Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File: EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier: CNQNuRUHJlspYGqOzkhQQsFnnDLzy5XhugZM4g8sTCQ=
Subject key identifier: 1E:3A:44:15:56:43:56:E3:06:B9:D5:4B:4E:64:C9:F4:53:82:28:34
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019A00359972368131EBC0BDF2E72B483EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 06:01:43 +0000
Manifest this update: Mon 20 Oct 2025 06:01:43 +0000
Manifest next update: Tue 21 Oct 2025 06:01:43 +0000
Files and hashes: 1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: zQF+Uk4lFhsJ34ZNM66h3oRxK7dsin673u7O1YXkl90=)
2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:99:72:36:81:31:eb:c0:bd:f2:e7:2b:48:3e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Oct 20 06:01:43 2025 GMT
Not After : Oct 21 06:01:43 2025 GMT
Subject: CN=1e3a4415564356e306b9d54b4e64c9f453822834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:d7:38:ff:37:38:e5:d2:dd:a6:39:46:44:
f4:cb:17:88:39:dc:f5:e5:5d:8c:04:72:1a:ad:ab:
c9:63:7f:fc:af:52:b5:6a:87:a3:e6:55:64:de:1d:
fc:33:8b:15:a7:31:15:59:78:eb:a8:02:f2:dc:ac:
8c:6e:cf:cb:c0:35:a6:b3:4a:5f:76:b7:7a:9b:58:
36:cd:46:b8:ff:0b:c4:9e:51:d3:3f:86:53:2a:ab:
ce:ab:11:62:d5:d1:43:7d:d7:79:55:22:c6:8f:ab:
20:cd:db:f3:53:ea:f3:93:92:3b:49:27:9d:6c:54:
6d:7f:65:de:12:9f:50:c8:be:ee:57:ad:cf:4e:52:
ba:b9:7c:47:34:4f:65:8c:d3:f4:bd:dc:e7:29:42:
5f:f1:ba:65:fc:91:94:1b:30:24:50:33:ca:26:00:
4e:b2:4d:1e:9a:20:02:03:60:6c:91:5a:17:fd:77:
f1:b8:6f:5e:ab:d3:be:b3:53:6b:24:bb:4a:68:cb:
1e:85:0b:be:68:dc:77:67:21:c8:96:c1:12:9e:a9:
15:f5:45:e7:36:4e:63:b0:94:bd:1b:09:4b:7a:3d:
f5:28:da:7d:c8:24:aa:34:b9:37:36:8e:95:21:d5:
e5:b2:32:2b:4b:e8:71:3f:8a:15:88:05:37:c0:9c:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:44:15:56:43:56:E3:06:B9:D5:4B:4E:64:C9:F4:53:82:28:34
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:04:82:09:6a:fe:89:fd:9c:88:9b:1d:06:4c:09:52:79:
a9:bf:09:0f:8f:2f:81:50:b1:b4:c4:85:af:7a:88:66:ca:99:
09:7a:77:ee:00:e8:8e:88:b8:8c:05:1a:16:47:bc:5f:19:10:
47:ac:20:ed:35:cd:16:16:9e:74:c5:01:e8:b4:60:20:54:29:
c4:58:20:9d:83:38:69:31:02:7c:45:7a:eb:41:cd:39:1d:ee:
0a:e8:d8:ef:4e:f0:ba:df:3e:28:33:db:2b:6b:24:22:d3:e1:
5b:a6:62:8e:97:66:0c:bb:c6:01:52:14:ef:67:39:23:d4:7f:
f4:32:bb:f1:ce:61:09:19:d6:bd:00:8c:ec:b4:ba:81:56:1d:
90:b7:b8:7c:c6:a3:14:cc:0b:fd:40:e7:72:69:97:a5:47:a0:
18:19:d9:59:72:b0:28:af:6a:ed:3c:a2:a3:96:2d:1b:10:f3:
9c:33:ea:c9:f4:db:53:67:61:d2:e3:c0:c4:e0:33:72:db:cb:
98:01:a0:6d:6b:05:4d:f1:af:fe:a2:58:92:b0:13:8d:6c:73:
05:06:b7:b0:71:f7:96:be:57:a1:6a:82:73:99:40:b8:38:ca:
5b:45:d5:4c:14:af:4d:df:b3:8c:ec:af:8d:20:53:fa:3f:a3:
18:17:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:43 2025 by rpki-client