
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
File: EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json)
Hash identifier: vxzpWC2z0eh/30FRilj29/dBOtYhRZENpAGsFUb/cgE=
Subject key identifier: E9:77:AD:7F:C2:B0:11:82:19:BB:F6:3F:40:F2:D3:09:9A:8E:B5:54
Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95
Certificate issuer: /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
Certificate serial: 019889C4FD6DE89A150A1C225C6AF05E0D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
Manifest number: 12DD
Signing time: Fri 08 Aug 2025 13:00:45 +0000
Manifest this update: Fri 08 Aug 2025 13:00:45 +0000
Manifest next update: Sat 09 Aug 2025 13:00:45 +0000
Files and hashes: 1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: xUnkNp9IsPOIrmyt/ONXupoS061blfMRYXGsQCuR17s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:fd:6d:e8:9a:15:0a:1c:22:5c:6a:f0:5e:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
Validity
Not Before: Aug 8 13:00:45 2025 GMT
Not After : Aug 9 13:00:45 2025 GMT
Subject: CN=e977ad7fc2b0118219bbf63f40f2d3099a8eb554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:73:ae:14:83:b5:0e:cd:ce:63:12:72:13:
61:b5:ad:c6:e9:3a:f3:2e:8a:9a:91:c0:b7:35:a7:
a4:62:b4:7e:87:d4:ef:63:98:98:f2:a9:91:55:68:
1b:ea:3b:6f:5f:82:53:9c:a2:90:8f:a0:fd:cc:2d:
eb:d0:4e:c2:23:5d:96:43:d6:c1:a9:da:e5:6d:47:
e7:16:38:79:e7:09:d3:07:91:2c:8b:76:41:3c:9a:
79:c3:cb:2a:ad:a8:f0:09:32:be:a2:5e:6f:fc:47:
e5:a4:33:2f:ea:08:d2:01:d6:c2:8e:43:c7:e8:41:
5c:89:a0:0f:ef:b6:d4:29:70:36:40:2a:aa:42:58:
db:a8:1c:e3:74:a7:b1:c6:2a:04:e7:51:db:3a:af:
c1:e3:77:5e:7b:d9:9d:d1:cb:dc:a4:c4:cf:34:99:
55:ec:73:34:d6:48:db:0b:06:0f:6b:22:62:e5:f9:
b8:5c:85:69:d4:d0:ae:a4:28:f6:13:0a:5f:e3:6c:
5a:3f:e7:52:28:8e:8e:c2:5a:71:f6:ae:c8:6e:62:
fe:af:46:87:68:4a:c6:a7:f5:03:4b:87:c1:93:1a:
a6:1a:3a:4a:bc:0b:08:77:db:98:89:73:fa:24:1b:
8f:92:e6:9e:47:0b:31:77:c6:36:f0:67:54:2d:3b:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:AD:7F:C2:B0:11:82:19:BB:F6:3F:40:F2:D3:09:9A:8E:B5:54
X509v3 Authority Key Identifier:
keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a5:d2:b4:70:7c:95:19:d9:2b:f4:de:1d:39:17:2d:ec:33:
ee:20:60:f3:9d:3b:68:28:a0:af:a7:0c:f6:69:2c:33:d2:4a:
99:3a:fa:54:54:f8:8d:f9:73:0a:99:7c:fb:81:7e:97:13:07:
06:04:e0:f4:10:b1:2e:44:82:6e:1b:d0:8b:ff:77:e7:1b:a4:
00:de:fc:ec:e8:be:17:b5:89:0f:df:66:2c:be:17:4f:5a:ce:
3c:60:a1:3b:83:da:ee:b0:b3:ee:78:0c:76:bf:22:39:b9:2f:
c9:56:5e:29:3c:f5:d0:25:7e:a9:ce:dd:e2:61:f1:ad:5f:58:
b5:2b:97:54:8c:e8:a2:a2:23:40:e2:d7:cf:bc:5e:ac:de:49:
60:1b:bc:9e:5d:e2:54:41:c2:c6:a1:a2:48:af:dc:6d:8b:bd:
e2:72:ca:d6:05:0c:3a:5e:3c:06:45:3f:56:91:01:71:c1:1c:
66:14:54:87:05:77:49:81:5f:9a:a0:3c:78:eb:7e:f4:10:ea:
76:6e:35:de:73:d6:ce:0a:99:81:29:30:f9:8a:ed:63:85:48:
a6:42:82:9f:f9:68:a0:b1:7a:18:1f:4b:52:3e:fb:7b:13:f3:
a0:1f:f8:51:d7:3f:c8:00:30:48:14:60:be:68:06:3a:aa:c4:
a2:69:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:40:33 2025 by rpki-client