Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File: EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier: 3cver60JuYuwL60iZ0toWphofaMd6jsAgW0++2dbhwQ=
Subject key identifier: 54:08:2F:3B:C5:25:02:ED:74:35:F1:D2:0E:C6:85:C8:DD:10:D2:A1
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer: /CN=122a541caf138341bd32798940de206052910341
Certificate serial: 019A7112E7B43D9D1921143643C40A69BB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number: 0DA0
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: VBAdLc5fJsk7b2B/JttlY9+KGtfaYok7RG2k9E2y1/c=)
2: N9zcYe5ReKGYCwNwcNWVqIdGiS0.roa (hash: VpzrJQRuZQfy5BAF/SwMEyOY3wzqdR1C+GvTYF7gE24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e7:b4:3d:9d:19:21:14:36:43:c4:0a:69:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a541caf138341bd32798940de206052910341
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=54082f3bc52502ed7435f1d20ec685c8dd10d2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:fd:c9:85:7d:e0:e8:06:14:a0:5f:1e:3f:
84:18:7c:a9:d9:45:8a:c7:09:be:43:dd:a6:e6:88:
1e:00:5b:a5:77:b3:9b:97:b8:66:30:71:31:11:7f:
b0:4c:c6:6d:13:f7:07:cc:24:47:a0:95:e6:35:90:
0f:45:3a:1d:60:dc:3d:c9:49:08:0d:d7:f4:7d:62:
8f:71:c1:03:de:e2:42:cc:31:80:aa:96:6c:ba:01:
93:c9:10:68:77:ed:9b:f4:08:bd:a7:c2:a7:e7:0b:
6f:28:93:d1:c6:be:ba:f0:e9:c6:0b:82:eb:36:6d:
11:c0:fe:88:74:a3:e6:f8:4f:94:9f:2e:7a:37:b8:
b5:62:c9:81:99:0d:16:9e:f9:97:e7:27:d6:f7:3f:
cc:27:33:b8:cc:e1:58:49:53:a5:b6:1e:7d:ad:bd:
76:12:e7:f6:de:74:9e:9b:43:35:72:53:58:d1:6e:
a3:80:a8:5e:78:01:22:de:7c:14:51:2e:bb:6a:f5:
10:f8:ab:47:b5:a8:b0:e0:dc:58:38:f6:e5:2d:6b:
c2:4e:3d:bc:c9:c8:1a:cf:3c:1e:25:86:ed:b6:bc:
cd:88:3c:81:3d:dd:82:c0:fa:2e:c4:4a:84:6a:03:
b8:8d:af:ad:65:a9:07:5b:2f:91:31:49:1f:00:49:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:08:2F:3B:C5:25:02:ED:74:35:F1:D2:0E:C6:85:C8:DD:10:D2:A1
X509v3 Authority Key Identifier:
keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:32:df:ff:83:f3:97:19:ee:0c:9e:e8:db:08:8a:e7:8e:92:
df:98:7c:66:22:64:fb:6f:f2:af:d0:23:c3:e2:ec:3e:11:85:
89:73:cd:d1:ee:cb:74:ec:f1:18:94:cb:5f:1a:9a:b1:f7:a7:
f2:d1:68:35:75:58:ff:c2:0a:88:61:61:21:09:22:44:b3:eb:
e6:39:72:01:eb:e6:b3:b3:25:94:52:d4:64:26:9a:13:c8:7d:
9f:95:86:89:a6:aa:2d:db:f5:f0:7b:81:d2:10:97:e2:74:5b:
cc:5c:c7:3e:5a:7b:ec:bb:85:13:51:2f:a0:5e:ca:e9:38:f3:
23:54:ac:cb:40:10:7b:a5:53:29:d1:ef:8b:37:eb:6f:f5:bf:
6a:a7:25:85:7d:95:5d:24:03:b1:e9:e7:88:b2:8b:5d:c7:61:
f1:d6:c4:2c:15:03:ed:d3:23:73:79:9a:fc:37:01:32:6e:c1:
ff:15:d9:7a:7d:af:36:52:91:06:20:da:58:a0:fe:82:83:ad:
89:f6:0b:c2:ff:0c:22:89:04:28:5e:93:b9:09:67:48:21:93:
3a:44:45:19:fb:79:b8:a4:fb:18:cd:d8:8b:db:55:8f:d5:50:
28:87:bc:4c:2a:3c:22:7d:ad:2e:a9:44:5c:24:fe:3f:a0:37:
26:4b:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:07 2025 by rpki-client