Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File: pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier: LbV3NPdWvwaEnAYpJV6hryeYaagaQKwoZGynPbHErIA=
Subject key identifier: D0:C3:E9:5E:DE:D7:F7:91:00:6A:86:A2:FC:22:6D:53:60:49:F0:57
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 019A4DAAA428F4235688066ED353F37627FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: 3tu6ClYuvbDBR6KTKvf_i26_sNM.roa (hash: mscne+X+jfLaHAfi9bV23pNVKutqYHuT+pdDSC+aYJQ=)
2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: t9lJjq2akMzbY/GTcOWGJD37wk0tID5O/ZA5kssxKCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a4:28:f4:23:56:88:06:6e:d3:53:f3:76:27:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=d0c3e95eded7f791006a86a2fc226d536049f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:ea:48:3e:ad:44:62:6d:e6:81:10:3f:1b:
d1:e9:09:e5:2e:7f:cb:e7:c9:ff:80:57:30:0c:c7:
c9:0a:8c:69:45:9c:6d:2a:93:68:ca:0e:12:63:95:
a2:c9:4a:44:51:93:dd:a7:c5:5a:e6:28:d4:46:89:
06:6e:22:b8:95:09:d1:dc:a6:f0:fc:b5:a7:bb:5e:
51:ef:e8:1a:0d:db:a8:b8:59:bf:d4:4e:ed:8d:1c:
f2:df:8f:37:99:39:e6:36:35:8c:0f:41:e7:12:45:
6a:5c:32:0a:27:40:ae:19:77:66:a2:c7:e6:85:6a:
15:48:bf:c5:79:97:27:18:f3:f0:b1:ef:5f:6a:a0:
32:50:1b:b5:7f:0d:7d:f0:15:46:43:e7:a2:ae:2f:
b6:f1:7f:a0:fa:45:4f:95:c0:13:85:9e:b0:e1:f7:
43:fd:8f:55:c6:13:79:6b:81:9e:21:64:52:70:ec:
d0:72:f7:66:6d:15:38:b7:fc:91:8a:1a:84:58:ed:
e1:7c:6a:0a:8f:34:51:e8:f1:1f:a7:11:14:27:f2:
54:1c:5b:4e:25:40:12:37:6c:64:0c:b6:13:27:8d:
72:0d:43:3d:c4:4c:34:2a:ba:b5:d7:54:db:1c:47:
5b:9e:28:5d:c8:96:2c:41:70:2d:47:57:f3:4b:59:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:E9:5E:DE:D7:F7:91:00:6A:86:A2:FC:22:6D:53:60:49:F0:57
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9c:11:ae:ca:46:4c:1a:e2:58:48:4d:54:8d:df:d3:ab:01:
f1:be:11:63:44:f6:69:1e:53:36:e3:a6:f7:c8:c1:99:50:b3:
b3:13:f2:b8:43:1a:39:e3:f0:71:cd:4d:ea:b2:c7:99:51:3a:
45:48:5e:be:88:cb:60:cb:49:b1:11:5d:a5:a0:01:b1:b6:0f:
dc:43:13:68:72:27:d3:0f:26:af:bf:9c:84:87:1d:39:86:f7:
35:fe:1d:a2:4f:35:ba:27:76:5c:0e:bb:03:a2:77:59:7c:bc:
3e:4b:2b:1c:05:e6:6c:6c:95:93:b8:14:4c:85:1e:78:24:4d:
a5:2f:33:f7:c2:64:d1:d9:11:ee:c7:ec:bf:0e:b8:25:6b:fd:
59:2e:0e:26:95:da:af:03:62:c3:44:a1:9c:82:3c:5f:7b:44:
55:e7:be:81:55:56:5f:80:13:83:12:d8:78:75:eb:45:60:64:
ca:af:02:b1:cb:80:4f:e1:87:25:da:c7:ce:03:a1:3f:dd:0b:
c8:41:4b:ee:13:b6:2c:81:8a:f1:4b:47:bb:e7:03:8f:a8:d5:
46:a7:31:13:3a:08:22:67:98:a9:b6:b2:a8:d7:27:38:2e:7a:
08:16:df:f6:71:1d:de:59:c6:97:fe:6d:7b:43:5b:66:dc:05:
fa:b1:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:36 2025 by rpki-client