Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File: eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier: woaok+0JGfrDd+JkkFrrhvb8AhsuZp4zg8v644Y9eNU=
Subject key identifier: 2B:77:8C:3A:AF:79:5F:6E:08:94:56:DC:C6:A6:B7:41:DE:F8:B2:8D
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer: /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial: 019A51873DB6CA8DD4358D092E8C87FCCE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 01:00:08 +0000
Manifest this update: Wed 05 Nov 2025 01:00:08 +0000
Manifest next update: Thu 06 Nov 2025 01:00:08 +0000
Files and hashes: 1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: TST39k5UBzNDmh37ABngP1z/Z48WFXwWQM7c5PyUBfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:3d:b6:ca:8d:d4:35:8d:09:2e:8c:87:fc:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Validity
Not Before: Nov 5 01:00:08 2025 GMT
Not After : Nov 6 01:00:08 2025 GMT
Subject: CN=2b778c3aaf795f6e089456dcc6a6b741def8b28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:02:64:41:2c:cd:e6:7e:9f:93:6b:38:49:
18:95:69:33:b2:ac:11:e6:9b:9d:fe:2e:87:e8:b1:
33:20:c6:68:91:45:01:aa:47:a9:54:13:65:6a:27:
46:1a:0c:3d:37:18:e6:5d:4d:84:ec:ff:19:f6:07:
7a:f4:c6:93:f4:b0:33:51:b0:1f:8a:4d:9e:20:92:
af:3f:ee:8f:fe:59:c2:55:f0:ff:4c:2c:a4:c7:ee:
f6:69:23:fe:4a:10:d9:9d:6d:00:ed:71:e7:b3:04:
05:ce:df:49:55:d3:cd:38:cc:1b:26:0a:11:e1:e3:
82:62:08:ca:7d:d5:c4:d0:04:a4:37:9c:1a:0c:51:
f7:78:7c:94:61:8a:a8:5e:e6:56:a6:44:e5:00:6a:
0d:e2:5e:df:9b:4f:c4:3a:4e:b7:91:73:80:c7:02:
57:ff:4e:2b:2c:5b:6c:ae:8b:0a:31:19:34:e6:2b:
69:2e:32:8f:1b:b5:74:32:e5:d7:c6:cb:6b:b1:5d:
3c:f2:5a:9b:70:8b:b5:bc:26:60:0e:ee:2b:62:e6:
ff:63:2a:83:40:d8:7d:1f:ae:1e:66:bc:45:3d:bf:
8b:2e:4b:69:ce:e1:0f:71:26:ba:27:c6:13:34:a9:
65:83:5b:46:0d:89:68:23:10:1c:53:f9:ee:3b:67:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:8C:3A:AF:79:5F:6E:08:94:56:DC:C6:A6:B7:41:DE:F8:B2:8D
X509v3 Authority Key Identifier:
keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:83:27:db:c7:f2:4b:5b:aa:aa:8d:84:3a:46:5e:02:51:b2:
d9:ce:e2:ee:7f:25:67:09:c6:12:40:2d:60:29:b4:d2:a1:dc:
e9:bb:15:cc:ca:7b:b1:5b:be:ce:c7:32:1c:a3:04:7e:59:4f:
be:00:1c:53:e5:b0:38:14:b4:1a:52:82:07:db:4d:f9:9c:17:
70:f4:89:bc:8d:e9:0a:21:03:25:58:eb:a2:07:3f:8c:8b:34:
43:90:6a:35:85:31:b3:1d:c8:be:e1:cc:70:20:5c:66:ac:57:
82:4b:f2:20:61:0f:0e:16:31:e9:de:73:79:26:dd:22:79:11:
1f:bb:4a:11:7f:8b:26:1c:87:7e:1e:21:9d:25:c5:d1:cf:0d:
55:18:6f:ab:9a:b8:8b:65:c9:5f:6e:1d:87:e6:05:c3:8c:26:
cf:d9:f4:20:2b:4a:0f:97:3d:54:24:91:bb:2e:c9:d5:ff:d5:
3c:8a:db:d5:fe:11:26:91:f3:d3:74:7b:d7:1d:f0:53:38:6b:
85:6c:a0:cb:de:b7:16:af:20:ec:c6:a0:0a:5d:af:94:27:ee:
2c:8c:b3:c6:8e:aa:aa:a8:ee:c4:16:d4:c4:d7:d7:dd:56:b6:
ae:6a:d0:2d:ca:84:18:a0:b6:cc:9c:e7:7d:e5:81:f7:2b:b0:
53:fd:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:46 2025 by rpki-client