Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File: e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier: nAMrTkchKL2gwM6vIzsFX4in27IySDEg18nKyvosazU=
Subject key identifier: 1E:C2:CE:FA:B9:3C:0E:9D:1F:42:75:A8:18:B2:49:F4:9A:F5:62:70
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer: /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial: 019A71B81D0FCF52D7FE24400D7DE2F9EA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number: 06D6
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: b0PbT4NC0obvtX2GD6OGxnE/dAJFn861wOPUTYbuPWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1d:0f:cf:52:d7:fe:24:40:0d:7d:e2:f9:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=1ec2cefab93c0e9d1f4275a818b249f49af56270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:d9:1f:95:ef:bd:68:44:6a:b3:f1:65:89:
8a:f6:69:62:cb:52:51:43:2a:5f:df:4d:2e:ff:db:
f0:6a:e2:06:3e:71:e1:ff:39:f3:d1:4e:02:b9:b2:
3b:3f:83:e8:88:cb:f2:de:2c:5e:bd:0f:49:dc:b4:
bd:d0:1e:e5:b7:79:ac:18:ac:d3:aa:ce:c3:8a:26:
8a:a0:ed:4b:ab:68:bf:da:97:a7:fb:b5:c4:49:a7:
c5:bd:94:b8:aa:46:3c:b3:0e:bf:c2:a0:ad:e0:1f:
5c:f0:f7:2b:8a:48:24:80:d2:02:58:9f:ba:0b:cd:
e6:21:69:0d:0a:d4:03:d7:f8:b3:7f:c4:60:d4:00:
18:d8:34:01:41:a9:79:e8:09:c6:39:c8:23:c3:23:
b4:30:a2:f5:09:48:18:0d:8b:dd:9d:57:8b:08:32:
ba:e8:18:b7:9d:61:24:3b:0b:1a:2a:96:17:e4:d0:
6f:7c:d1:38:55:ef:57:ce:81:29:64:a8:29:7e:76:
fa:ca:26:f4:10:34:75:77:10:fa:9d:a3:f6:c1:8d:
f2:03:ed:94:d2:f9:d0:87:c9:3b:2c:52:11:43:6d:
aa:19:a4:ff:35:a6:a8:8d:f2:00:bd:42:cd:69:eb:
a4:1d:1e:ac:04:1c:ac:94:34:a2:c7:a6:0c:e9:d4:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:CE:FA:B9:3C:0E:9D:1F:42:75:A8:18:B2:49:F4:9A:F5:62:70
X509v3 Authority Key Identifier:
keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:20:41:68:b6:a5:23:02:09:b1:88:fe:db:c1:c4:16:eb:c1:
73:71:b3:e8:74:9f:c4:7d:84:77:98:a3:0d:23:fd:73:a5:46:
45:c3:57:97:b7:08:ee:25:6a:2a:c2:04:28:31:7e:60:27:f4:
b1:e3:ee:9b:01:01:d4:38:d3:ae:57:ad:57:49:8b:6a:9b:4b:
d4:91:67:2e:f8:92:6e:b3:44:5a:46:de:d1:30:c0:53:d8:92:
32:74:8a:b5:05:1f:b2:f1:0d:53:2e:3d:a9:12:5c:ef:0b:95:
fc:f7:a8:bb:c7:bf:af:c8:bd:97:54:7d:76:43:32:da:42:86:
af:81:bd:77:87:00:33:aa:b2:63:c6:63:41:90:93:cb:ea:f8:
6f:d2:45:7b:d2:6d:89:e6:89:25:c5:e5:05:c0:a5:1c:5c:19:
2b:4b:8c:b2:5c:8a:d7:db:65:cb:dc:68:7b:20:04:f8:81:88:
27:0c:3c:20:6b:c2:df:61:c6:54:e5:88:e7:63:fe:a0:b7:df:
43:70:15:6d:06:68:d3:3e:4d:7e:06:3b:f0:b9:ae:b9:53:5f:
6d:50:29:be:a9:6b:79:e7:50:ce:b7:ef:7c:0e:39:0e:6b:78:
da:ab:b7:d3:34:07:75:73:ca:4c:51:7e:36:34:8a:36:44:10:
11:b4:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client