Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier: tsfSCSTdLJPMxPcgB9x2MDE2bid7IznFWTLgTDn7agc=
Subject key identifier: 9C:CB:70:E3:3A:0B:04:C6:48:25:4E:12:08:CB:01:8B:75:24:0F:7D
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial: 019A4F62D8AB72BB8B76EE4D5CCE91AA2705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 15:01:09 +0000
Manifest this update: Tue 04 Nov 2025 15:01:09 +0000
Manifest next update: Wed 05 Nov 2025 15:01:09 +0000
Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: A2Rr4GU7/JsLxw556BfTDicpZnBPWeCGlCedBFX5xSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d8:ab:72:bb:8b:76:ee:4d:5c:ce:91:aa:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Validity
Not Before: Nov 4 15:01:09 2025 GMT
Not After : Nov 5 15:01:09 2025 GMT
Subject: CN=9ccb70e33a0b04c648254e1208cb018b75240f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:8e:f9:c0:d9:c7:f2:44:58:31:8c:12:dd:
b0:f2:bf:b8:ed:c3:13:96:7e:19:12:8e:42:12:8e:
fe:54:2e:67:cf:67:7e:ed:74:c6:5c:99:e7:bd:44:
28:fd:60:e8:7e:99:86:42:9b:c8:3d:ca:f8:a9:4b:
1f:f9:35:bd:1c:97:48:4b:14:db:7c:71:b2:1a:5b:
89:70:de:51:91:ef:12:c8:fe:a3:5a:87:45:f1:be:
c9:68:36:51:52:b3:51:2b:94:d2:ba:86:f2:48:4d:
7a:da:97:63:2c:35:b6:5c:49:5d:46:82:5a:da:ee:
9a:2c:25:37:4e:aa:03:d0:f1:43:fb:d6:b1:a5:ca:
d3:8f:5b:1c:d9:bb:fd:06:a7:01:80:da:d1:56:d2:
37:7c:49:16:7a:cf:b1:63:75:61:fa:ad:39:e1:a5:
14:b4:84:09:ca:2a:99:e0:b8:21:93:6a:67:92:e8:
f4:42:24:36:4a:29:8a:2e:d4:bb:8d:5b:9b:4a:77:
65:a3:1c:91:a0:58:22:a6:4b:38:a5:d1:e7:c1:c8:
2b:36:03:a6:03:3e:f5:57:d9:f1:46:23:cb:d4:b9:
a8:55:6d:5d:5c:91:12:18:e3:dd:95:37:ae:ee:08:
ac:c4:18:6f:c6:42:6d:51:bc:37:60:c6:52:4a:4c:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:70:E3:3A:0B:04:C6:48:25:4E:12:08:CB:01:8B:75:24:0F:7D
X509v3 Authority Key Identifier:
keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bd:5e:17:8f:0e:df:1d:01:8e:63:25:78:c6:1d:83:02:41:
ba:38:70:84:04:cd:32:7d:d2:35:28:e9:99:3e:ac:f4:f8:59:
9c:67:67:67:a2:12:be:3a:64:7c:aa:83:3f:8e:a7:9a:87:db:
cf:f6:33:f6:d5:1f:41:c7:0f:8c:c4:28:5a:37:c2:40:34:d4:
7a:15:06:c0:09:dc:b5:de:b0:d4:98:3b:f0:ba:92:c7:6c:74:
14:94:56:51:69:b1:a4:83:5b:84:3f:92:f6:04:5b:1b:6c:ab:
55:e7:93:e3:fd:46:00:0d:67:e9:d0:1d:a7:99:ec:7a:63:9d:
ad:10:82:b1:8a:91:4f:08:e3:11:79:61:a9:82:e7:ee:76:9f:
bd:26:fe:96:a4:1b:21:ed:ff:65:b3:9b:7f:4d:5f:a0:4d:36:
22:4d:2a:36:18:27:7e:7f:02:b4:e8:12:b7:32:cc:7b:e7:63:
85:31:b2:04:e5:a8:f0:af:b0:15:e1:16:67:74:b7:29:37:4b:
e9:fe:bb:69:bd:dd:99:d8:8f:33:67:a7:ad:bc:1e:95:2e:e9:
07:b0:6b:15:ca:01:0c:71:dc:02:86:af:5a:9a:f7:f5:99:03:
66:a6:17:13:56:33:6a:7d:67:bc:00:8a:6b:1c:0a:33:55:b3:
d6:0e:8d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:01:02 2025 by rpki-client