Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: VPYS1D6h3QfClAh9lQosls0d9wKPPBQXTADzWdtAvuI=
Subject key identifier: 43:D3:FA:C6:AA:CC:92:74:73:C3:0B:5E:EF:54:FD:32:B1:ED:0B:34
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 019A4E18E125FA7A5E81BBE6C97781AAF1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 02F6
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: BkQARqvgEIFejimaRFhBTxDLFTfoU3lfFR3V0bAHAQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e1:25:fa:7a:5e:81:bb:e6:c9:77:81:aa:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=43d3fac6aacc927473c30b5eef54fd32b1ed0b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:82:46:9e:d3:07:40:17:db:09:f1:08:98:
12:d4:84:1d:6d:ef:47:ec:dd:66:59:22:fc:1e:57:
4a:95:81:df:17:fb:5c:34:9f:63:b7:4a:6a:d0:9a:
64:c4:75:53:f7:08:ad:f8:05:30:22:5a:84:17:ed:
cc:02:ff:09:29:d4:b6:e1:84:b0:82:3b:25:50:73:
5b:17:67:72:8a:cb:81:d6:98:b1:dd:02:60:53:70:
a8:d9:35:60:b6:7b:09:e0:68:2d:74:bd:09:ee:35:
a7:8b:10:62:41:24:ba:70:26:3e:4f:b0:3b:0d:31:
db:3d:7f:75:72:7b:d9:4f:8f:dd:ff:66:9a:c1:63:
79:13:82:9d:18:46:00:12:d9:94:c9:72:b4:0e:05:
ef:6f:8c:b2:96:ea:d8:52:45:18:5b:cc:69:65:f1:
fa:55:b8:56:c9:05:23:df:18:1f:52:fe:e9:aa:b3:
48:30:f0:f4:4c:72:2f:e0:c4:d5:0e:0d:40:87:22:
3c:23:01:69:1d:c5:44:7b:ef:0a:6a:be:1d:d9:87:
33:fa:9a:64:5d:e0:ce:11:69:c1:0c:76:5b:51:f7:
9a:b1:88:3c:79:ad:93:a9:6a:96:36:f5:7e:c6:6c:
5d:ef:3f:8f:98:f9:35:6e:11:40:c9:d8:c8:91:40:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:FA:C6:AA:CC:92:74:73:C3:0B:5E:EF:54:FD:32:B1:ED:0B:34
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:da:fd:00:63:95:60:46:0b:6d:a7:f5:57:82:a0:4a:07:01:
06:ae:89:7c:27:b7:91:a5:c9:88:52:07:7b:ea:31:53:eb:28:
50:88:ba:f8:26:ed:52:6a:eb:16:3f:e6:08:70:a6:87:22:eb:
33:f4:e8:98:9d:24:55:81:06:1f:6a:0b:21:38:fc:1c:65:2a:
df:3e:2d:9c:f4:1f:2b:7f:68:e0:1f:4b:1e:2a:16:f1:34:41:
4a:e5:61:70:87:12:c7:14:a7:75:42:89:86:1b:9e:ba:c9:36:
eb:14:b1:bd:52:96:28:be:70:7a:f2:08:39:bd:5f:b8:b2:de:
0f:ec:68:3e:3f:51:cb:8f:be:af:38:da:9c:27:63:2b:4c:22:
85:77:fe:b7:d8:34:46:ce:46:aa:f8:c8:69:c9:70:9e:39:d3:
96:c7:c7:03:e8:c8:ba:c1:15:4c:bd:54:cb:73:a1:99:82:c8:
e3:0f:d5:bb:6f:ad:aa:71:3e:0b:82:fa:84:64:a8:8c:9e:e9:
64:58:57:c7:c0:52:e8:2c:ac:01:55:5a:7b:c6:87:90:02:06:
48:b2:7c:7c:5d:aa:b3:98:15:15:c1:86:70:2c:b1:25:ee:92:
6a:81:47:e8:91:8a:51:8f:a1:29:48:12:f5:06:8f:e3:01:8f:
22:83:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:40 2025 by rpki-client