Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: 7ej338R3ZFsxd+LKCBnQpTqybbP44qe/sBpLmpy5vOM=
Subject key identifier: 34:DE:8A:CB:7B:12:B7:35:B1:8F:34:99:A4:63:E9:CD:BC:45:91:A4
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 019A533F4CDD01A7099BEF31EB6465E7180F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 09:00:48 +0000
Manifest this update: Wed 05 Nov 2025 09:00:48 +0000
Manifest next update: Thu 06 Nov 2025 09:00:48 +0000
Files and hashes: 1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: m5xcLIwBES01v3nT/t4c8AaPvuIzu2SgMWcHxwfliGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:4c:dd:01:a7:09:9b:ef:31:eb:64:65:e7:18:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Nov 5 09:00:48 2025 GMT
Not After : Nov 6 09:00:48 2025 GMT
Subject: CN=34de8acb7b12b735b18f3499a463e9cdbc4591a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:fd:ba:a1:63:a1:a3:fa:b0:84:6a:b9:74:
85:26:d8:1b:42:49:7c:ec:90:e8:b0:89:69:3d:e9:
63:f6:e1:0f:13:81:f6:0f:91:ba:e8:94:ba:38:ce:
6c:55:40:df:4e:44:3c:77:ca:7c:ce:7f:61:d9:f2:
a7:1d:d0:d7:0f:4e:ba:03:b9:ab:95:41:62:27:1f:
bf:d1:63:48:8c:da:71:11:d0:d2:f9:28:21:d2:39:
e7:b3:2f:46:bf:1d:aa:74:29:dc:0b:95:d5:9f:de:
d2:5a:c1:76:cd:e6:9d:24:d4:3d:7a:35:cf:a9:96:
26:4c:de:99:e6:4a:47:3c:b2:1a:e9:87:6d:3c:00:
96:d8:2f:fd:7a:e2:f0:39:d6:31:6d:5c:f3:bc:cc:
cb:a8:82:f2:26:cb:db:8a:74:34:ec:72:a7:3d:02:
af:54:f0:b0:dd:43:d7:aa:7f:2b:8e:2c:17:a1:fe:
f2:9b:66:d8:27:13:79:b4:52:e6:3f:da:d6:cb:e0:
a2:33:6a:91:d4:8c:cc:ed:ae:56:18:25:d5:22:f6:
0b:e3:45:b2:fb:53:c3:76:70:06:93:c8:4a:83:db:
14:88:e6:42:6b:87:0a:96:53:11:3a:78:2d:73:4e:
bd:c9:32:a6:dd:75:6a:0e:d0:41:b9:70:68:69:bc:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:8A:CB:7B:12:B7:35:B1:8F:34:99:A4:63:E9:CD:BC:45:91:A4
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:09:90:16:82:b8:ad:6e:9c:23:3a:cb:6f:35:57:15:12:
52:e6:25:bf:70:c6:52:1d:56:82:22:cc:67:85:77:61:2e:6b:
f4:d7:69:5a:c7:5b:3d:ad:6c:41:7b:bb:8c:a9:0e:63:21:3e:
67:d1:bd:02:e3:09:21:71:be:6a:af:d8:b8:3b:fc:16:44:36:
2e:e2:53:e6:ad:bc:82:e3:87:32:3f:3a:4a:29:3e:e9:be:16:
b6:d4:cd:21:0e:48:c5:b0:ee:46:7f:3a:53:31:27:e1:03:d7:
e8:04:04:5a:8c:41:92:68:be:48:e9:97:88:49:de:2f:30:02:
da:a9:c0:1e:23:18:0e:04:18:06:7e:89:b9:7e:f2:20:92:a8:
b0:de:8c:4a:79:75:57:ae:23:e1:1c:ad:4f:34:06:69:38:a3:
95:75:4a:6e:9c:28:7f:3a:97:cd:57:04:fb:df:d1:df:b5:dd:
8f:35:a2:a1:fd:73:db:74:d5:b0:bf:ee:46:e2:d4:82:2a:02:
99:54:6b:74:81:ae:a0:36:79:02:d1:13:7b:89:6a:a6:eb:78:
95:75:d2:4a:df:d3:ba:9d:ae:bb:d7:f1:11:56:06:21:5d:95:
d0:d7:72:89:1a:11:de:78:ca:d7:b1:a7:be:25:c4:77:31:b0:
9d:73:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:58:34 2025 by rpki-client