Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json)
Hash identifier: Y7ZKoYPAhHYRTuHX9wfGTvIe03+xMgyiO7rcdkZhUJg=
Subject key identifier: 34:B8:0B:2B:CD:17:E3:B3:A8:54:AE:11:DB:73:AE:EB:63:F1:97:96
Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Certificate serial: 0199FC5845D61C00BD65B1C831C80AB924C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
Manifest number: CB
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: ARtekcm1cqltMny4GDEPtuuszqYdMIw2dWACF0+vHp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:45:d6:1c:00:bd:65:b1:c8:31:c8:0a:b9:24:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=34b80b2bcd17e3b3a854ae11db73aeeb63f19796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:39:66:db:84:4d:35:43:d9:0c:ff:ba:85:
36:fb:2d:7b:d5:3d:13:04:5f:39:dc:57:f6:52:2a:
09:0d:6e:45:c8:8f:11:df:60:54:57:c8:67:ed:73:
de:b2:0a:07:85:59:0a:d2:42:7c:87:aa:13:3c:c0:
a2:48:99:da:0e:85:9b:d4:ba:2c:d7:28:49:3b:3f:
54:b4:40:71:5d:5c:04:c1:2e:ce:15:08:5f:3a:90:
80:e4:41:d9:ae:26:91:55:df:ae:a3:83:a8:4f:10:
26:e1:a4:38:2f:b8:04:f3:ce:e8:cf:0d:bc:62:95:
6d:31:97:82:23:a3:35:57:ef:2f:df:80:e5:06:1f:
7c:f3:5e:ac:12:b3:e4:20:db:d9:3c:15:c9:3a:4a:
04:05:ab:4c:7b:77:31:d2:6b:f1:71:c7:fd:3e:45:
c3:52:8a:56:81:05:08:d3:b9:20:61:6c:a0:ad:6c:
c3:33:17:ce:46:98:46:26:9b:e0:fb:c5:fe:95:60:
8d:cc:d0:74:11:ac:aa:2f:4c:47:a1:9f:00:2c:c7:
ab:20:03:81:a5:cf:8f:bf:18:d8:b2:ff:d0:93:ec:
98:fe:99:74:a0:c5:1a:9b:94:c7:b0:2d:5c:26:11:
43:1f:f5:29:e1:8e:4d:b1:d6:ca:69:42:43:4a:d8:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B8:0B:2B:CD:17:E3:B3:A8:54:AE:11:DB:73:AE:EB:63:F1:97:96
X509v3 Authority Key Identifier:
keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:6c:8b:90:45:7a:8f:ca:b1:54:52:6c:39:84:63:6d:6a:
05:de:8f:b3:24:08:a8:26:9c:c2:69:8b:d6:08:43:3f:f9:f7:
25:b5:12:c7:68:6f:7a:b7:f5:d6:50:72:1d:59:5b:c9:58:7e:
e5:f2:97:3a:5d:45:f9:27:59:fa:38:8d:e4:8f:a8:b3:db:af:
41:74:9a:ce:1b:a7:15:42:2b:16:f9:0f:c0:fb:48:08:d6:a3:
2d:95:e1:8e:ec:70:80:a7:8f:39:d5:79:16:af:dc:41:8c:e8:
0d:18:ce:0f:1f:dc:83:f9:9d:c0:a9:6e:0c:4f:ad:7f:91:97:
68:7a:2f:8b:dd:b0:5d:f9:da:36:fd:a1:b7:6d:73:2b:20:2c:
b5:8a:b5:fc:8c:7e:45:b2:fc:55:41:9d:72:fd:63:95:fb:d5:
47:4d:65:5d:0c:e3:97:5d:f5:1a:b0:13:1c:e4:fa:3e:83:ee:
4e:dd:3c:e0:b1:75:85:06:5b:2b:3d:ba:b7:95:75:31:83:c3:
d1:0a:31:a2:c0:1a:2f:4e:cf:28:1e:96:7f:f6:dc:cb:35:be:
9a:3b:f5:83:26:f0:dd:49:76:c0:c3:9a:ae:68:3f:38:75:3f:
54:78:4f:72:ea:49:f1:eb:8f:f4:36:5b:37:01:13:6b:09:2e:
c2:5f:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:57 2025 by rpki-client