Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File: eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier: m+6yn9NRB2lL9oxV7NWJw0dunbeX4d4NGF0Pch6wUbU=
Subject key identifier: DE:7B:BF:D6:06:89:4C:45:23:7F:6F:7F:D0:AA:14:CB:90:82:E1:D2
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer: /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial: 019A4EF454A419B3CFD99DB700D149ECDA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: 1WP0xuGeqvmsmgfZSDW0Q9n7zxCPwXZifKP7XQAMY+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:54:a4:19:b3:cf:d9:9d:b7:00:d1:49:ec:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=de7bbfd606894c45237f6f7fd0aa14cb9082e1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:1b:9b:54:34:07:37:8d:ef:24:46:e7:f5:
ad:0e:be:5f:e2:ae:5a:36:37:25:af:52:cd:7b:79:
bb:6d:95:25:69:0e:7c:09:76:cf:02:e2:21:17:50:
9c:6f:32:7e:5d:fc:9c:38:04:e8:a1:e7:39:47:e5:
1e:ff:a4:1c:3f:05:a4:58:8e:09:f8:0c:08:52:6f:
6b:46:dd:c1:a7:83:f6:91:24:7b:81:e7:fb:9f:6c:
c2:40:0d:91:1c:c2:b5:ae:93:12:99:b6:aa:da:e3:
7e:d3:b4:1d:83:71:e2:34:9a:46:f7:05:28:77:2f:
5c:82:34:07:e7:06:93:9b:8b:8a:9b:1c:78:e9:eb:
83:4b:4a:10:d3:18:9b:40:d0:7b:02:75:d1:0a:78:
29:bc:02:2b:a7:37:9e:c8:07:17:93:69:8d:95:90:
68:34:af:e9:d2:7d:d1:1f:6f:f9:94:57:7d:e3:55:
02:61:6f:38:ec:4f:31:5d:3e:03:8c:c0:1f:5f:16:
82:43:14:69:7d:16:85:04:29:f3:c7:12:88:fb:ad:
22:fb:b3:8c:1e:1d:d1:f7:fc:89:fb:84:f8:e0:90:
8f:c5:9b:42:5a:bb:a0:4a:c5:af:78:4c:bf:a4:38:
14:ea:65:8a:88:89:54:b4:19:76:c0:39:0b:c8:81:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:BF:D6:06:89:4C:45:23:7F:6F:7F:D0:AA:14:CB:90:82:E1:D2
X509v3 Authority Key Identifier:
keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b2:aa:93:21:4a:ce:7f:7a:b1:5a:d1:1e:66:94:c2:26:c4:
41:15:fd:7b:ab:00:e9:64:13:42:3b:ab:cd:ab:b0:c9:81:78:
8f:db:92:c5:79:58:c8:22:b2:5d:c1:c3:85:16:62:0b:d5:e3:
47:c7:32:a0:b2:42:0e:71:f0:fe:7c:4d:e0:89:7e:21:b4:0a:
5f:7a:3a:7a:d7:f5:b6:6c:02:41:f1:f7:2d:cd:a1:75:de:9c:
a3:7e:7f:2d:34:f7:7c:0e:ec:fc:b5:44:a0:6f:7d:4c:64:bb:
73:d5:85:88:50:f0:3d:c0:25:7d:85:10:64:29:05:9c:c6:ed:
e3:51:44:ba:ce:3a:0d:ec:75:cf:b9:57:8e:50:dc:6f:af:b9:
50:c3:43:96:16:cd:50:a0:83:d7:9d:7f:c7:9a:5e:c1:a8:0a:
26:bd:8d:e7:a3:08:c7:b3:79:3f:ab:35:e3:6f:02:f4:6a:d0:
ec:0b:18:32:3b:b9:74:5f:06:39:37:5a:ab:26:06:db:8a:bd:
46:c3:f0:58:07:37:4d:9c:c6:57:4e:d8:9c:08:20:17:b1:24:
b0:0f:bb:2b:01:34:da:10:23:85:12:18:77:41:29:4d:bc:9c:
0b:44:a1:7f:ec:42:73:c8:cf:e0:b6:e8:b4:ab:73:00:c6:30:
0c:d9:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:48 2025 by rpki-client