:c2:b1:95:b0:37:a9:
b1:bc:f7:22:e0:3a:7a:1b:a8:59:8f:00:ba:d8:f7:
b6:67:85:a6:9e:24:6b:6d:5e:81:27:aa:fe:66:62:
2d:41:b0:25:1b:d4:76:ef:49:c9:e0:fc:45:5e:7e:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6F:93:3D:D4:47:8D:07:C1:1B:3E:50:09:0A:15:D7:7E:BC:4B:63
X509v3 Authority Key Identifier:
keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dd:d6:b5:9c:a2:47:9e:5e:21:e6:df:aa:ca:a9:93:74:0f:
7d:38:26:db:87:09:31:14:3f:fa:86:79:da:9b:91:b8:07:78:
f0:ca:e2:d0:1a:1b:e3:71:23:13:b9:05:1b:d1:17:9b:80:93:
ff:66:34:7f:c6:0d:af:6c:67:08:6c:e2:d0:06:94:e7:2f:9c:
9c:fe:c9:3d:98:93:71:18:95:42:d0:79:0c:bc:df:da:c7:12:
93:5c:df:44:63:43:24:47:82:d2:75:5e:d2:6d:87:57:f4:40:
e4:20:2b:81:3e:ab:4e:77:44:80:c4:e1:02:02:fc:45:c0:ae:
a1:54:f0:f1:1e:c2:c6:57:b8:0f:49:09:4b:d4:18:8f:f8:44:
1d:7d:ff:45:64:bc:ac:ae:07:5e:9b:f0:05:46:5b:03:3b:72:
85:d1:87:c5:8f:41:c1:79:07:39:87:65:01:ac:a6:41:1c:35:
c5:8a:48:04:41:5a:ce:7c:e8:05:08:fa:30:2f:df:3c:c5:15:
4f:c3:06:20:2a:2c:a5:60:a6:13:1e:7f:1f:75:66:c9:87:a8:
95:36:6b:08:f9:bd:fe:37:33:e9:9a:01:68:92:23:ed:d3:e1:
d7:07:71:d2:f9:c0:e2:91:4c:53:24:e2:08:48:13:22:e0:28:
23:6a:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:14 2025 by rpki-client