Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
File: eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json)
Hash identifier: nh2ooFBbw5pPjJ8qTjWkp34W+vulmNOYO4MKONipkGE=
Subject key identifier: 0C:4A:C4:E1:B2:ED:7E:2C:F5:FE:88:71:5E:7D:EF:B3:41:FB:76:1D
Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
Certificate issuer: /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Certificate serial: 019A4C60E56E3982A81CA74EC50A242C7A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 01:00:09 +0000
Manifest this update: Tue 04 Nov 2025 01:00:09 +0000
Manifest next update: Wed 05 Nov 2025 01:00:09 +0000
Files and hashes: 1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: yFxuME6S9ylY3deZYJlNGAPf3QZ1Yzfs4l93mOOJaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:e5:6e:39:82:a8:1c:a7:4e:c5:0a:24:2c:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Validity
Not Before: Nov 4 01:00:09 2025 GMT
Not After : Nov 5 01:00:09 2025 GMT
Subject: CN=0c4ac4e1b2ed7e2cf5fe88715e7defb341fb761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:7d:39:f1:cf:fb:5d:93:aa:bc:2b:43:54:
d7:13:f1:24:aa:bc:86:03:e4:7b:45:fe:c1:b9:07:
3a:32:b8:13:a5:fc:fc:47:d8:59:d8:e5:85:7d:a5:
0d:4f:c5:9b:7f:89:90:60:2a:8e:2d:17:a6:ff:3b:
b0:32:b5:9f:a6:26:ba:a1:7a:22:ba:8c:65:ff:9f:
fd:18:0b:aa:eb:7a:85:16:4f:06:40:61:25:17:6e:
c8:9c:af:11:62:1f:3a:9c:7a:4f:fa:aa:26:1a:bc:
10:8c:5c:b0:c0:53:ff:0d:4b:fb:62:37:b5:58:23:
5a:42:09:6d:c8:13:a7:dc:50:88:f1:d0:8d:0e:34:
1c:78:7a:cc:f0:76:a3:c6:ae:67:fa:80:b9:f0:64:
42:df:29:ed:d2:5a:ca:61:9d:28:33:4f:a5:57:d4:
b1:85:cc:8e:ac:64:96:a2:56:f0:1e:f5:6c:34:f2:
4a:79:5e:d5:4e:40:df:ee:f3:c1:19:68:29:06:63:
46:4a:f6:69:a6:27:47:aa:3a:37:ee:1c:7c:cd:fa:
af:b8:26:22:81:2a:99:e7:f7:de:1e:89:52:19:40:
3e:d1:90:b3:23:63:cd:46:48:80:05:43:8b:a7:84:
4f:c4:ae:f6:ac:f3:cf:8a:ec:3b:d0:c4:62:c5:4d:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:C4:E1:B2:ED:7E:2C:F5:FE:88:71:5E:7D:EF:B3:41:FB:76:1D
X509v3 Authority Key Identifier:
keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:38:1a:a9:0e:5e:0b:ba:75:f0:6c:e8:aa:eb:1d:26:e5:2a:
48:f7:81:05:df:99:00:d8:0c:94:7a:15:0c:b2:50:2b:6f:05:
99:d0:5e:cf:55:28:11:a1:17:17:12:eb:14:0c:a9:0b:d0:56:
ae:a6:9b:b8:4c:95:49:d8:d8:43:c4:f9:ac:ea:44:06:90:5f:
d3:1b:e0:ba:8f:0b:6f:da:b9:cc:73:2d:02:8a:2a:ce:e1:69:
14:c6:e2:df:ee:54:43:a2:9c:33:00:50:ee:64:d9:8e:53:1b:
49:22:57:e8:a2:c3:ca:8d:de:a5:b1:1b:0e:d5:9a:8b:d5:33:
99:db:ce:b9:ce:bd:d8:e4:43:3f:eb:7b:6a:73:b5:88:5f:15:
ef:8a:9c:c0:70:3b:10:61:fc:e5:0e:2f:a3:9d:cd:5a:3a:53:
98:a4:63:2f:ae:33:be:2f:c1:ef:d2:89:51:4b:28:65:a2:94:
f5:19:4b:cb:cb:0a:68:bc:93:d4:46:42:51:74:66:d6:87:15:
c9:28:19:50:29:f8:d3:c1:c7:11:ca:63:71:67:9d:7f:ad:42:
19:3f:1d:16:e2:22:2f:dd:bd:82:63:a1:17:9f:b5:8c:35:0e:
85:79:2c:fe:8f:d9:10:77:85:18:1d:ea:fa:70:a1:b2:f8:73:
9d:f3:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:47 2025 by rpki-client