Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: si+He0b75RGcVPHvrqvY+WPMkiI/n+zrFI+4tqdYJFc=
Subject key identifier: 6C:0F:2D:31:32:B1:FA:F8:64:1D:99:D6:1E:0D:8E:56:54:CE:7D:87
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 019A4EF4B94EF0B147563DD1A533A7FD2642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 056F
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: WfaN40iVV8tvDFacXDhWjVWGILi0Oz0SeQSxAxiR1Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b9:4e:f0:b1:47:56:3d:d1:a5:33:a7:fd:26:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=6c0f2d3132b1faf8641d99d61e0d8e5654ce7d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:d4:77:63:23:70:a5:2c:fe:bf:f3:be:fb:
99:83:a9:65:ec:a0:a1:19:4a:a2:b6:ae:22:27:f7:
03:af:e4:02:0b:df:5f:86:0e:2f:72:ac:0e:90:30:
d6:97:bd:c3:ac:71:1c:df:5a:3c:ad:86:ab:93:0e:
56:3e:02:da:e5:a3:cb:63:e8:e9:06:91:b3:59:82:
53:e3:84:64:c6:c3:9c:4c:ff:f8:57:23:48:98:8d:
71:d0:ba:1b:5d:62:f4:ce:8f:37:99:f9:4e:f7:b0:
09:ac:47:76:42:11:3d:e6:0f:5c:0b:d2:d1:45:74:
3c:a0:7d:1b:50:ac:61:a0:6c:e3:d4:11:a7:15:48:
19:a3:89:63:0a:cd:ef:5d:f5:86:62:7b:da:d1:76:
fd:e8:b8:42:99:f0:51:c3:5b:b1:94:c0:5c:af:ee:
e2:18:aa:2b:78:08:a5:20:0a:2a:45:22:a7:5e:66:
fc:fd:5f:d3:c6:7e:76:c7:35:ff:68:47:30:50:f6:
29:8c:c2:ba:d9:b0:44:f2:80:e8:f5:77:b3:72:b2:
e2:2e:a4:9d:5c:fa:c5:ca:0f:89:06:01:d5:75:9e:
c9:80:ff:6c:53:3d:57:63:d6:37:31:22:48:2f:8a:
e3:75:ef:2a:dd:eb:60:d1:43:20:bd:de:45:f6:63:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:2D:31:32:B1:FA:F8:64:1D:99:D6:1E:0D:8E:56:54:CE:7D:87
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ff:a1:3e:f3:04:0c:de:fd:9d:9f:91:26:38:d0:a1:ea:81:
f6:3f:b2:43:13:c6:a0:cd:3f:cd:10:c6:b8:e7:ff:7f:01:05:
e2:91:62:30:61:d3:54:5c:ca:8f:a0:e9:7f:32:d8:c9:2a:05:
19:c3:c9:26:3a:14:f7:09:33:77:49:ce:d6:fb:ac:42:1a:a0:
20:26:22:b4:03:6d:84:05:ef:0b:a4:03:4e:65:eb:09:20:d7:
49:85:34:6a:00:a4:fb:ba:a9:b9:78:49:d4:91:ca:0e:db:ef:
36:83:d2:95:09:1b:c3:73:b5:c8:7f:8b:c4:c3:c6:3d:08:46:
f8:01:0e:65:52:61:96:46:89:d2:4a:d8:a4:c6:c1:4d:af:ee:
6e:96:3f:ed:fa:bd:e2:22:82:2b:01:d2:0d:ce:30:c2:15:56:
c1:2a:af:31:0b:44:9a:53:17:fe:11:94:26:36:90:3e:7b:80:
4b:14:95:b0:2b:02:9a:62:d3:7d:da:99:da:d8:29:ae:f9:c8:
16:18:aa:a4:90:91:0c:be:65:0a:15:7a:f5:73:37:5f:88:55:
b0:2e:4a:35:39:df:8a:7b:09:25:c0:6d:4a:18:a9:1b:ac:7a:
82:66:17:0b:6c:67:6a:ff:78:a8:15:18:99:b4:4d:ef:91:e2:
00:fe:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:47 2025 by rpki-client