Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: IGNkb5EbNFpCUERbTGan0u/AAL96a5075/pZsprOVk8=
Subject key identifier: 9C:2C:5B:A1:6A:77:61:60:92:02:81:F8:A2:2D:B1:13:D7:54:BC:51
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 019A4EF47661F1B6390C982BF1F38A237342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: R1ubUSNHLUEOi9Iv/P4ONNJEmNjevNMurwfIapFzuP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:76:61:f1:b6:39:0c:98:2b:f1:f3:8a:23:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=9c2c5ba16a776160920281f8a22db113d754bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:56:93:ca:46:9a:b5:6e:63:38:05:96:4d:
a5:7a:81:b2:41:70:4f:f6:ee:0b:31:a2:fc:b9:1f:
12:8e:d4:fe:b6:b0:ce:47:19:bd:6e:08:c5:b2:1f:
e1:11:1a:c5:fb:53:fa:72:ad:cd:ed:c0:a6:5e:e7:
45:0c:bd:47:b9:6e:0f:3f:10:9e:3b:cf:b4:21:ed:
ea:18:1c:1a:78:12:a3:f1:c6:6b:7a:59:01:f0:38:
50:9f:13:ec:5b:f6:9f:d0:71:64:29:06:b9:03:16:
e4:24:06:a2:5a:e0:0b:5e:3b:5a:71:ad:fa:9b:b5:
87:ef:65:c6:16:92:af:b6:a1:ee:14:09:46:bc:0c:
fd:e4:58:09:b7:0c:cb:f8:90:41:ef:13:48:26:3d:
7a:97:95:cd:96:0f:94:b9:8b:9d:42:fc:9f:7b:0e:
c0:c4:fe:8f:8f:08:94:2a:97:05:bb:dd:90:68:67:
f0:19:5c:46:54:f0:3e:3e:66:2c:8f:f4:a0:af:72:
d0:dc:48:c6:35:d4:a3:12:18:53:dc:79:2f:a8:8f:
7e:50:21:e3:4d:5a:60:18:3b:3f:fd:30:05:7e:6a:
3e:2b:2d:52:24:ba:77:44:d6:d7:2d:dc:60:9f:8b:
40:d2:1d:67:8d:ad:ec:7d:57:33:11:5c:2c:1b:88:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:5B:A1:6A:77:61:60:92:02:81:F8:A2:2D:B1:13:D7:54:BC:51
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a0:cc:6a:9c:28:1b:d8:5d:97:f6:1f:25:1d:c2:49:ba:be:
34:aa:ba:79:6f:30:2b:0d:58:b7:e8:51:0e:3e:aa:de:08:ea:
e4:e0:ee:4a:81:e6:69:f7:2a:bc:12:d1:ce:f0:5e:45:29:35:
12:29:64:99:18:cd:17:70:e2:c3:b3:8f:cd:76:a0:99:4f:7c:
db:94:4f:83:de:69:f8:f3:31:7b:cb:57:03:17:a0:9f:30:c0:
b4:8c:61:3d:8a:27:f2:8c:62:47:2a:f9:8e:42:d5:56:f8:66:
35:39:b5:50:bf:ce:66:f4:f0:53:33:45:ab:ef:77:1e:47:07:
8e:16:be:a8:ea:e4:d4:6d:11:74:8c:19:7a:16:34:62:f9:7f:
78:cd:b4:24:ac:c1:48:03:16:c8:06:99:ea:ad:c7:f4:39:fc:
b6:5c:b0:f8:cd:6a:ea:25:cf:60:0a:8a:8a:2b:6e:32:53:2b:
a2:87:a6:d8:a5:f5:a7:4e:ce:44:68:36:bd:8d:55:cd:98:66:
85:16:ab:b2:eb:4e:c4:19:c6:4d:6b:a3:5e:91:30:8a:5f:e5:
a8:b2:10:76:c3:70:ef:28:19:d4:9c:8b:e4:cb:76:a1:da:6d:
34:4c:ef:34:72:0e:b1:b6:ed:53:71:63:bc:42:c0:bd:31:ff:
8f:42:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:15 2025 by rpki-client