Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: JPYtveomcHzmBMRlYZHAaZ9x2t5x21BUgsT7REhW1NU=
Subject key identifier: 32:54:9D:BE:7E:B4:D0:B6:E5:1D:9C:B8:5C:2D:0A:BA:E4:01:BF:77
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 019A71EEF08B792CCD6B8C40A2ACF2455354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 091A
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: q3qwy42ylkjyj9oEgN5Q5gnd4N9Q4Ev3dbVbZwvsKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f0:8b:79:2c:cd:6b:8c:40:a2:ac:f2:45:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=32549dbe7eb4d0b6e51d9cb85c2d0abae401bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:88:ef:e1:9b:59:70:33:26:84:56:ba:e1:
61:c5:ca:ff:4f:c0:96:52:39:76:21:b3:97:96:cf:
ca:d5:86:eb:65:c6:df:07:3c:7d:2d:37:7c:9f:a9:
80:fb:0f:58:dd:55:08:19:c6:e1:6b:f0:ef:94:2e:
76:e0:c1:75:d2:93:58:bb:c0:25:44:ba:90:0e:7a:
cc:77:f4:b4:be:d0:5a:e5:69:49:20:b8:a4:5b:4d:
09:c5:2c:f4:25:6c:3f:9c:d3:38:30:3f:8c:bc:4c:
e7:80:9c:a5:58:89:9d:33:bb:21:3a:7b:96:d9:7d:
d4:f1:d5:11:3e:4f:6b:c7:da:13:2d:45:d9:37:4f:
db:d9:b4:98:32:94:d1:d6:f3:ff:32:4c:ab:00:c4:
5b:4d:48:d7:0c:52:01:ef:53:d1:d7:85:02:04:bc:
cc:f8:0c:72:60:e3:5a:b2:3e:ec:c6:a4:c6:91:c2:
14:62:f3:7c:69:21:ca:53:e2:3f:22:df:5a:3c:a2:
f3:1d:b1:c8:1e:c1:20:00:db:15:d2:d5:df:f5:58:
f8:48:94:d0:c5:d5:f4:89:be:4e:9b:00:bc:cb:e1:
ea:bd:a9:16:99:d2:43:17:d0:78:0f:94:a3:b9:7b:
d2:5c:59:4a:5d:ef:48:3f:62:22:6e:a8:fe:61:50:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:9D:BE:7E:B4:D0:B6:E5:1D:9C:B8:5C:2D:0A:BA:E4:01:BF:77
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0a:25:53:56:0d:07:66:d6:58:c2:9b:3d:28:dc:37:2a:7d:
e9:ba:37:a7:fb:a3:e0:93:69:c0:89:31:5d:e1:33:a8:09:bc:
61:89:c8:d7:a9:22:22:29:a3:0d:c3:4a:6b:cd:86:b4:bd:42:
66:f1:7e:c9:7b:41:5e:4d:b5:c1:6a:08:23:af:6c:35:11:b9:
b2:93:81:67:c0:24:44:76:7a:0d:7c:8f:5a:6f:61:88:5a:bd:
33:9e:b7:39:72:ba:a5:82:ee:18:11:c0:f1:a1:7c:d1:18:5b:
9a:4b:b1:70:12:42:24:a9:c9:d5:68:e4:96:25:2c:88:d4:69:
a2:ae:bf:1e:ec:21:2d:b6:c0:78:3c:5f:af:6c:82:86:43:b7:
3b:f5:a0:4b:92:d8:6f:5a:0b:87:a3:f5:6d:d1:31:b5:e2:db:
5d:19:99:18:ac:61:0e:fd:3b:3e:98:ee:bd:67:b7:dc:85:73:
95:31:8e:4f:b1:a6:f2:9f:30:3c:19:22:a1:e6:35:b1:c1:13:
4c:ae:2b:b9:04:d1:1b:5a:f2:2d:b4:32:7e:eb:db:f3:76:c6:
7a:fe:7a:51:5b:b3:7c:c2:59:a4:f6:62:a0:4e:2b:80:ec:aa:
d3:c8:b6:4a:2a:58:68:3a:9f:1f:dd:25:f7:7d:8b:a5:c2:b6:
0a:44:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:13 2025 by rpki-client