Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: qHiuVmvbJhTvZPEyh0tq0KTIi3qpRpA3l5FZ3fZRQgc=
Subject key identifier: 9E:4C:61:23:A2:28:D5:8A:AF:AA:C6:69:1C:68:2D:98:D6:CC:17:0B
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 0199FBEA84E3A81BCC2BB0CF6EAD45D50A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 11BA
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: R2pk7BC+6tlhPQnwl3Y1xcrzshs0ZjcBMspJnQRb40E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:84:e3:a8:1b:cc:2b:b0:cf:6e:ad:45:d5:0a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=9e4c6123a228d58aafaac6691c682d98d6cc170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:a5:f1:cd:d0:46:04:24:29:c2:b9:af:85:
a9:da:a3:58:3d:91:fd:b0:4c:ae:bb:2f:5d:17:ca:
bb:65:d6:f1:95:91:61:e8:97:05:e0:ca:df:dc:23:
5c:00:43:b0:2a:66:02:14:1b:6a:c6:81:48:50:7d:
6d:c1:3a:fc:c3:02:66:a2:42:68:85:66:70:e4:50:
98:ce:31:2f:b6:46:fe:5c:26:11:2e:89:3d:34:c9:
6d:a0:69:e8:71:35:03:85:c0:51:a8:bf:e3:eb:64:
56:95:6a:09:ca:64:c3:25:ef:25:40:1b:d7:03:4f:
3c:5a:1c:98:bb:a1:bf:43:9f:37:04:26:d7:40:5f:
04:db:e0:57:0a:ec:cb:07:d4:a0:57:03:e0:cd:6e:
38:65:0b:d1:fa:7f:bd:d8:07:cb:af:43:30:45:35:
d6:bb:4f:82:77:7c:4b:bb:92:97:3f:71:9f:fa:24:
62:d7:22:f2:23:cb:c2:39:f7:7e:49:c8:0c:0c:15:
e2:2a:2e:2a:42:75:bd:d7:37:47:6f:4d:8c:f5:a8:
17:49:f8:fc:3e:e6:38:d9:be:41:93:1e:67:62:ae:
2c:13:85:a4:49:51:c7:72:a0:c5:dd:19:a6:3b:28:
5c:09:70:17:3e:d4:b2:db:3c:e7:eb:01:c5:2a:37:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:61:23:A2:28:D5:8A:AF:AA:C6:69:1C:68:2D:98:D6:CC:17:0B
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bc:3e:7e:e6:b6:e0:68:05:cb:71:61:2a:a6:0d:57:28:4c:
67:cd:4b:20:e1:97:34:b8:3e:bf:56:c3:e7:e6:de:29:e3:99:
11:3a:70:a8:a0:85:70:79:dc:1f:2b:16:b7:bc:6e:90:a6:43:
d6:2c:27:54:78:27:ed:fa:da:e2:93:c5:2d:4c:9a:13:cd:c4:
1b:e5:fe:78:c4:24:d8:03:85:9e:2c:68:c4:cf:dd:e9:83:a0:
ee:8c:00:2a:c3:77:59:39:b6:61:9d:58:18:db:df:91:d6:ec:
71:70:38:17:3f:1d:9c:30:9a:c8:4c:d2:40:f1:c8:7b:e2:ce:
8f:64:a4:b3:eb:b0:a6:63:11:54:a6:03:93:59:24:f4:a6:aa:
91:b4:b9:82:66:3c:eb:5f:1d:65:e9:69:6b:f8:d0:9f:76:2e:
26:d1:f4:2c:fb:5e:6e:87:74:1e:79:51:49:d0:bc:25:7d:07:
96:01:79:ba:43:69:52:e0:db:5e:50:e1:96:2c:76:56:d3:e6:
1f:05:05:b0:c6:d1:8b:6f:ba:ee:c6:2b:5e:fe:59:5e:bb:df:
54:6f:4d:cd:cd:66:2d:94:86:e5:41:c1:b9:e3:7d:ab:ea:4e:
77:ab:1b:06:60:3e:25:f5:3e:97:6f:a0:91:8b:d0:f4:37:be:
57:de:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:25 2025 by rpki-client