Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: om/FJTDBGi2UHnPPxDs6sqIEjnFf/juyRykypTrTILE=
Subject key identifier: B9:38:FF:B7:9F:F0:55:24:D0:2A:DE:85:2C:8D:0D:E7:47:6B:3A:0B
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 019A71B7AD8300D4DC4420DE016B59F875F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 11F7
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: KvK6j1pbKtkuDkt92OKUtZjbCN8CZZuyB/asu9Jkd14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ad:83:00:d4:dc:44:20:de:01:6b:59:f8:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=b938ffb79ff05524d02ade852c8d0de7476b3a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:b0:0b:21:c1:46:2d:6a:a1:cb:0b:cb:d2:
7e:51:21:97:9d:13:04:90:ca:18:6b:c3:89:c5:0c:
f5:c4:48:ed:af:a7:03:1c:a2:18:8b:b4:cb:84:f1:
08:5f:51:67:51:a8:d6:95:98:92:55:97:bd:4a:db:
47:74:b7:dd:91:bd:97:18:bc:53:21:ec:45:b4:b5:
f1:2f:bf:3e:45:cb:30:93:2f:ed:d1:c7:ae:36:d4:
ea:5f:81:f4:4f:d4:96:7e:c6:9e:42:1b:ba:72:80:
0c:9a:71:2e:10:2e:02:5e:37:d6:6f:51:f2:9e:a2:
ba:d1:22:ca:45:f4:01:b2:04:89:86:b0:91:d0:bb:
19:ff:a9:81:e9:ca:ca:b1:b9:95:1d:83:5b:86:05:
b1:77:fe:3f:71:c3:99:75:6d:a3:d4:c9:e9:41:5e:
2c:50:da:57:c2:76:74:9c:71:58:1c:54:de:48:c7:
f3:58:ab:5e:67:35:31:f4:00:5b:2b:1e:f9:be:1f:
ac:35:8b:f6:15:ce:65:c8:ec:73:26:09:c3:85:f4:
d9:f0:38:e5:de:cd:3d:2f:a4:60:a0:98:fa:40:52:
bb:f0:eb:f1:fc:20:22:f3:c8:19:a9:7c:b6:37:c2:
3c:d4:4e:2d:cf:85:9c:d8:b5:67:86:dd:c3:3e:54:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:FF:B7:9F:F0:55:24:D0:2A:DE:85:2C:8D:0D:E7:47:6B:3A:0B
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:15:86:92:d7:83:f0:6f:84:12:0d:96:11:d1:37:19:d8:
28:4f:9d:56:41:c1:6e:87:af:2a:87:cb:4e:58:87:2e:12:3e:
4c:3e:5a:0b:2c:10:82:83:4b:f9:e8:3e:cc:77:67:33:05:b5:
f9:e7:2f:42:13:4f:67:9d:61:7a:49:36:0b:b1:85:78:7a:05:
55:91:e7:a4:59:d8:9c:9f:72:6a:14:18:57:6d:0b:25:87:21:
54:79:db:0c:1c:54:4e:33:06:a7:15:30:68:a6:bb:f2:da:dd:
c7:c8:09:90:f4:61:26:cc:91:86:15:41:75:31:47:be:53:26:
41:e2:1e:99:64:96:06:b7:25:96:ca:f5:27:45:53:db:be:6e:
2e:45:ae:3d:79:87:12:d5:39:bb:60:4a:35:f3:a2:00:58:e8:
3c:64:a1:33:92:66:6c:3d:08:44:dc:f8:20:40:74:86:5e:8f:
ef:c2:f0:78:77:ee:fb:75:55:e7:45:8c:00:72:58:bd:67:ae:
d5:8e:b8:81:90:15:42:17:2b:49:05:c3:c6:0b:bc:cd:71:a4:
2b:d0:3d:fa:7b:fc:e1:65:bc:34:b6:d3:75:40:4e:dc:13:0d:
ed:d7:5d:4b:84:7b:24:73:52:65:1e:8e:37:94:5b:97:7e:5b:
f5:95:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:57 2025 by rpki-client