Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: BPX4o1RDL8wmk/QoxXWb2OhQW3xU3yR5GErQ0g7oJF4=
Subject key identifier: 34:33:B2:6A:2B:A2:12:54:74:FC:AB:B8:2C:62:EC:B4:A1:CB:3E:0F
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 019A71B9237BB8FFDF6D95B09A85B6BC19B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: sgt1HMweomKUUhSv92VIapR+OxFUorQYs+kNSGvmnEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:23:7b:b8:ff:df:6d:95:b0:9a:85:b6:bc:19:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=3433b26a2ba2125474fcabb82c62ecb4a1cb3e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:3c:37:e9:ec:8a:eb:68:42:58:d7:a7:5d:
de:0c:ad:1f:38:e0:04:57:d1:cb:b8:0b:b9:2e:55:
37:a5:db:49:cf:c0:b0:4a:c3:92:9f:3c:06:c5:c8:
d3:d6:6b:5f:ba:0e:6d:52:7f:30:d0:f0:ef:e5:04:
fa:a8:f8:c1:d0:f0:48:f1:64:70:37:5b:f9:3c:4c:
86:bb:d7:fb:fc:3a:a7:e7:54:35:72:83:0a:38:df:
b4:5e:fa:53:b8:41:11:24:40:08:c2:86:d5:38:31:
12:43:0f:ff:36:41:d2:7a:83:39:f3:6d:97:62:1b:
c1:63:36:e9:ad:7f:25:1d:5a:48:66:67:6e:2f:7e:
0b:9d:40:98:e2:8a:4f:64:83:79:c1:65:63:fd:c9:
5d:f5:ec:3d:cc:6c:8a:85:62:ac:79:7b:9d:6b:29:
15:cb:70:9d:fe:ff:5c:6b:8a:b7:21:d3:05:ec:e1:
0d:b8:36:7c:b6:68:57:00:a0:ec:d8:cf:2f:5f:3e:
1e:0b:c8:bc:71:66:ab:8f:d6:cf:5b:6c:05:5d:72:
d5:08:18:a1:6d:29:34:12:48:0e:08:ba:9b:78:bf:
7b:f0:6e:ca:4a:6d:9d:94:fb:92:ed:2e:85:e9:64:
a6:a5:96:f0:94:e6:d1:4b:e3:3a:8b:07:ca:b3:c4:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:B2:6A:2B:A2:12:54:74:FC:AB:B8:2C:62:EC:B4:A1:CB:3E:0F
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:ec:33:d3:ba:3c:c7:5d:9b:77:6d:b0:0f:4d:cc:85:a3:
8a:4b:0d:0a:66:22:ea:29:35:f5:d2:bc:92:12:d8:6e:6c:1a:
de:d0:2c:52:a1:ec:a9:f5:ca:16:bb:a8:93:b1:e6:e7:16:26:
2a:67:f4:ed:2d:5f:b2:8a:3d:97:e6:8b:f1:bc:ed:eb:6e:e3:
59:99:71:df:fc:9e:59:2e:69:9a:cb:e5:0a:cf:a9:d7:cb:f4:
54:39:0d:2b:b2:2a:fb:dc:64:64:20:3f:db:a1:91:8b:5d:4d:
c5:22:a1:6d:6c:f4:56:ab:df:bf:c8:5f:78:1b:09:02:68:7b:
bf:cc:56:fe:7c:d3:2e:16:c1:14:ec:0e:7d:d7:1d:1a:f5:e5:
73:94:1e:08:0d:8f:fb:74:40:a9:4c:5b:70:9f:e7:94:30:ee:
ad:a2:60:b6:8c:59:f9:6a:0c:f5:1e:24:30:ba:37:17:71:1e:
9c:01:a5:7a:71:00:97:df:e6:7c:80:c0:2f:20:c7:b0:a2:04:
b6:08:20:a2:c2:3d:09:d3:15:34:56:b9:c3:ee:68:16:10:46:
3b:b3:58:81:98:5b:4d:44:a6:a8:ab:fe:9e:0b:50:05:8f:18:
6a:e9:cb:e1:ad:7e:f0:d6:5e:f3:fe:3c:91:5b:04:ed:e2:81:
23:74:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:32 2025 by rpki-client