Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File: eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier: 54tfCPdtuxcOvypeiEP8t3JoGy2lZQbNKvowIJLtmbo=
Subject key identifier: 29:CB:D3:B7:6D:67:0F:08:5F:36:C0:BE:44:6A:29:E2:E6:79:E4:B4
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial: 019A4E4FAF3F8EAD6ACA5A46E0D953CBDA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number: 0E9A
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: 6b3cFE9uZ48ho/uWRpc1A5xiEtGT1BvNbqwRhSzaBIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:af:3f:8e:ad:6a:ca:5a:46:e0:d9:53:cb:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=29cbd3b76d670f085f36c0be446a29e2e679e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:17:cc:72:17:af:50:e5:71:32:f2:f5:0b:
bc:9e:ee:68:f3:a6:7a:95:2b:f6:15:93:70:22:df:
2a:f0:13:e0:7e:f3:a9:de:28:9b:a5:a5:a9:e4:22:
9d:4c:39:84:b7:5e:72:8a:7f:71:ac:92:ff:51:d8:
b6:aa:f7:24:08:2b:23:13:72:2f:e4:bb:da:4a:6f:
8d:dd:d6:ff:64:12:fe:9d:f8:9a:2f:18:55:50:0d:
ff:f8:ed:2d:2f:f5:78:29:a2:5d:fc:7d:69:81:ef:
c0:5e:47:13:04:2e:30:a9:48:0d:55:33:42:39:49:
a2:0b:ac:41:72:b6:dd:27:12:37:5e:e6:83:9b:ea:
4d:87:c9:16:ea:c8:dc:7c:c9:61:83:2b:51:48:5b:
2e:35:1c:cb:e9:a2:08:75:e4:eb:72:1a:9c:35:62:
b4:4a:0f:84:67:5a:ee:cb:26:45:57:49:7b:af:b8:
57:f0:de:a6:b6:ed:1e:8c:95:ea:46:bc:2d:b8:9e:
2f:ee:d1:24:f7:cf:ae:f7:6e:a1:a9:99:8c:b9:ec:
d9:7a:92:59:5b:b4:5f:a5:f6:2f:9b:e6:f1:88:b0:
67:08:19:fd:39:60:53:ac:97:2c:f3:7b:d9:96:14:
39:e0:1a:6f:4f:6d:3d:02:ed:87:b3:28:ff:b8:44:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:D3:B7:6D:67:0F:08:5F:36:C0:BE:44:6A:29:E2:E6:79:E4:B4
X509v3 Authority Key Identifier:
keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:58:50:21:d9:28:45:da:20:6b:8a:a6:fe:96:fe:d2:1d:3d:
7d:6d:dc:30:f9:83:c4:e8:e2:ad:28:3b:da:14:e3:63:04:34:
1d:0f:39:93:e3:9a:be:e9:7a:8c:8a:01:14:38:d2:6d:83:14:
25:e8:68:04:bb:11:a9:53:56:08:8e:25:40:ac:b4:c0:5f:be:
0b:9f:15:1e:12:ed:09:d2:7f:2b:c8:15:aa:fe:f1:ab:76:d0:
fc:a3:0c:3b:95:31:b9:ea:ad:26:ac:43:01:94:b7:20:78:df:
1e:16:04:68:90:8e:32:b0:9b:36:fb:49:d0:67:5f:12:30:77:
a3:59:bf:08:d4:1a:58:4d:75:98:27:b7:35:20:39:a7:e3:e3:
62:c0:0f:25:e2:2f:38:b9:5e:2a:91:75:52:3f:23:8b:1e:0d:
be:d3:e9:b5:d0:14:65:1f:51:86:58:ff:8f:f2:27:92:69:6a:
58:fa:99:d2:8c:22:20:25:08:30:32:ff:43:67:45:6a:9a:21:
13:c8:60:0f:9c:02:13:fd:13:56:26:33:db:e2:50:94:63:c9:
6f:9a:53:69:18:a8:1c:25:15:2f:23:22:64:22:1c:c5:61:27:
83:ee:b1:ad:35:be:b8:c7:87:d4:28:de:4b:f6:18:67:3b:41:
07:b2:c3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:34 2025 by rpki-client