Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: ZuMS8RqWA97Idg6GyC4oQQ66byS4fu5jVi7oVJa0sWE=
Subject key identifier: 99:3A:9E:A5:61:72:67:81:BE:12:B7:77:BC:46:6B:BA:EA:67:0A:98
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 0199FB46147973C7083A5284B543C6AD96A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: Ef60qWNJTKA3GRmKKeZ1DPo2ybYLsftL249Z8JusXKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:79:73:c7:08:3a:52:84:b5:43:c6:ad:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=993a9ea561726781be12b777bc466bbaea670a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:83:f5:9c:88:77:bb:ac:1e:5a:78:ba:e9:
55:83:12:01:69:68:88:3f:14:73:8c:0e:b6:d0:0d:
2c:c9:80:13:c4:46:49:8c:46:d2:78:72:b9:3f:a9:
53:dc:12:1c:e8:aa:1b:e3:40:c2:6f:fc:a4:a3:1b:
11:dc:40:90:3e:12:10:89:96:6a:79:d9:f1:71:3f:
59:17:88:96:66:a8:23:13:b9:86:0c:ba:31:8c:0d:
68:df:21:d0:03:f2:e9:6e:6a:b2:11:33:96:91:ef:
74:9c:e6:0a:c8:6e:0b:3a:ea:bb:dd:8f:1d:c0:b7:
6f:1c:86:d3:6f:2a:f2:ad:5a:36:4d:e9:63:d2:3d:
5d:44:f5:78:a5:72:68:86:bf:9f:04:2e:e1:df:82:
cb:90:1e:15:08:25:83:92:ad:7c:8c:79:9b:f4:1a:
79:dd:5d:1b:84:2c:be:c7:e8:35:df:79:46:78:59:
7a:49:af:80:f2:d8:e4:95:ac:d6:68:c7:30:89:26:
ad:02:34:da:e5:0d:c1:35:10:12:2e:52:c4:03:e0:
06:7b:f2:d0:4d:62:74:61:58:42:fb:35:26:53:6e:
a3:16:34:cd:18:a1:a4:c6:38:71:f6:11:d1:ec:74:
17:46:83:1e:b3:84:25:03:b7:e3:7f:a6:75:bf:47:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:9E:A5:61:72:67:81:BE:12:B7:77:BC:46:6B:BA:EA:67:0A:98
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:03:fb:72:0f:32:ad:c8:f5:e8:4b:d7:95:27:06:da:10:
89:2c:e2:09:76:73:f4:df:62:3c:8f:0e:4d:60:47:3c:71:65:
d9:26:b3:83:31:12:41:ef:d1:01:36:25:14:fa:b0:21:f2:19:
b9:3f:a4:7e:b4:f9:b4:fa:d7:c6:15:61:21:37:00:d2:b2:1b:
b5:8c:ae:a9:9b:4c:72:65:17:b4:8d:cb:f2:32:33:70:33:eb:
db:8d:2f:ec:e8:bc:51:76:5e:74:d1:83:9c:9b:57:07:f7:06:
a9:8d:55:f4:5b:ed:c2:50:aa:4d:a8:7d:68:34:32:94:c6:30:
1a:c7:61:bc:97:1b:0c:1b:01:8b:67:9e:d5:24:2b:ad:90:61:
99:72:da:9e:6c:22:b8:95:ad:e6:32:20:93:aa:f7:d9:46:90:
8a:62:de:99:a8:9a:f5:ff:af:aa:07:5c:e5:18:b6:74:5f:c1:
77:7a:ea:ea:81:46:d0:7f:30:93:16:d0:29:28:90:b2:2b:9c:
90:20:a6:18:25:f6:15:60:33:7d:e4:5b:46:63:19:b4:fb:5d:
39:03:8c:f8:9f:9c:d0:2a:0c:8c:a5:8d:9f:6b:aa:0d:56:5d:
02:a2:b3:73:44:be:f5:ef:f0:76:56:09:b9:35:5c:d4:ad:34:
50:a9:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client