Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: MIlVSgnT9JnJXfyIZz6y3YZ8+hPjI3bfyhJRigg8N0Y=
Subject key identifier: EA:15:C0:28:C0:3E:DA:48:E8:CB:87:CC:68:26:26:AB:9F:8B:4C:25
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 0199FE1061DCF1462A77AB175FBD5EBF27B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 08DE
Signing time: Sun 19 Oct 2025 20:01:50 +0000
Manifest this update: Sun 19 Oct 2025 20:01:50 +0000
Manifest next update: Mon 20 Oct 2025 20:01:50 +0000
Files and hashes: 1: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: RPk6+aqJ8g7jC1NjjXNIALBpedm9b9PeN4c99krRpKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:61:dc:f1:46:2a:77:ab:17:5f:bd:5e:bf:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Oct 19 20:01:50 2025 GMT
Not After : Oct 20 20:01:50 2025 GMT
Subject: CN=ea15c028c03eda48e8cb87cc682626ab9f8b4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:3e:63:ad:36:de:52:3e:de:65:9c:5b:b5:
48:e3:b3:e5:92:7e:7d:ed:7e:d5:f4:23:09:c8:fa:
2c:0c:f3:20:b7:32:7a:f7:17:41:93:e9:3b:fc:59:
68:d1:31:05:82:94:7b:8e:90:54:4b:40:c5:b9:7a:
41:2f:24:9b:06:b9:7a:55:1f:a8:38:b1:39:6b:43:
01:c0:d3:92:4b:d8:64:2b:1a:79:7c:a8:1d:8c:e4:
61:b1:b5:8a:00:2e:79:94:69:93:6e:36:f6:be:ce:
03:66:a0:f8:12:fa:a7:36:ed:19:8e:33:95:5a:20:
7f:b9:a0:14:2d:43:4f:a5:f4:15:a3:4d:9c:b0:a2:
58:6e:66:85:dd:91:e3:e4:15:b3:79:e3:66:d3:2b:
b4:5d:5b:c2:90:56:db:c9:a8:64:d2:d7:6c:54:26:
37:fc:a2:1b:88:d7:da:57:e3:75:d2:6e:b1:d8:72:
71:76:89:38:16:1d:79:b0:3f:11:e9:03:28:43:ed:
55:28:69:97:5c:b3:3d:1e:91:d3:2d:41:d7:1c:6d:
8f:5c:1a:0e:49:03:b1:63:92:a4:ca:de:22:ac:92:
93:aa:a0:3f:b1:bf:ce:eb:a6:9f:7e:9f:7b:7f:e7:
05:12:e6:65:ec:37:ca:b9:de:f3:1c:02:b4:7a:b8:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:15:C0:28:C0:3E:DA:48:E8:CB:87:CC:68:26:26:AB:9F:8B:4C:25
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0f:05:a3:20:d2:8d:ab:b1:50:b7:d8:81:02:53:a8:6b:f3:
10:3c:50:28:ca:ea:99:0a:55:48:0c:24:24:21:e4:dd:b3:64:
48:19:45:03:7c:14:0d:43:69:c4:11:56:90:ea:9b:8c:b2:2f:
2c:6c:b6:00:1a:bb:c2:cd:a9:1f:44:06:cd:19:ce:fa:7a:bc:
92:5d:bf:6f:c5:3d:68:57:ef:0f:23:19:61:92:f0:f0:17:94:
21:fc:c2:da:21:47:82:47:fb:1b:a3:d5:8e:16:90:de:f8:b9:
8f:b1:83:3e:6f:31:bf:4b:5c:0e:a1:76:c9:12:37:86:a9:a1:
0f:9c:5c:14:e4:57:d2:4e:8f:d6:02:95:f9:ab:16:ab:91:98:
a0:af:c1:1c:b0:6b:3f:3f:2a:fe:fb:20:a4:0d:8b:90:d0:50:
b7:51:02:22:84:11:0c:8c:4f:c6:1e:f1:20:1d:73:83:c4:3d:
ce:85:ff:85:d9:7a:3b:75:ab:c9:cc:02:0e:9b:ac:0d:3e:51:
6e:7c:a0:bb:e5:b6:4a:5e:b1:b1:14:42:e7:5d:23:e0:24:93:
07:6a:44:83:cc:1c:9b:9e:7b:c4:28:bf:4b:e0:b1:54:b8:c5:
be:ab:ff:6d:71:61:c7:b8:8b:11:07:b0:ec:e3:26:17:3f:f6:
23:85:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:08 2025 by rpki-client