Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File: EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier: mMlG03QZ1taUb2dAkIyKRH7/sBUrw6QS/+n78fFbdqc=
Subject key identifier: 5A:53:83:75:49:2F:AB:A4:CD:5A:33:D6:65:82:16:B4:EB:77:D3:05
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019A533EE4638357341EB3B58D1C542AE38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 09:00:21 +0000
Manifest this update: Wed 05 Nov 2025 09:00:21 +0000
Manifest next update: Thu 06 Nov 2025 09:00:21 +0000
Files and hashes: 1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: n1/rPynMI4K3xsmo8WCT2iq7zXbiogT2cornZG3QU4o=)
2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:e4:63:83:57:34:1e:b3:b5:8d:1c:54:2a:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Nov 5 09:00:21 2025 GMT
Not After : Nov 6 09:00:21 2025 GMT
Subject: CN=5a538375492faba4cd5a33d6658216b4eb77d305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:51:2b:20:9d:ac:39:b0:49:7b:0c:f3:61:
42:0d:91:2e:11:c7:89:ab:84:df:56:c8:d2:8c:83:
b1:ce:50:c7:d4:e0:ef:e7:1e:fd:45:59:ec:f9:76:
c7:a0:43:64:ac:fc:d9:8f:84:1b:aa:d0:d1:bb:8f:
79:87:59:07:90:3f:d3:02:a8:ba:2a:37:5e:b1:82:
ef:92:0f:9c:cd:75:20:4e:b7:0a:9e:bc:7f:f1:6c:
08:62:9f:52:46:1b:b7:d4:f0:dd:2f:a6:f2:af:cf:
91:ad:e2:f6:cd:93:50:86:30:ea:d1:55:f3:a0:28:
ac:17:c8:d4:37:f0:64:d6:a6:2c:12:e5:64:9f:8a:
bf:c7:d6:6c:f0:d3:25:81:a9:4f:66:12:04:4c:1d:
36:59:1a:c9:41:7c:bc:1c:91:c6:8e:ca:e6:da:32:
ee:3f:96:7d:85:da:00:97:02:2f:46:35:b8:b7:19:
3b:b4:77:18:b0:c4:41:01:12:f6:fd:78:24:0d:59:
f0:5d:ba:96:01:c6:29:1f:d3:83:30:ce:74:e9:cd:
30:67:cb:68:de:02:bb:d5:44:18:10:75:70:0d:80:
b3:35:82:c9:1f:71:d0:16:4f:79:19:4c:ac:61:9d:
60:2f:18:9b:7c:17:2d:cd:c8:fb:67:83:e7:b1:a3:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:83:75:49:2F:AB:A4:CD:5A:33:D6:65:82:16:B4:EB:77:D3:05
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6c:a6:42:c8:5d:f8:a0:e9:5f:3b:09:d3:ae:ec:5c:8a:25:
fc:aa:6f:1e:f0:85:7b:50:b6:e1:d3:58:f8:ef:36:5b:b0:79:
d6:ef:18:80:3b:6b:a8:48:e4:e6:95:57:34:0e:63:a0:77:a1:
b7:48:89:47:43:73:c4:d5:fb:30:e8:a5:cc:26:8b:b5:52:76:
69:ac:b7:47:42:3d:03:49:e5:93:44:0d:d3:cb:71:9c:b4:6b:
2c:ab:f4:48:41:58:80:21:e9:c8:51:17:8e:5c:2d:03:eb:9e:
36:cc:73:80:9d:b3:a3:38:91:eb:5f:5b:2e:1d:d2:3a:53:e0:
c5:c0:4c:22:b0:59:c3:82:3e:7e:8f:76:0e:55:49:de:83:d2:
c4:d9:66:38:90:6e:a6:13:09:d5:ea:76:e5:d8:d2:c1:dc:3a:
a8:05:a0:18:61:ca:b3:97:1d:b8:8b:41:a9:e5:85:a5:c0:12:
2f:cd:fe:be:d4:c8:82:f6:e4:37:19:30:70:cd:9e:82:f6:fb:
01:c1:71:e0:80:22:6e:cd:74:ca:0d:fd:5a:ee:0b:be:d6:ec:
e9:91:96:db:f1:a1:64:ab:da:16:00:70:a2:39:58:10:31:5e:
b2:9e:15:20:a7:54:94:59:f0:54:d6:89:09:62:22:10:d2:65:
42:22:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:10 2025 by rpki-client