Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: RCYSszFxDmT4NBJuHhmBvPpz1i0Lmcop0RBagXTEJww=
Subject key identifier: 1D:0B:7F:AC:22:82:1F:7D:2A:75:9C:2B:61:55:FE:34:7E:B5:DE:B8
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 0199FC8F5E0DB765D8AF48CFD0D553578DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 0289
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: 479JRINBOdsrQRFT60SryaatHvmhamtHrU5dXJdzegI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5e:0d:b7:65:d8:af:48:cf:d0:d5:53:57:8d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=1d0b7fac22821f7d2a759c2b6155fe347eb5deb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:5b:cf:12:f3:bc:ee:7c:23:d9:df:12:2b:
ec:89:55:79:0c:c4:c2:65:06:4d:0f:86:18:02:96:
02:f3:54:9b:cf:9b:eb:b4:3d:46:7d:73:95:2b:71:
c9:6e:6f:d5:74:56:2a:d2:c8:53:6e:b1:37:9f:9b:
98:eb:38:a2:41:7b:8a:6a:23:f7:f0:01:bd:a6:11:
b6:83:39:ea:d0:65:f9:3e:34:87:81:98:9f:4e:e9:
08:60:ca:74:d0:9d:b0:f6:43:6c:e4:5f:94:e6:dc:
02:cb:79:61:a5:8e:a4:1b:7e:60:55:0e:1d:ae:27:
1f:52:10:19:f6:b0:8c:df:15:6b:22:77:9a:77:23:
3d:35:07:a9:ad:79:b0:8c:2c:30:ff:58:f5:ed:f7:
05:da:b2:9c:0c:90:a4:75:ee:c3:99:0b:fa:a4:91:
ef:3b:67:73:91:6f:74:8e:9c:e8:b0:61:6d:9d:8c:
4e:e2:31:79:b6:9b:82:5e:43:65:65:1c:ff:3b:1a:
1f:59:e0:3e:e8:53:df:68:9a:e9:9e:41:b9:e3:b4:
c3:81:25:8a:b1:4c:cd:c6:d2:72:08:7b:96:8c:1e:
c3:57:d0:dc:ff:f4:ec:49:66:f0:59:6d:61:c9:8a:
a5:01:84:3d:3d:a7:ee:2a:59:e4:c5:a2:8b:66:85:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0B:7F:AC:22:82:1F:7D:2A:75:9C:2B:61:55:FE:34:7E:B5:DE:B8
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:58:08:27:93:70:43:cf:1c:a9:be:6b:d3:05:2c:66:1d:2b:
61:cf:97:1f:aa:79:77:43:ca:5c:fd:13:8a:55:d0:be:50:ec:
2a:b0:59:1e:61:d8:51:e5:a2:8e:59:5b:e6:2d:8b:14:bf:97:
3f:df:65:7e:1e:dd:6b:d1:74:ce:a3:f6:5c:69:52:f3:95:bb:
b8:66:91:cf:1c:f4:56:58:38:27:f0:18:c1:11:a1:30:de:16:
16:97:11:a6:26:3e:de:a4:04:dd:14:b5:8a:20:24:53:94:31:
18:39:90:ea:9f:a2:55:22:ca:8b:a2:f2:08:9a:5e:b1:e1:be:
36:39:d7:32:cc:a9:8b:d5:39:ce:9d:e2:2b:f4:b1:45:a8:63:
cc:4f:9d:99:99:ec:49:6c:3e:ee:f5:a7:a2:c2:74:18:91:a8:
2b:80:e5:6d:23:ee:e6:43:a8:de:ee:55:9c:dd:60:8a:c7:86:
d9:1d:67:59:9f:c6:a0:0a:7d:1b:a8:b5:59:85:a4:b1:3a:22:
d7:86:31:9a:e0:ba:c9:0d:92:12:8c:9e:e4:32:7e:67:38:4e:
35:93:5f:40:b4:ce:39:3c:23:8b:58:14:8c:00:fc:07:ae:73:
ed:4f:67:af:11:bb:94:3f:6c:dd:25:2c:b3:92:25:f9:6a:2a:
e2:e3:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:23 2025 by rpki-client