Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier: FJ/YOc3255Xs/oO1zJsXv2O9+CI+x86xBD98Zw7bxIc=
Subject key identifier: C9:BD:78:8D:0D:8C:9B:5F:75:8E:21:FA:1C:78:96:95:B9:FE:D1:8B
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer: /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial: 019A7225F579C3498397F4F5D7BE6E376036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: ytVH1OUHhh1YP1/ChGfwkm9cngy2jbcXy4qEEnhaGaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:79:c3:49:83:97:f4:f5:d7:be:6e:37:60:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=c9bd788d0d8c9b5f758e21fa1c789695b9fed18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:9c:52:16:8b:dc:57:34:ce:5e:25:5e:26:
97:d7:f0:5b:05:11:42:c3:ce:b2:6a:97:dc:de:19:
7e:69:32:65:eb:1d:dd:a9:e3:d2:6c:bd:c3:72:9e:
cc:26:61:e1:e9:be:ad:86:16:98:b4:4e:76:8f:5c:
a7:45:20:64:a4:fb:40:15:97:af:db:d7:02:ad:3c:
eb:e0:e7:54:8a:89:0a:c2:f7:b5:95:12:41:29:b0:
8d:3a:36:91:42:a0:a6:18:ee:f8:3e:79:06:47:1e:
ff:2d:68:ad:e4:8c:68:7a:d8:e5:0d:59:96:46:92:
4d:f8:6b:f4:26:cb:96:20:5a:9b:d4:6a:54:44:3e:
a3:c8:ed:47:79:e1:2e:23:8e:9d:7e:bc:9d:41:4a:
06:dd:d2:05:9a:71:fc:89:f6:74:df:eb:a2:28:bb:
80:87:88:c5:42:bf:d3:a2:12:91:0f:d7:41:02:74:
09:c4:d0:d3:81:75:2e:05:6b:fb:a4:4f:df:bb:5a:
ca:1c:0e:84:51:46:62:5e:96:8d:b7:e3:d9:e9:a7:
9e:7a:a3:5f:7d:00:e1:ba:6f:41:40:7e:90:de:56:
fa:d7:7a:6a:88:31:09:21:08:b5:96:5c:a3:d1:29:
f3:33:ce:15:bf:98:9f:23:6a:95:18:e7:4a:9c:43:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:78:8D:0D:8C:9B:5F:75:8E:21:FA:1C:78:96:95:B9:FE:D1:8B
X509v3 Authority Key Identifier:
keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c8:16:f5:92:5f:e0:5d:16:59:b3:20:e3:29:dc:03:6c:67:
2c:f4:ea:b1:6c:01:1f:3a:d6:81:d4:ff:28:6a:86:7b:27:f2:
8b:71:31:84:68:39:9c:38:58:5e:48:40:32:84:b5:4a:a6:bc:
d5:50:b2:52:3a:47:20:29:63:b0:96:de:54:87:da:f3:cb:45:
99:7b:64:21:ec:6f:83:7c:5e:48:1b:aa:35:ca:86:4e:6d:32:
f3:22:c8:74:a4:21:3b:c7:ee:db:52:64:20:e5:36:80:f6:6e:
c8:7f:0b:a3:bb:ba:97:ce:a1:37:48:fa:c6:1a:87:8a:f1:35:
3f:a5:d0:5d:d4:b9:9c:c1:75:da:7c:50:11:11:b6:6d:51:a7:
02:af:c6:a7:89:52:67:99:74:18:b9:6c:07:80:6c:ec:53:cb:
cd:f4:0d:07:ea:86:fa:ab:9d:24:0f:10:03:d1:69:53:fa:1a:
56:f2:4a:81:58:20:73:11:5f:95:1e:25:40:9d:50:d4:c1:3f:
78:e6:19:b6:58:ed:98:74:cc:36:3f:06:fe:7d:e1:e7:67:b5:
95:16:8b:7d:69:31:a7:46:7d:b3:c5:18:41:ce:f1:48:52:aa:
55:c8:a0:9b:98:5a:f9:ef:20:68:49:58:5b:d1:65:7d:70:e7:
dd:df:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:46 2025 by rpki-client