Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File: UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier: WPJL9Ix76YRMvWIQCKWzW5kfokA38aN3HrsM0/TjPc0=
Subject key identifier: 6B:1E:40:0A:80:A8:32:64:F3:8C:6C:C8:BE:99:08:43:CD:9C:9F:70
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer: /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial: 019A72261A967C1EFC007D70D0D11C743AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number: 0EB0
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: iHFJsjKlb2r+LZ0PTnPXi2rPIwZB6D/qwqelL3nsb88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1a:96:7c:1e:fc:00:7d:70:d0:d1:1c:74:3a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=6b1e400a80a83264f38c6cc8be990843cd9c9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:00:b6:3d:9a:6e:36:13:83:22:80:30:09:
c0:5d:20:1d:0a:53:d1:73:c3:1a:09:1b:70:04:e9:
56:3c:bd:7b:c5:6f:9b:5f:9c:55:ae:00:39:37:7a:
bb:14:4f:a8:60:4a:ce:c5:0f:9f:af:b4:ca:3d:15:
8d:22:83:85:25:a6:83:a2:a0:2b:12:bc:bc:c7:33:
97:1a:e6:3d:e0:d6:19:c2:bb:25:1f:ae:f6:c7:43:
a1:11:c0:da:3a:0d:79:7b:fe:d6:3c:74:d5:70:44:
2e:0d:1a:2b:cb:b3:0b:2e:db:e8:ef:99:00:60:18:
a8:8f:a4:bc:75:eb:e1:f9:22:4c:71:2d:8e:51:53:
7b:e1:e0:a0:86:83:5e:c5:eb:4b:e7:5a:c3:c6:a5:
56:56:b6:0f:d8:ba:bc:e4:54:57:6f:00:e8:fb:56:
ee:b8:65:2c:76:a9:6d:8d:20:1b:50:c2:6e:e0:dc:
ef:21:f1:62:ba:71:8b:ab:39:43:b0:a6:fd:2f:48:
2b:bc:23:43:33:87:4b:fc:b1:c3:2e:9d:78:af:ef:
9c:84:d7:4e:12:65:23:95:04:83:d0:7a:16:3e:6b:
0b:ea:11:52:46:86:fe:26:09:6c:3d:3a:ca:f3:39:
bf:85:e5:2e:e6:75:91:ec:2a:e3:e5:80:bd:ad:d1:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1E:40:0A:80:A8:32:64:F3:8C:6C:C8:BE:99:08:43:CD:9C:9F:70
X509v3 Authority Key Identifier:
keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:66:13:79:7d:df:ef:96:c0:d2:d7:71:2c:df:80:ff:96:
69:36:7c:b7:80:6f:dd:8d:6e:71:05:06:d7:a2:4f:b6:c1:3a:
5a:a3:4b:40:d9:12:ee:5f:f7:4c:e6:36:d1:07:bb:eb:ae:a5:
e1:60:97:71:6c:2a:14:66:7f:68:d9:d1:c9:e1:6b:cf:99:7a:
fd:f5:f3:a0:be:33:02:88:99:ca:98:43:6b:34:7d:62:29:b9:
e3:bd:ab:84:04:a6:68:be:51:f8:b6:73:3d:34:c5:39:a2:ba:
6b:e5:e5:67:cc:0b:ba:1e:66:9b:1c:58:82:ec:3c:65:56:35:
fc:0e:40:ad:80:27:22:89:5b:f3:a5:1d:90:ca:e5:3e:16:61:
5d:78:b1:36:7f:3f:d7:1c:d4:06:d5:e4:5b:62:5b:8c:ff:49:
7a:d9:d3:ad:36:d3:fb:7c:be:89:f2:0e:b0:44:46:31:b1:56:
cb:cc:59:59:77:ce:20:55:0e:99:30:d8:4a:b1:c8:7f:77:fc:
ac:d2:89:41:2c:f9:c9:14:08:2e:96:dc:7b:ce:b5:b5:17:ec:
63:3f:f9:9f:c6:d4:6f:93:15:49:0e:b1:6f:2e:9b:ca:f0:2b:
f6:92:aa:26:76:f3:fb:42:78:91:0f:1b:ad:2c:28:20:36:eb:
34:4a:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:54 2025 by rpki-client