Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier: v6CdixN8RwVLWkqWoDhifjNw6LgoemUG5NvW92KTREo=
Subject key identifier: A4:D9:60:22:0B:81:D7:26:78:11:AA:56:C7:1E:D8:8A:37:33:5E:D8
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial: 019A70DC458FF5D62F07BA2040D59A1A4FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number: 02DD
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: cUyq+7pggpD8V+GDnMg2LdGRaBWRRKlFbAOCqok5bHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:45:8f:f5:d6:2f:07:ba:20:40:d5:9a:1a:4f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=a4d960220b81d7267811aa56c71ed88a37335ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:14:e5:fe:4e:1c:2c:47:4c:ca:2b:26:93:
a4:3c:f4:6f:b7:e2:dd:35:f6:7d:ea:83:9f:8a:fc:
0f:8a:dc:1b:1a:ca:f4:58:ec:96:97:e0:8e:b4:06:
50:9b:eb:3f:02:9c:75:43:d0:0e:6f:bd:79:ad:5d:
5d:12:15:94:89:c1:b3:e0:e3:c6:66:47:b2:8f:fb:
82:87:e5:7d:5c:0b:53:23:e0:22:26:c4:16:37:f6:
fe:cd:f7:33:3a:ba:3e:a4:bb:68:2a:88:df:96:29:
7a:e6:06:bd:ab:9e:78:1a:96:fa:75:31:65:58:41:
57:e2:95:96:3c:e2:ea:a0:43:b1:8d:d2:04:4a:0a:
d9:eb:ef:d5:09:ad:e6:e4:13:22:69:48:42:fc:81:
27:fb:4e:10:2a:c8:ec:76:7b:a6:76:62:22:48:e7:
33:cd:77:9f:dd:a0:50:12:7f:cb:f3:75:c4:0b:a1:
6c:e7:2d:ef:b7:58:d8:64:b2:e1:5d:45:9b:80:76:
ff:e3:0a:4c:07:2c:6d:70:a5:fb:1b:89:50:a6:8f:
73:e2:22:e1:09:3c:28:02:fc:ea:19:bf:3f:db:55:
81:82:e9:c7:df:35:59:ae:50:d5:cc:36:76:9d:8c:
e2:41:34:0f:20:9b:c7:f8:2f:66:d1:8c:e7:41:63:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:60:22:0B:81:D7:26:78:11:AA:56:C7:1E:D8:8A:37:33:5E:D8
X509v3 Authority Key Identifier:
keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b4:c9:7f:99:4b:ef:df:b8:22:ae:73:4a:07:f7:61:62:65:
61:c2:42:3c:5a:e2:0d:bd:32:e1:56:46:f6:03:60:c6:98:fb:
ea:22:1b:00:aa:c1:ca:63:7d:17:c0:6c:a7:33:ed:ba:c2:56:
19:33:bf:cf:21:12:fa:a4:7b:12:b6:b8:15:92:4b:62:f7:e9:
68:91:58:b5:d4:43:f1:33:54:e2:42:36:c7:99:b5:88:a9:af:
02:e6:0d:fe:3e:fb:56:0d:a5:ea:c4:c3:b3:61:04:40:82:ab:
20:35:46:d2:12:db:b1:15:44:64:6d:24:1f:17:3f:34:ca:87:
b7:db:87:51:80:ce:c2:10:0f:d0:fc:70:89:d1:ac:47:f5:ee:
79:7e:44:9a:95:9e:b9:4b:d5:4c:38:c2:05:15:de:94:4c:c2:
b8:2c:76:46:27:56:57:ed:b1:e7:a2:f2:3c:5d:2e:6d:75:11:
a0:87:04:3b:10:32:d4:4e:93:04:c2:a8:ea:12:be:ff:d6:e4:
db:83:b2:c8:00:45:45:e6:ce:91:3e:96:c0:73:ab:b5:71:54:
66:b1:e2:fd:41:65:2d:20:27:ba:07:e2:6e:ed:d6:86:45:e4:
b5:08:fb:39:f5:50:41:b5:b0:3b:08:bf:52:1c:c3:d7:1d:f9:
ae:5f:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client