Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: PeVdULBWiQnDKGLe1Dlyhh8GueZcv71xwRzgvn79iOc=
Subject key identifier: A4:E8:22:6B:2E:5D:D5:1F:B5:64:DC:A5:77:36:59:5B:7A:DA:2F:57
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 019A4EF427AB3318D8437EEACC381153C302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: NEOtKyemjEZfFslPclqljrgLUWWhTPMH4SgODozjGi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:27:ab:33:18:d8:43:7e:ea:cc:38:11:53:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=a4e8226b2e5dd51fb564dca57736595b7ada2f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:24:3a:eb:3b:d9:f0:b8:92:9f:1b:c0:00:
12:d1:62:db:79:1c:c3:32:f7:65:4d:db:0e:13:10:
22:63:29:3b:27:1c:89:44:d4:64:b6:00:ae:8a:ef:
15:53:ef:fd:54:66:f3:27:a2:6c:19:e6:6e:69:04:
3a:b3:3a:0f:f4:b2:5d:d0:86:6d:c0:32:68:90:01:
d1:1b:66:0e:75:b8:53:05:e6:c8:9a:d9:3d:0b:eb:
ab:bd:14:a8:5e:24:53:19:ca:ad:91:24:fd:6a:57:
cf:fe:c2:5f:7e:2d:67:6b:62:69:2c:c3:e1:a0:89:
7b:4d:dd:70:2f:5e:97:c3:38:78:d3:5e:de:27:e6:
38:a6:32:1b:23:62:f2:c2:6e:8e:05:a1:57:bf:35:
ad:e6:62:a4:77:73:0e:b3:73:73:f4:fb:20:42:6d:
ac:e1:1e:ed:88:87:ff:44:9b:49:33:b4:cb:de:72:
19:bd:cd:22:49:41:33:de:be:0d:e2:bc:3d:cc:26:
ea:f5:06:1e:d8:4a:5d:e4:a4:a6:61:76:dc:e9:f2:
ed:d2:95:ff:17:e1:17:8a:59:db:d5:ae:74:a0:91:
9f:22:3f:db:f3:0d:37:50:3e:1b:72:bf:54:48:2b:
f3:52:81:e1:bd:91:e1:7e:d5:ca:56:7f:5c:8e:ea:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:22:6B:2E:5D:D5:1F:B5:64:DC:A5:77:36:59:5B:7A:DA:2F:57
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f3:c8:f2:0e:18:95:47:9c:9d:88:1d:6c:3f:5c:2c:9d:c6:
14:e8:17:72:69:2c:a2:8c:bf:ac:41:77:49:91:8a:15:f0:6a:
59:2f:7c:c3:95:a1:f6:cd:06:c1:5e:33:c5:30:fd:c3:47:6c:
de:09:c2:d4:96:ca:58:0c:0c:6c:f7:6e:3d:32:6b:85:3b:bf:
c3:aa:8a:ea:7d:66:ff:3b:63:55:f9:af:e3:25:77:c5:07:6a:
cc:64:42:63:0d:50:f7:c0:99:0d:01:ae:71:3d:48:cd:d0:bb:
cf:b1:90:06:06:f1:07:f3:ef:6d:b2:57:e8:ce:be:fa:8b:4f:
3f:eb:42:66:c7:91:5c:b5:87:72:64:b8:65:04:42:e9:dd:fa:
99:99:d9:8a:2a:b1:42:73:dc:07:5d:1e:31:9f:d3:ab:62:d3:
38:25:2b:25:ad:4f:1a:7a:fc:f4:39:fb:f2:e7:56:67:44:ea:
e0:bf:01:28:fb:fd:85:ff:3d:b1:ac:23:07:78:d2:12:39:cf:
5f:19:7f:d4:55:4c:07:2e:5b:42:25:3c:14:de:e0:26:0f:a3:
cd:f1:e5:92:b1:15:d7:70:91:0a:6d:57:e3:67:7b:67:b1:4d:
c0:77:ca:0c:73:6e:bf:0e:89:9c:04:74:5d:4e:f4:00:44:36:
5a:31:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client