Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier: wEhqt/AH6JxtGpoxkrmAz2l7+Pwwq/vXIexnFJLOvRM=
Subject key identifier: 3A:1D:7C:B4:7E:3E:3A:D0:88:B9:26:B8:2C:94:86:14:68:2D:2B:4C
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer: /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial: 019A0035A52172F868E32EE3EDBEB77475B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number: 01AB
Signing time: Mon 20 Oct 2025 06:01:46 +0000
Manifest this update: Mon 20 Oct 2025 06:01:46 +0000
Manifest next update: Tue 21 Oct 2025 06:01:46 +0000
Files and hashes: 1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: Tqao/ZhKOlUZ6Xxa7ZCI/kA37Yr8gKF/E8qedYclwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a5:21:72:f8:68:e3:2e:e3:ed:be:b7:74:75:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
Validity
Not Before: Oct 20 06:01:46 2025 GMT
Not After : Oct 21 06:01:46 2025 GMT
Subject: CN=3a1d7cb47e3e3ad088b926b82c948614682d2b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:ad:51:6a:ef:a0:63:78:86:db:5b:bd:69:
d2:59:a4:8f:9e:23:34:ba:40:54:f0:6e:45:f6:c6:
ee:5c:66:78:d2:d6:8c:e4:a2:5b:d3:72:da:9d:2c:
07:09:ff:fa:0e:19:02:1e:20:9f:59:2d:10:47:94:
90:04:31:06:69:a9:12:8d:a2:bc:82:08:88:d2:97:
cd:71:38:93:f8:77:bb:fa:94:07:49:9c:e8:32:99:
2c:4e:3c:66:17:43:e1:b5:ca:3b:b6:b9:6a:49:65:
d5:2d:f8:80:22:94:95:93:45:16:57:c7:6e:93:00:
fe:d3:dc:d1:87:11:b8:8d:4d:1d:c4:9f:44:46:29:
31:d3:05:ce:b0:d1:e3:56:e6:26:a8:df:9a:20:70:
39:ec:fa:fd:f0:a3:42:46:2f:b0:d3:26:7d:22:dd:
61:53:22:e6:bb:3a:09:ae:0a:34:34:ff:fd:03:96:
41:5e:ae:11:6f:7f:f4:51:e3:e9:5d:3b:aa:64:f9:
0c:bd:7d:09:47:d6:6f:35:ca:f2:d3:12:c3:e2:e4:
b5:db:08:2b:30:71:34:69:36:ed:1e:2b:88:96:c0:
46:b5:f8:93:85:dc:e4:aa:11:a8:fa:9b:4e:ca:9c:
a3:aa:82:8d:ee:73:b7:b3:1a:53:54:88:66:a1:25:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:7C:B4:7E:3E:3A:D0:88:B9:26:B8:2C:94:86:14:68:2D:2B:4C
X509v3 Authority Key Identifier:
keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f8:ba:80:53:f0:ae:aa:bf:7e:fd:16:10:f3:7c:e2:0e:12:
4b:9e:54:f1:da:81:f9:7a:68:10:d1:96:75:4c:8d:e2:16:6b:
f2:b6:e4:2a:a4:63:1d:ca:f6:7a:21:c8:82:4f:8c:a2:59:58:
df:03:e4:96:f1:b9:07:10:5c:69:af:1f:a3:3a:d7:4f:7f:ec:
f0:3a:a3:d5:d3:82:bb:90:a5:99:aa:7d:21:68:46:7b:5d:ff:
46:03:b1:20:e3:99:64:92:c3:36:6d:d7:c6:37:ee:0e:10:90:
06:2e:34:d0:18:ee:7f:2e:67:fb:54:35:4f:e5:af:a7:d4:bf:
1d:4d:34:a1:60:01:f2:28:ba:4a:88:d1:eb:bf:65:83:89:08:
b0:fe:4e:75:ab:79:a3:2c:76:37:27:cc:c8:33:c2:d2:91:7a:
f2:13:b1:29:eb:20:40:26:7e:69:a0:9e:f5:c9:02:bf:64:b3:
65:4c:06:e5:e6:e2:98:a6:50:cb:66:8d:9b:b7:d1:05:d8:67:
dd:98:08:dd:da:ab:c3:6b:df:09:36:3d:6b:d7:cf:7f:8a:df:
7b:87:84:77:5b:83:33:85:10:0b:7c:d6:3e:35:e3:0b:e7:ba:
32:83:c5:1d:80:4d:e3:a6:ea:78:d0:11:d7:33:ff:77:cc:94:
a9:e5:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:01 2025 by rpki-client