Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft
File: E8QF935QykXWfYTqFxflyYtDbt4.mft (raw, json)
Hash identifier: CZKF7daXYi9sBFcW6UDKoBuMvMP6z8nkYx5195jcDS0=
Subject key identifier: 79:C9:A6:4E:C1:67:11:5A:66:36:8D:6F:48:58:D0:86:B8:56:DD:3E
Authority key identifier: 13:C4:05:F7:7E:50:CA:45:D6:7D:84:EA:17:17:E5:C9:8B:43:6E:DE
Certificate issuer: /CN=13c405f77e50ca45d67d84ea1717e5c98b436ede
Certificate serial: 019A71B89A0BD5AA1B118864C311800491A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft
Manifest number: 81
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: E8QF935QykXWfYTqFxflyYtDbt4.crl (hash: PW81bWNyMtKKoXHzqTIokqSEDoxTNeQoIYRsXKpSIc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9a:0b:d5:aa:1b:11:88:64:c3:11:80:04:91:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c405f77e50ca45d67d84ea1717e5c98b436ede
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=79c9a64ec167115a66368d6f4858d086b856dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:f5:c2:d7:6b:36:7e:3a:9d:7d:10:27:07:
83:ea:99:cd:1a:90:d7:13:49:d3:08:fa:41:dd:07:
78:e3:d6:8a:9b:47:ef:a6:d6:ff:96:66:39:f3:3e:
b3:55:81:fd:ea:c1:53:e0:b8:a7:79:d1:92:fa:1f:
6f:c0:b6:eb:95:89:4a:c2:f6:e5:d6:11:04:bf:92:
83:7b:f9:da:39:dd:00:e3:2c:39:a9:dc:0a:e5:7a:
1e:b6:3e:8d:89:b3:4d:0c:54:65:12:a4:e7:fe:04:
45:80:ea:b5:a2:87:ad:c8:c0:53:f6:70:e0:66:18:
63:c7:61:48:da:04:7f:82:d7:47:29:d0:08:1b:2e:
d8:ef:5e:11:b3:03:42:f0:d0:a2:e3:cd:9c:b0:a2:
3e:a8:bc:e8:34:65:cf:e0:4f:cb:95:91:24:b1:8f:
b6:b1:66:90:cb:a2:04:a8:fd:b0:46:9f:c1:e0:61:
34:be:47:3a:1c:8d:61:9d:01:1f:d1:59:bd:aa:d2:
b8:c6:36:1a:ba:98:35:2d:66:49:c6:34:6f:55:c0:
9c:94:d4:ff:fc:95:40:64:a0:97:16:38:e0:98:fd:
5d:6d:21:79:d9:2b:af:4a:89:c4:d3:b8:fd:65:20:
8f:db:f0:bf:ed:73:ed:4c:67:f0:d7:79:3e:5b:5f:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C9:A6:4E:C1:67:11:5A:66:36:8D:6F:48:58:D0:86:B8:56:DD:3E
X509v3 Authority Key Identifier:
keyid:13:C4:05:F7:7E:50:CA:45:D6:7D:84:EA:17:17:E5:C9:8B:43:6E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8QF935QykXWfYTqFxflyYtDbt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/874bf3-982d-4c26-80f0-f0f662117b47/1/E8QF935QykXWfYTqFxflyYtDbt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:58:f4:a1:92:8c:80:e7:8a:db:58:26:15:39:e3:5c:4e:3a:
48:fa:50:82:53:cf:6e:61:c8:75:66:4f:e8:a7:b0:30:29:14:
41:86:fa:95:15:aa:28:39:54:e1:16:f0:0d:63:fa:d2:9d:7b:
a2:40:d9:cd:7a:a2:11:ed:27:07:df:c1:90:71:93:67:f7:98:
08:e1:47:1d:ed:75:86:c0:7a:88:02:da:eb:bf:ec:77:4c:91:
dc:4d:32:18:a0:9b:38:9e:37:20:02:0a:30:91:3c:3e:a4:65:
c5:b6:d3:56:dc:d8:8a:0c:f5:77:bd:12:ed:24:81:e0:cf:84:
16:3f:3e:e6:48:69:5b:50:21:c1:58:c6:c4:c0:48:dc:96:53:
1d:c2:cc:9c:43:49:49:45:ae:92:74:a8:aa:ae:42:d1:5e:02:
e9:98:1f:32:1a:b3:c0:01:4a:74:0d:66:5b:06:d1:7a:68:41:
6b:b5:5f:64:f6:a6:61:c5:36:b7:2b:4b:8e:38:1e:6a:9b:28:
72:41:e8:7f:4d:33:d2:a8:67:ba:d2:da:dd:74:c1:d9:73:7c:
a2:8b:78:ee:0c:72:b0:23:46:e7:47:fd:ca:2c:ef:83:45:1d:
93:62:ed:53:76:99:d5:88:61:f1:ce:7b:0a:c1:1e:c4:18:b7:
ad:f1:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:49 2025 by rpki-client