Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: 7VpHiuX0Rn7uEKWMQiXPIjku/smOPwgmtD2tZRy6thw=
Subject key identifier: D4:43:54:F1:33:BA:38:C5:F4:4A:88:C9:04:5A:8E:EA:6E:79:6F:27
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 0199FDD9B86CA0B473956464093A19138DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0D8A
Signing time: Sun 19 Oct 2025 19:02:08 +0000
Manifest this update: Sun 19 Oct 2025 19:02:08 +0000
Manifest next update: Mon 20 Oct 2025 19:02:08 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: F5eqwKI6Lu1NcxJbP1lYDYiCq8hMO+oQdku4I0uXgPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b8:6c:a0:b4:73:95:64:64:09:3a:19:13:8d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Oct 19 19:02:08 2025 GMT
Not After : Oct 20 19:02:08 2025 GMT
Subject: CN=d44354f133ba38c5f44a88c9045a8eea6e796f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:4c:a8:fe:fb:77:ec:bd:60:81:31:ca:ff:
6b:72:f3:79:04:6e:00:3a:63:40:ce:73:b1:30:cb:
6c:84:0a:35:fd:88:79:35:e5:75:69:58:64:c8:7d:
c6:a8:e1:52:63:a6:f2:dc:bc:5d:37:90:b7:f9:32:
2e:3f:95:0a:10:3b:f3:99:31:5e:be:d1:b0:2b:af:
2b:06:8b:45:fd:ed:23:d8:13:58:e1:14:d6:46:6c:
8e:17:17:48:d1:de:0e:8a:bd:dd:2c:03:c7:b7:c1:
1e:b2:6c:c3:2b:ca:fe:24:3a:70:ed:bb:8a:e1:bf:
75:92:2a:50:24:8f:87:25:3e:8c:fe:45:7c:fb:93:
85:93:8b:f6:4f:7a:5d:69:44:82:4b:84:22:95:13:
aa:00:05:c2:7e:d2:14:52:06:4d:73:5b:f1:ec:19:
3e:1a:01:89:7a:54:db:9f:5b:5f:b9:1b:0f:a2:48:
0c:a9:f0:ee:75:d0:ea:3f:e0:db:29:e0:66:26:5c:
c7:00:b5:0f:8b:99:bd:b0:39:be:7f:f1:d6:6e:3e:
5a:e8:67:fb:21:b8:b8:ba:e0:3f:93:38:93:99:14:
52:87:03:60:76:77:70:3a:f3:ed:0e:54:72:b3:86:
0d:5b:d8:d1:c0:14:03:20:41:99:d5:75:aa:f0:34:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:54:F1:33:BA:38:C5:F4:4A:88:C9:04:5A:8E:EA:6E:79:6F:27
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:20:db:29:92:ce:5d:b0:fe:34:5a:0d:d4:06:fc:90:30:
52:3a:64:05:93:73:2b:eb:1f:e4:c7:bc:ef:0b:8d:17:09:8e:
aa:00:35:6a:a8:ad:a3:f4:68:31:9e:7d:12:64:ec:4e:5b:52:
c3:cb:9d:b4:5c:fc:2e:bf:b1:f0:40:fa:83:3c:f7:68:2f:3b:
27:25:73:80:9f:e4:34:e9:44:a0:df:64:f8:3a:fe:cc:99:c1:
86:d6:b4:cb:8f:32:74:5b:70:52:17:af:28:0f:cb:b7:37:62:
f7:21:2f:2a:c5:4e:76:73:00:f3:ab:cc:13:83:9a:80:e0:9a:
1d:3d:17:f6:ba:1c:5b:20:e5:2c:37:79:e8:28:4d:79:33:bd:
ef:9d:d4:8f:29:3b:0b:1f:c3:51:ae:14:e6:d8:92:16:4f:24:
6a:04:ca:05:0f:51:87:cf:a5:65:4c:4f:95:2b:0a:4a:34:ed:
28:46:d3:83:93:2d:0a:f7:f9:d9:dd:2d:69:b9:93:95:dc:79:
dc:7b:0f:f0:5a:9d:59:ba:07:c7:c1:00:07:72:40:be:5b:42:
a5:ce:1b:25:08:f3:c5:6f:d0:61:d4:0a:b4:05:ed:1c:be:ee:
02:22:47:16:be:a4:55:68:9a:7e:e1:51:99:a2:5f:3a:7c:86:
db:1c:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:54 2025 by rpki-client