Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: rjXNuO7rKKMU++GajtouRA4FCs3jQxX8Yr2KF2JITus=
Subject key identifier: 80:1B:77:76:B3:DB:A2:AD:81:46:94:70:4C:1B:69:AF:2C:86:D5:40
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 019A71B89FAE02D9024A9FC4363A01ADA5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: 1Qsd6kM1sFrEAekThiOk9H7Z+8kn/tkRdForjMhb774=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9f:ae:02:d9:02:4a:9f:c4:36:3a:01:ad:a5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=801b7776b3dba2ad814694704c1b69af2c86d540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:e4:3f:59:d0:c8:f8:bf:91:69:32:92:53:
27:45:df:11:a4:78:61:05:7d:8b:f0:df:dc:c9:49:
e7:a3:81:dd:7e:6c:a7:ed:e5:33:00:e3:4f:e7:e6:
76:6a:ab:2f:1a:b1:ee:9d:1d:4c:79:b1:77:04:52:
11:c1:bd:75:1d:04:ce:fc:76:b4:65:35:91:14:02:
cf:17:64:c7:76:f4:9d:5c:0f:2e:4f:2e:f4:53:6e:
c4:a8:45:13:22:14:77:9b:26:31:82:60:d6:fe:ca:
37:cd:88:e3:24:4e:9a:fd:cc:bd:db:bd:2c:95:1b:
66:7e:8d:21:4f:04:79:3a:42:0f:74:ef:e9:5e:61:
88:3c:48:31:f4:9d:a0:73:7c:7a:c3:dc:c6:d3:02:
92:56:38:59:eb:5f:9b:02:16:22:f8:32:88:2e:03:
e3:0e:c3:9c:25:9d:c0:d3:9f:6c:ad:1b:57:f3:ef:
24:f5:58:d3:4e:39:92:50:6f:53:03:dd:03:1d:dd:
0c:b2:33:0f:34:7e:a5:d2:f8:12:2d:85:71:60:2b:
b0:ae:5a:7b:7a:75:61:de:6b:d3:6d:55:6c:ba:bc:
9c:5c:57:96:fb:47:d0:5d:9c:0d:75:fd:04:7b:e3:
8b:ba:f1:12:cd:21:27:2e:0d:b6:f1:5f:ec:4a:e9:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:77:76:B3:DB:A2:AD:81:46:94:70:4C:1B:69:AF:2C:86:D5:40
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:e8:57:1e:92:aa:69:d9:c3:27:a6:cc:b8:48:d6:94:1e:
7a:c0:30:44:11:d0:d2:50:b0:d1:bf:91:4e:9d:9e:83:3b:26:
92:48:a4:b8:ca:d1:68:65:14:66:0b:63:0e:d6:1c:07:07:5a:
2d:e7:a9:aa:9b:41:60:0d:65:b7:2a:8e:f9:b8:21:73:1c:55:
3e:21:94:84:44:7a:71:eb:e3:01:7f:5b:f1:33:33:aa:10:b6:
99:0a:ba:18:39:b3:9c:0f:75:0a:42:1a:c8:23:e7:58:d8:d9:
df:ac:40:34:2a:84:6f:dd:05:85:02:6c:81:bb:48:c6:82:ec:
a8:35:61:37:01:5e:20:7e:d6:e9:9f:03:e3:87:41:57:80:38:
2f:f7:59:ce:b3:13:92:32:9c:65:b6:be:da:d0:fb:9b:f9:7a:
3e:0a:42:f9:33:76:f6:92:99:05:84:e7:c6:8a:14:94:66:b4:
b0:59:57:7e:de:5c:5e:0a:79:6e:ac:d5:c1:a9:62:58:df:fb:
2e:7a:eb:00:c5:e3:7b:f6:ab:39:1c:28:9e:f0:d8:64:a4:7d:
e8:4e:ea:06:5a:3b:85:da:18:fd:84:86:6d:18:a3:ff:a9:ba:
89:54:f8:01:48:b6:90:7f:72:89:d7:d4:61:1f:ac:6b:4a:bd:
7b:71:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:09 2025 by rpki-client