Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: nutt6x7Q3V2/twIQnl+S2omiH7ZRVRGFzozQRFHZE7k=
Subject key identifier: 73:1C:24:4F:CD:E2:6E:1E:D9:9D:76:70:E7:86:A3:82:56:43:F9:72
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 0199FDDA34F5789CD3EF2A682FA196C33D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 0545
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: ht3BTFw/whmzXzK6WmMBcXX4UqA67i+/5D1/WWJPzj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:34:f5:78:9c:d3:ef:2a:68:2f:a1:96:c3:3d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=731c244fcde26e1ed99d7670e786a3825643f972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:ac:d7:b1:21:af:21:ef:8d:7e:63:46:3e:
f6:b1:43:e0:c8:47:38:a0:b8:2e:79:73:2e:59:d2:
28:3e:2d:e7:15:51:1d:84:1b:1f:95:7d:0f:bc:c3:
80:66:c7:fc:06:a2:fb:3f:08:c1:ef:7b:10:48:e4:
a7:87:a7:bc:65:97:48:51:4e:2d:11:a6:b2:72:b5:
07:9e:6b:86:19:dc:88:52:fa:a0:41:1c:28:8a:7b:
fe:ae:cf:9b:5c:78:6a:a5:f8:a8:ca:f6:88:12:f1:
15:fb:20:3c:2b:f3:23:3d:47:e8:f5:48:ab:2b:d1:
b3:dc:62:c0:0f:7e:a5:b5:1c:09:bf:34:9a:41:b8:
6f:79:82:4a:63:1b:89:96:b2:27:14:de:eb:09:f9:
db:7b:25:70:d0:a1:96:74:49:23:8e:f3:60:a9:9d:
cf:4b:5e:a9:7e:8b:20:ed:57:e7:3b:bf:76:0e:02:
77:9c:0a:33:fe:55:d3:9d:57:b7:ed:c1:c1:2a:87:
6f:31:f3:0e:96:1c:87:ba:a0:2c:8b:73:90:68:67:
85:b2:e2:7e:cf:a3:20:f5:d7:da:3b:7e:3b:55:6e:
b0:ff:6c:e7:86:53:b2:48:18:d6:e9:f4:84:7c:11:
c3:e7:3e:56:9f:ad:0b:e4:96:87:85:e3:9f:2d:e9:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:24:4F:CD:E2:6E:1E:D9:9D:76:70:E7:86:A3:82:56:43:F9:72
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f3:03:91:b8:60:51:a1:0a:09:df:c2:ba:0c:65:01:9a:dd:
45:c5:ef:55:bd:10:3a:51:e3:c1:8c:1a:8f:15:ca:e2:05:0d:
99:9f:90:22:e6:a3:a2:80:6b:96:de:36:ab:f5:d3:55:52:33:
0e:0b:50:af:75:73:21:f6:b1:a6:04:ea:b5:1d:2e:3d:8d:9e:
90:27:9d:c3:b8:87:31:db:35:d7:2c:e0:a3:2c:da:c6:44:bf:
ba:0b:a2:dc:77:f9:4b:b9:d4:88:ec:d2:86:85:e2:55:9e:4b:
c1:6f:ad:5e:4a:c1:ab:39:85:b6:dd:50:88:73:63:b1:c6:3d:
f9:7b:fa:bd:be:25:7d:8b:34:37:7d:c6:dd:0e:80:37:d7:65:
51:6d:60:a0:a8:f8:19:bb:84:95:79:71:5a:aa:c3:07:f2:e0:
c8:78:e5:f5:7e:d0:29:69:bd:4a:11:d6:67:30:1c:2c:5f:3b:
b4:3c:a6:e7:ff:c8:95:a9:0d:41:fe:8d:2b:49:26:0c:b0:26:
af:b9:f0:1b:55:75:e2:76:67:1a:c2:14:15:fa:ab:a3:b4:aa:
d4:d9:a8:34:c0:e5:67:0e:6c:ad:eb:f1:b7:4b:66:e8:41:1e:
51:7a:db:25:f4:df:c0:d4:1e:c3:b4:56:56:c7:7c:f3:b6:15:
f6:c3:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:55 2025 by rpki-client