Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File: E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier: sbQLu2afz9ad6XZ/0kw7Ijn06IDhSHXWoZ4MBO+hzC4=
Subject key identifier: 89:93:C1:D6:C2:CE:56:E9:85:C6:EE:4A:1E:D4:16:6A:A7:5E:EC:EF
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer: /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial: 019A4DE21DBF5EE1B49B02A7DF3839A76249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number: 0358
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: f2inhJQwSzxWK4WWwGWKqWc/vyyoBpwW7cjcDur2wIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1d:bf:5e:e1:b4:9b:02:a7:df:38:39:a7:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=8993c1d6c2ce56e985c6ee4a1ed4166aa75eecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:2b:a4:17:d8:3f:de:ed:c6:e2:21:4a:1b:
c2:97:a9:d7:b4:06:0d:64:6c:c1:67:32:60:e5:a2:
5e:64:00:ed:e7:24:2c:9e:ee:b0:35:73:00:63:a8:
ca:7d:4e:88:1b:b6:86:90:19:4b:86:54:a1:09:27:
0a:bc:49:e8:fe:e0:22:44:2c:a3:9a:ba:18:c7:ca:
68:cd:70:02:1d:a2:f5:f7:bf:a5:96:01:ce:be:ac:
f6:3e:33:2d:6b:ab:40:57:35:54:b1:a6:fe:6c:52:
54:df:44:e4:e2:29:c0:b9:28:21:f7:8e:16:fd:b7:
2e:b8:2b:da:52:be:9d:bd:88:84:3f:f6:e8:58:46:
ac:e0:1e:2d:74:53:9a:36:57:b4:1b:04:4e:03:e6:
02:a1:18:1d:54:ca:8a:fd:fd:38:fe:ea:f6:0a:bb:
d4:0e:69:2e:84:78:26:f6:db:fa:c4:46:6a:87:fa:
4e:0f:29:ca:4c:0e:70:c2:ac:70:86:94:45:49:6c:
05:b6:75:9d:a1:b6:61:d3:0f:c2:e5:cc:57:ce:6c:
9e:f4:ae:96:1f:ca:7a:bc:0d:78:0e:6d:b8:a6:4c:
89:ff:22:0d:1a:cb:f7:1e:b7:23:96:52:ac:14:de:
b4:74:bc:03:e0:4d:67:11:b6:50:e9:f2:e4:68:a3:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:93:C1:D6:C2:CE:56:E9:85:C6:EE:4A:1E:D4:16:6A:A7:5E:EC:EF
X509v3 Authority Key Identifier:
keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:98:88:2b:3f:9e:45:0a:06:72:55:41:aa:83:d8:d8:2f:46:
7f:00:44:c3:d0:97:78:35:25:9a:7f:8d:ca:93:a4:00:f4:6e:
07:bd:a6:cf:4f:68:18:19:a7:3d:fe:3c:c5:35:39:2c:ee:29:
3d:75:dd:e7:1d:5b:ac:08:62:d1:7a:8d:ec:83:85:dd:55:e4:
47:6b:10:38:64:36:56:f2:f0:b6:e4:a3:50:20:f8:2b:2c:07:
54:48:0e:28:0c:b6:9b:b0:ed:5d:43:2d:1d:ff:6f:fd:b7:47:
f0:ad:e7:27:9f:28:f5:36:74:dd:05:da:86:62:da:e2:4b:a3:
49:c8:c9:5d:bb:9b:85:d2:62:50:8f:9d:02:89:18:97:c4:a0:
fd:a5:5e:7a:d6:fd:34:40:e9:fa:b5:77:92:1b:70:3e:52:fa:
1e:3d:f7:00:1d:c5:fe:0e:93:44:ce:d6:04:ff:29:d5:d3:50:
88:3c:65:ec:d7:be:cf:2a:ec:e1:11:c6:67:15:21:87:fa:f9:
d1:82:60:d5:23:a9:0c:a4:86:4e:a8:14:66:8b:c8:37:e9:4e:
a5:42:67:f9:9a:38:7e:9e:09:50:b4:d4:34:b7:ba:43:60:35:
e9:3d:cc:5e:00:06:6c:20:c8:aa:f3:d1:63:d9:d6:eb:6d:8b:
5a:71:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:37 2025 by rpki-client