
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
File: ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json)
Hash identifier: 0+3u59BnRScU1ofrBFnXNOb8IfgyC+16Hj35/GMwfto=
Subject key identifier: 37:D5:5E:9C:B0:66:86:D2:F8:B7:41:24:B5:4E:FC:D3:80:67:C9:40
Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
Certificate issuer: /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Certificate serial: 019A4F2B37E91F7D52E82DD9A33ADF3BD088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
Manifest number: 061E
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: zKOYRP7tcJSq9ACyQNSdGz/mVOdykLqhqYXejtsKm/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:37:e9:1f:7d:52:e8:2d:d9:a3:3a:df:3b:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=37d55e9cb06686d2f8b74124b54efcd38067c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:c0:f8:bd:59:83:b3:e7:97:4e:8d:06:72:
23:c4:28:82:ec:38:bb:3b:78:0b:4f:db:40:de:eb:
e6:39:a3:25:9c:0b:84:e7:0e:90:c9:5c:7e:c6:fd:
37:e6:a2:42:73:3e:ee:be:aa:32:e0:b6:c2:0f:b0:
48:d4:60:7e:48:57:da:51:2a:2a:3f:1a:1a:1b:7f:
b1:7e:a7:83:11:ff:d0:f6:a6:29:2d:8d:b9:04:f6:
57:fc:98:aa:da:d1:26:b0:e2:7c:4b:14:af:4a:67:
7e:c7:e9:9f:d0:ef:89:bb:de:16:62:40:c2:56:d7:
9f:a8:ac:8d:7a:11:a2:0a:fd:06:9e:23:f3:f2:bf:
db:04:06:f6:77:3a:77:e8:69:d5:0f:93:55:58:5d:
76:f0:62:31:49:04:4d:32:d3:d4:76:76:a7:36:78:
25:72:61:ca:0f:da:24:24:be:86:e4:7a:d8:61:b1:
82:06:d4:b7:cd:a3:72:07:d1:5b:47:00:c8:3d:ff:
15:21:83:42:0d:52:66:f4:8e:8c:ac:3e:1a:29:ca:
4f:37:48:b9:3b:31:79:2c:3f:70:5e:cc:4c:05:4b:
20:63:a7:f6:0f:8f:13:37:4a:cf:45:0d:a0:2c:3c:
a6:dc:ab:a0:8d:2f:06:6c:92:4a:7f:bb:a3:89:64:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D5:5E:9C:B0:66:86:D2:F8:B7:41:24:B5:4E:FC:D3:80:67:C9:40
X509v3 Authority Key Identifier:
keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:97:a6:0c:cf:f9:d5:4e:d0:8c:4f:6a:85:96:fe:7f:8f:fe:
94:91:b6:f2:ef:d7:71:fe:09:c9:30:eb:fa:7b:ce:86:a9:d5:
46:16:a5:2a:24:af:aa:ac:f9:c3:11:26:54:d9:9d:90:2a:e8:
44:85:51:5a:75:b7:af:77:d8:f9:ef:e9:9d:1b:f4:81:dc:63:
49:50:3f:a3:e9:91:37:5a:50:d8:7f:76:31:19:00:d4:34:00:
0a:60:26:a7:5b:f0:48:21:85:69:93:e8:98:cd:e0:97:3a:eb:
98:36:1b:11:f0:ef:00:f8:a0:30:8f:56:a6:29:88:c9:30:42:
82:c4:fe:f2:87:76:63:73:89:8d:9c:f5:af:a4:1c:fd:fb:8a:
1a:d3:73:f4:51:8e:26:a2:34:f2:4e:aa:36:2e:33:37:12:14:
18:6a:38:90:18:1a:c5:b6:17:a0:0a:96:c8:47:2d:45:12:58:
57:a2:e8:c0:5f:ca:a3:84:6b:8a:2a:75:94:8f:c6:22:88:02:
9c:28:cc:74:03:4d:35:02:61:90:31:45:b7:e4:2b:72:ef:87:
d2:0b:8a:7a:04:00:04:a2:5c:ec:8d:a2:82:6a:ad:4b:93:b3:
63:fd:64:5f:93:15:fe:f1:c6:23:18:cb:9f:2e:fc:fa:86:39:
e2:67:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:52 2025 by rpki-client