Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: AOEjX5kHfkM3P0TEVPfF10rM4WSHon0JkLiePP24+hE=
Subject key identifier: F6:8A:A0:57:7B:58:75:60:F7:20:49:18:66:61:68:A1:2F:AE:85:D3
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 019A71B7D5A8AE7754F718A633D0DEF87ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 0581
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: HC+oeqZYYGFmbnKPkxPZZuj+pMi9c4UXrwTa3ofe3ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d5:a8:ae:77:54:f7:18:a6:33:d0:de:f8:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=f68aa0577b587560f7204918666168a12fae85d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:a4:74:16:61:f1:ae:31:8d:5d:d2:42:0c:
43:91:e2:f0:4c:15:63:aa:a5:52:09:54:86:91:8e:
ba:ee:33:57:fe:0e:d1:5b:d1:3e:3d:78:de:76:01:
6e:db:a9:86:58:f2:04:a6:6d:9a:a0:17:e4:2d:5b:
f6:0b:df:a5:ae:c7:65:30:f7:d8:39:96:76:b3:5f:
44:fd:85:e6:e5:84:60:40:16:e7:a6:b4:8a:e3:d0:
34:34:ff:13:83:39:34:6e:fa:c1:f4:29:aa:95:bb:
cb:ed:5f:3c:a6:f9:09:77:f3:44:5e:be:cc:ca:90:
39:eb:7e:b0:63:db:b3:72:ef:56:7c:6a:82:00:90:
84:f0:c7:f3:78:19:12:87:15:cb:8f:5b:fd:6e:2f:
27:ed:03:72:15:4d:b0:83:71:5e:7c:b0:96:7d:7c:
2d:1a:6f:d9:1b:13:a6:00:20:83:ad:69:4f:cc:10:
8a:19:f0:79:0d:37:e5:28:3f:51:92:d0:79:3f:ce:
1c:e1:3c:bb:c5:27:b0:e2:81:27:fb:a1:89:d4:10:
53:05:51:1a:d2:f4:2c:77:a4:9a:9c:28:13:93:cd:
91:67:84:b7:66:dd:81:3a:04:96:d2:2a:d1:eb:81:
dd:f7:79:43:18:58:ac:81:db:94:e8:7a:36:cf:1f:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8A:A0:57:7B:58:75:60:F7:20:49:18:66:61:68:A1:2F:AE:85:D3
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a1:d7:0c:5f:71:86:d2:82:84:ce:87:3b:75:52:b4:eb:6f:
6d:81:a0:b0:87:36:e8:d4:9d:58:a6:63:74:08:d0:83:e2:d0:
46:4b:a8:be:fd:d3:d4:34:e2:de:23:14:8e:e8:1d:b5:61:b1:
1d:22:db:d3:33:56:46:6b:12:00:59:6c:1b:05:96:9a:13:c6:
7e:a9:10:b5:69:ea:1a:00:5a:f7:bb:9d:88:2d:4a:6e:84:e3:
9b:b0:e5:67:4f:61:29:f5:b5:18:de:91:9a:3a:39:22:7e:b2:
f6:a6:1f:cb:46:69:ca:12:e6:69:39:e9:43:4a:15:4c:63:b7:
76:75:8b:f7:bf:e6:da:a2:10:62:e8:d3:e9:e5:0c:c9:e4:a4:
c5:47:d3:20:02:7f:ac:06:66:45:3f:8b:6b:05:88:ad:b4:77:
4b:93:74:4e:7a:d4:1d:95:29:01:d1:d6:1b:6b:50:ce:16:1c:
e4:62:45:57:79:ef:a1:c8:9c:48:b1:de:2f:39:75:04:c4:e9:
99:d5:d1:ae:b9:f3:60:87:13:97:dd:21:68:c8:0a:13:87:3a:
a4:9e:00:f7:b7:9e:28:f8:d0:50:2b:01:0a:92:2e:ff:49:b1:
16:37:79:8a:5a:a9:f3:b5:66:73:4c:42:e6:e9:aa:25:d9:2a:
ef:43:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:21 2025 by rpki-client