
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File: eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier: dKq4KqmbaCxGgQ7UPg6n8Bs8TNxZB8P0UJZORqyeVS8=
Subject key identifier: B0:CD:56:B8:0D:A5:01:E2:4F:63:AA:2A:DB:B9:80:CC:86:FA:90:3A
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer: /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial: 019A4E4FFE46C3667F183346F0EF0E60D2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number: 0740
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: y9iMl3/fZC69/IOiZauYOeSYtq9Uz60opLPAc1iwtY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fe:46:c3:66:7f:18:33:46:f0:ef:0e:60:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=b0cd56b80da501e24f63aa2adbb980cc86fa903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:94:c2:ed:d1:d7:b5:0b:95:fa:80:25:67:
f1:b4:6e:41:92:c5:5b:22:85:15:ef:e3:15:05:f9:
c7:7f:7c:c7:88:5a:c1:77:23:c0:94:b2:f2:6e:42:
5f:6c:b8:82:a1:e2:da:59:4a:a3:24:e8:3c:2c:c3:
d3:83:64:1a:ac:56:18:eb:da:2b:25:f7:22:0d:f7:
a7:32:4a:e4:53:1f:51:45:1d:e9:32:e0:8f:af:48:
1d:54:cc:93:da:f4:e7:ac:13:e8:b5:7f:11:e7:9b:
43:a5:98:bb:f1:d3:23:c9:34:75:6d:26:4b:1b:f0:
ac:2e:d2:8b:9d:1b:73:cd:a8:40:c5:32:10:18:c3:
70:a2:32:53:ac:0d:bf:1e:c8:35:6c:1c:74:1a:98:
bb:ca:08:05:2c:27:5f:1f:60:17:e8:40:74:23:88:
50:8d:47:8b:53:5c:d7:c8:e2:87:bc:9f:8d:f8:0d:
c1:3d:db:31:3b:77:6a:8b:40:dd:bf:07:5a:6b:cd:
5e:0b:09:62:9a:f4:e5:5f:d0:e1:f4:30:29:d9:7d:
e9:47:1b:45:16:2e:e7:f1:ac:89:d3:bb:0a:9b:bd:
7c:11:45:35:2e:a3:bc:48:9d:78:69:96:5a:73:3b:
b8:52:bd:6e:3e:8a:a6:2f:54:b3:9a:1f:e0:c8:53:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CD:56:B8:0D:A5:01:E2:4F:63:AA:2A:DB:B9:80:CC:86:FA:90:3A
X509v3 Authority Key Identifier:
keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:97:b0:4b:03:00:9e:b3:b2:62:a6:1e:1a:5f:78:fd:92:21:
bc:66:eb:b8:4b:65:c4:e0:3f:9e:d7:eb:58:54:12:22:59:26:
f1:8d:58:f8:b3:e6:3c:dd:bf:7a:06:fc:bd:6a:33:25:58:1d:
fb:ea:47:f4:10:a7:49:8b:5b:78:21:66:a0:f7:ef:3c:45:6d:
8b:11:9f:3e:87:32:fe:48:c3:8f:33:18:34:31:10:66:4f:0a:
a0:64:34:1d:18:42:d7:95:43:94:2b:c5:8c:d0:8a:00:40:ec:
d4:f2:c2:0a:53:60:ea:af:2a:f1:c8:30:ef:63:2a:d5:5f:71:
fd:a8:d7:dd:e0:f3:48:cb:b3:36:5b:aa:12:64:17:19:94:0c:
37:19:12:53:45:d4:ce:14:62:07:6e:e5:04:8f:63:fe:b5:95:
57:03:43:1c:03:07:67:eb:eb:68:41:d7:b2:85:ca:cb:35:6c:
d5:b0:72:3e:41:79:71:24:57:e9:f9:76:da:8c:ad:22:b6:a9:
92:04:dd:0f:2b:54:59:e3:62:6f:59:10:5a:52:f5:0c:2b:32:
87:5b:4d:d9:f9:3b:b1:a3:90:e3:e2:1a:b7:fd:b4:79:23:19:
69:ee:09:ac:b0:86:4a:ff:ac:f9:fa:8b:69:18:06:37:0a:59:
08:15:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:58 2025 by rpki-client