Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File: EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier: iXRgQpkdFyEVEFO5yZaCPzrprx9BsAhaylrD04twaew=
Subject key identifier: 36:44:02:F4:59:48:E4:1B:A6:B2:EC:91:FB:C2:6C:2B:EF:01:02:70
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer: /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial: 019A7112D7D559E2077EBF6AB470BCEB8975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number: 0560
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: zPNbyfgCxoRJJF/jcr/0b25alT24pLfJTGFNRyiayv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d7:d5:59:e2:07:7e:bf:6a:b4:70:bc:eb:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=364402f45948e41ba6b2ec91fbc26c2bef010270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:45:94:26:77:2e:4b:59:53:d3:91:e2:23:
5d:39:8b:43:7c:42:72:5d:4c:6a:66:dd:0e:af:19:
ca:85:5e:0d:a6:e7:e2:0d:76:f1:a7:4f:7a:71:f3:
d1:c7:ce:fa:4d:90:f1:4c:19:35:20:4a:13:28:e1:
df:cb:78:5a:09:64:07:6b:1c:d3:ca:35:17:65:79:
3a:95:65:14:1c:eb:9a:39:cf:ac:bb:e4:ab:a5:bf:
85:59:ee:86:c7:7d:1c:1d:b2:4e:11:bf:81:e1:13:
5d:c8:7a:60:90:bd:89:a5:c8:ce:ec:aa:f3:e2:88:
e1:7e:a2:0a:12:cc:11:e5:86:66:f6:1e:04:a5:97:
46:a1:09:b5:0f:40:a0:d2:7c:2b:0f:e5:00:8e:c7:
13:62:2a:8f:8b:a6:8d:98:a2:6e:8c:3d:43:9e:7d:
e6:ea:7d:c9:d5:2e:1b:49:b9:38:c0:91:09:bc:97:
f8:f2:5c:3b:01:50:de:2b:79:a4:b1:d4:8c:6c:22:
86:89:33:bd:b4:48:21:a4:16:8c:aa:f6:3d:d4:ee:
77:6e:06:03:8e:b9:a9:36:f5:69:97:bd:c6:3a:e3:
6c:f5:90:42:b5:c1:17:73:63:fd:b6:43:fb:fa:70:
3e:8e:4b:d3:d3:c6:2f:a1:26:e5:31:f2:6d:30:6b:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:44:02:F4:59:48:E4:1B:A6:B2:EC:91:FB:C2:6C:2B:EF:01:02:70
X509v3 Authority Key Identifier:
keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a7:c9:6f:e5:86:28:57:22:8c:9c:53:2f:bc:d3:1d:72:74:
bd:c3:80:e2:b5:f5:ab:8e:1a:79:fb:b3:95:73:ce:60:40:e9:
6e:7d:c9:5e:c5:35:bc:b2:68:00:aa:49:fe:a2:2d:fb:6a:7a:
66:fb:2f:a5:3b:71:86:3f:02:ef:5d:9f:8a:c6:39:f9:6c:63:
d0:23:70:09:31:49:97:27:bc:f3:ae:91:df:37:27:5e:ba:51:
32:99:39:42:15:f9:a7:c2:2a:29:f1:10:68:0b:40:49:e0:3f:
c0:3f:6a:d2:22:01:f2:71:6a:e7:62:b7:24:db:d2:1e:31:4a:
0f:5e:d8:df:ee:bf:62:8e:0a:6c:dc:d8:aa:8a:2c:49:67:a6:
99:86:17:78:63:67:13:d8:30:6c:4f:4f:de:95:a7:43:cb:70:
ab:2a:a7:7d:93:ad:e6:50:1b:f1:fd:33:91:cc:c6:d7:99:6d:
f3:22:6f:39:8d:8c:82:56:3f:37:43:c8:4d:7b:a8:a4:e3:c0:
6c:34:9d:74:3d:17:31:5e:43:80:f5:a6:f6:f0:0a:fa:77:74:
1b:b9:64:64:04:50:67:40:39:2f:2a:7f:d3:ec:85:42:43:cf:
b6:e3:69:7f:33:93:24:af:7a:52:25:62:29:25:d2:12:77:9e:
e5:35:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:49 2025 by rpki-client