Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File: eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier: tjO/enKWJpC3Dxmc3dQP9IpArDq1Y+XE4WAi8JiWhnU=
Subject key identifier: EB:7E:1F:31:C4:7F:44:3A:C4:17:90:4E:69:6B:0A:3E:BD:F3:0C:5C
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer: /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial: 019A71B856ACC698A2B50A76CFD0F63493D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number: 083C
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: ZWS1L2TO3OcvoyEjj/XD9y/tZ6+2HyaAnu5VK5rnYUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:56:ac:c6:98:a2:b5:0a:76:cf:d0:f6:34:93:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=eb7e1f31c47f443ac417904e696b0a3ebdf30c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:8e:ce:e5:fa:f1:17:f5:72:5d:03:62:a8:
47:e5:ab:95:18:7e:3c:a1:87:45:e5:04:54:22:31:
0c:8d:87:69:de:54:04:f3:65:ec:cf:2b:a8:b5:08:
b5:57:99:29:98:0d:25:88:07:3e:c2:a2:83:84:ea:
72:fe:0c:ee:24:20:71:b2:eb:fe:cd:2c:cd:28:4b:
ef:f1:bb:a7:b6:e1:7a:e2:34:56:b0:0b:2d:c5:c2:
08:b8:ff:e2:56:92:b8:80:f7:40:42:24:60:37:9c:
4f:f0:d2:12:d4:c0:33:38:10:5b:03:b4:9b:19:65:
bd:32:6c:8f:fc:c6:c2:c9:e1:49:bd:4f:3b:4d:f9:
2b:d7:fb:c0:b9:11:b2:99:f4:7b:30:a3:97:7e:db:
42:b5:ae:ac:e4:f4:c3:5e:fe:77:61:29:c7:99:de:
a6:de:48:06:6e:20:76:50:92:eb:b9:60:01:07:ce:
9e:64:48:a8:61:aa:50:f3:20:d2:80:a8:0f:b7:dd:
29:71:fb:6e:d8:6b:67:18:a0:73:0c:00:e2:b0:9d:
33:3d:20:ba:97:f2:52:c4:ef:b1:df:02:5b:81:6a:
b7:6a:a3:d7:96:94:c8:3f:5b:ea:69:b7:5a:cd:d3:
e0:74:f1:58:a0:37:bb:ea:b9:de:d1:63:b8:5b:d4:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:1F:31:C4:7F:44:3A:C4:17:90:4E:69:6B:0A:3E:BD:F3:0C:5C
X509v3 Authority Key Identifier:
keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:46:c9:d1:36:ba:46:f8:50:ae:05:6a:68:d8:e4:47:10:c9:
d0:85:b0:72:d4:f0:ca:fb:54:e8:ad:85:61:c9:27:0b:13:51:
f5:c7:df:3d:df:d8:99:6c:f6:a0:f1:9d:eb:45:70:15:fa:a5:
60:10:b7:44:d6:8a:9f:ec:84:3d:6f:bc:fb:f0:4e:2a:79:f7:
d2:57:1f:30:19:80:b9:30:37:94:75:8c:91:fc:3c:f6:4d:6f:
ee:84:db:86:65:d3:f8:b5:75:16:fe:b8:d4:1a:92:3f:c1:64:
7c:b8:74:b4:07:82:47:e3:98:6d:b1:56:47:ad:7e:33:70:8e:
77:0e:88:86:47:44:1b:55:c9:d8:32:03:5f:16:9f:a6:b7:bb:
6b:06:79:e4:5d:68:b8:f6:95:79:bd:06:bf:06:db:13:b8:6f:
6d:fe:09:2d:50:e1:5e:b6:a3:09:15:9c:5e:6d:07:f7:ca:18:
1c:cd:d8:d1:cf:74:0f:d9:aa:2c:46:3c:48:f3:90:57:e1:28:
b7:e5:ea:38:85:0b:1b:61:b9:28:47:d1:5f:82:06:93:cf:d8:
72:c7:a0:11:08:18:f6:46:ca:01:f1:ee:3d:73:32:f0:d3:b0:
da:bb:97:6e:5b:25:8c:3e:24:d3:3d:88:ae:5e:76:ab:9b:5b:
eb:ed:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client