Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier: cO8ePEyutnc7DUsQaPnlQQZ8nH+2cwcJ6gaeBcFnsk8=
Subject key identifier: 69:C2:2B:6B:4E:6F:94:D3:AD:E0:50:B7:2E:13:78:B5:66:CB:F9:BD
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial: 019A4E5001087EA45B1CE1521D04D0D119C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number: 11E2
Signing time: Tue 04 Nov 2025 10:00:57 +0000
Manifest this update: Tue 04 Nov 2025 10:00:57 +0000
Manifest next update: Wed 05 Nov 2025 10:00:57 +0000
Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: lWNeMw392+RLM+oGe4H2yfKIoL5UStwKUFSsiunuhrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:01:08:7e:a4:5b:1c:e1:52:1d:04:d0:d1:19:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Validity
Not Before: Nov 4 10:00:57 2025 GMT
Not After : Nov 5 10:00:57 2025 GMT
Subject: CN=69c22b6b4e6f94d3ade050b72e1378b566cbf9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:18:fa:d6:e3:ab:63:a3:41:33:b6:b5:90:
2c:d2:ec:ac:76:a3:76:6d:ee:65:27:52:cb:27:6e:
30:a4:2a:57:84:69:3e:f9:35:7c:8e:db:90:03:f0:
60:00:a8:8a:81:f3:e5:ba:6d:26:8d:1e:3e:a9:b4:
ee:c2:28:25:90:19:e8:89:fa:b5:a6:cf:0f:38:23:
1e:8c:3f:7a:b7:c2:1e:f5:7b:a2:c0:1f:5e:54:51:
3e:5c:27:81:51:51:4a:df:7d:b0:f4:00:20:c8:a2:
30:f1:ad:19:06:9e:9c:fc:d0:da:e9:1b:68:4a:58:
f9:08:05:7e:a3:c9:56:78:ec:f3:18:2f:a7:2a:8e:
a6:96:31:b7:88:ba:8b:a9:19:c2:ab:7d:9c:bb:9a:
c3:43:f5:0d:ee:75:94:8e:87:94:64:e7:5c:91:76:
e4:e0:ea:5d:a4:17:65:93:48:80:82:7c:26:cf:23:
82:4c:88:f4:02:e8:2d:1a:d8:33:e0:d1:99:78:be:
06:2d:49:58:2e:e9:3e:14:c0:9c:d6:6f:eb:f3:1e:
80:39:1e:07:1c:fb:8c:e5:ef:cb:a1:1e:4d:a6:a9:
a9:96:15:f8:40:85:44:48:ad:10:88:ac:38:88:0d:
0a:e7:ac:88:64:81:b2:4d:aa:a1:a6:36:17:44:66:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:2B:6B:4E:6F:94:D3:AD:E0:50:B7:2E:13:78:B5:66:CB:F9:BD
X509v3 Authority Key Identifier:
keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4b:84:8d:48:60:67:d1:8b:f0:72:35:de:af:7f:82:63:e6:
c3:78:ca:b3:1a:56:10:3f:2a:7e:5a:70:35:10:37:67:f7:11:
06:cd:b3:38:9e:0a:1d:8c:6d:08:8e:9f:c1:bd:a3:32:27:5c:
dd:4e:2f:f6:c8:24:53:32:78:f3:28:4d:f2:e8:7c:48:13:9e:
a7:ad:f9:37:86:76:70:e8:e2:67:8e:0c:ad:96:ad:41:00:50:
cc:43:97:5c:ed:95:36:23:fe:78:d9:55:53:a5:f8:8e:59:1e:
2f:95:8e:8c:70:ff:7e:4e:69:68:ae:bd:c3:ff:5c:3a:72:76:
c1:ae:0d:c0:e2:ab:3e:0f:a0:99:8a:6a:04:37:d0:af:56:8b:
4d:22:1a:5b:48:43:5b:a9:c0:29:be:b5:86:35:d1:7a:19:77:
b3:da:a8:4f:41:db:a7:01:13:69:bb:99:83:1b:70:49:25:b6:
00:96:93:55:13:66:6f:4e:89:5d:3b:22:bd:91:5e:d0:95:de:
a2:13:30:e3:32:b6:28:a6:7f:a2:3b:97:f2:e4:81:9f:b3:7e:
da:35:4a:33:cd:4c:68:e3:2e:16:96:3a:84:3a:83:63:19:2c:
da:e8:8e:14:d6:c9:a3:95:48:c6:97:4b:71:1f:3e:a4:23:37:
38:93:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:47 2025 by rpki-client