Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File: EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier: QlfmFjFl2F7TG/uM510eaLAWs3z9IsVOn0UdgxzlWd8=
Subject key identifier: 08:05:12:C7:A1:BE:82:69:A8:18:BB:23:68:83:6D:95:B0:EB:F4:58
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer: /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial: 019A71B8D427719E7CA3D15CDA8C0257C997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: MYakqRW+Bw/i36dVvF6+XdgRc0iJnfVJmvuuvD4EQuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d4:27:71:9e:7c:a3:d1:5c:da:8c:02:57:c9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=080512c7a1be8269a818bb2368836d95b0ebf458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:d9:02:e9:31:99:a7:80:eb:92:5f:cf:92:
7f:f5:c3:ec:52:0f:d4:79:79:73:9b:60:2e:99:67:
f1:39:4c:41:99:a4:4e:54:b3:38:db:63:a4:b0:f7:
0c:0f:69:79:6b:bf:de:53:c6:68:e9:4c:ca:da:38:
6d:39:21:22:d0:9e:cb:b2:14:07:80:ae:4b:ba:18:
f9:27:b2:c5:5a:72:61:65:1b:ee:cf:36:20:f7:3e:
3d:2f:70:35:22:8b:13:01:8a:d6:62:59:a8:e3:7a:
3b:6f:db:6c:f8:a3:4c:4d:2b:1b:c3:f3:26:50:5e:
ac:ca:94:aa:95:25:ef:e6:69:2f:9c:19:1d:dc:89:
cf:ea:6a:52:fd:ee:b0:0d:ed:9c:8b:90:a3:9d:d4:
7b:ef:cd:80:22:64:23:d7:f0:1a:da:10:23:71:98:
ad:5b:0d:e5:c7:23:53:ea:74:6c:d2:f8:4b:37:31:
9e:04:32:f3:ee:cc:14:21:20:c3:a4:91:e7:05:df:
7c:29:73:7c:6d:bb:a3:19:53:5a:35:39:53:b0:46:
63:ce:58:e8:cd:2e:9f:af:74:79:86:7c:2f:94:c0:
ad:36:a7:2d:8a:9e:16:ee:df:eb:3e:65:61:6b:4b:
cf:03:77:7b:ed:95:d6:92:6d:f6:75:31:8a:eb:63:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:12:C7:A1:BE:82:69:A8:18:BB:23:68:83:6D:95:B0:EB:F4:58
X509v3 Authority Key Identifier:
keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:37:ac:d3:4e:a1:1e:6f:c9:19:7f:7c:e3:5d:16:e2:cd:60:
36:b7:b5:74:14:16:cc:c0:58:2d:82:83:f2:63:90:da:bd:eb:
fe:e5:68:32:78:47:17:af:51:1b:18:b1:5a:e5:aa:d4:f2:6d:
03:5d:30:14:db:7f:68:7d:3d:c4:92:c7:bb:e3:0b:94:1f:7b:
f6:02:cf:d4:47:8c:c5:a6:71:11:5e:be:d9:df:1e:c2:a6:f7:
d8:2b:4b:2c:58:b5:94:c5:03:ae:bc:35:02:97:c8:66:29:ed:
95:01:df:bd:30:4d:35:b3:48:80:44:92:97:75:e6:82:57:4e:
45:c6:3b:e9:49:ff:02:69:1e:a8:f0:ae:85:e5:72:0a:c2:a8:
9c:a4:9c:38:d8:d5:27:e8:bd:e5:1a:56:b4:47:07:e8:5a:dc:
5a:40:3c:e3:e2:ad:9a:95:d3:06:d2:39:f9:0d:fc:0e:f8:3a:
fd:a7:81:45:2c:17:11:59:6e:06:f9:c7:82:9e:20:5d:32:5b:
9b:0e:d3:a3:5f:08:57:3b:8f:02:c3:0a:58:c5:a9:dd:a3:8f:
a0:27:14:ea:1d:e8:56:06:ce:63:9e:e0:25:2f:c7:4f:1b:70:
19:bc:14:c4:80:ac:9f:0f:2f:ba:bb:e0:08:60:82:e0:0d:7c:
ed:1f:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:19 2025 by rpki-client