Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: Ep0kSR0xy50xnmgriMe/X3ni52DR8yao1D3Z8pVZZ5I=
Subject key identifier: 54:8C:51:B3:B4:3F:E0:33:30:86:BE:C6:B6:48:9B:50:2D:B8:F6:08
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 019A4EF4A4C6F1DF2D259CE5A846C311A383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: HOWPJZFa9cLfnrnf8DQncMfb+md4v6v+Se15etmGNyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a4:c6:f1:df:2d:25:9c:e5:a8:46:c3:11:a3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=548c51b3b43fe0333086bec6b6489b502db8f608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:e7:20:87:08:c5:d5:cb:de:ad:b6:07:3a:
b2:e4:f2:9f:5e:7a:74:87:e2:4c:12:91:28:27:8c:
90:22:10:19:ba:d2:54:55:16:ec:e7:01:8f:57:92:
66:e7:aa:f7:4c:18:94:03:b0:94:39:ba:75:64:c0:
ab:68:1c:25:06:7a:27:db:09:80:50:ea:62:f7:32:
d9:6c:9e:3b:70:c5:2d:ae:ff:7a:56:9e:45:7f:82:
17:51:54:45:63:d8:6f:0d:b4:b2:b5:dd:d3:ad:02:
c6:bf:9d:ad:db:50:c5:09:3e:88:8c:06:c7:ea:e2:
db:62:4d:31:49:e6:cf:5d:a0:8e:e6:a9:bb:db:5b:
ce:5e:30:c3:8a:5b:42:1d:16:38:0f:ca:ae:4b:c1:
f3:36:4f:fb:e5:92:4a:36:ad:24:22:db:44:53:c1:
01:98:92:86:69:23:dc:bb:b4:98:ca:71:98:6f:20:
a4:ed:4c:2d:58:cb:ff:9f:18:50:23:12:65:dd:5c:
51:7c:e9:f6:6e:9e:b1:2d:47:87:33:50:46:20:7b:
e0:1b:e3:d7:5d:c9:6f:7a:94:f0:ba:32:17:41:99:
c8:5d:68:3d:4d:6e:62:3f:e8:d2:f0:9a:bd:69:3a:
aa:ce:19:15:76:55:12:86:b0:1f:75:5a:ec:1a:49:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8C:51:B3:B4:3F:E0:33:30:86:BE:C6:B6:48:9B:50:2D:B8:F6:08
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d7:52:55:ec:13:13:1b:22:b2:fc:f9:fe:09:d3:68:be:e6:
15:bd:7a:4c:04:a3:81:7a:75:df:52:9e:2f:b5:40:af:0d:8b:
a9:9a:71:22:7a:af:ae:1e:67:dc:d1:0d:98:db:12:2c:46:8d:
31:d7:5e:b0:d7:b6:99:6b:f0:a8:59:aa:a8:7f:60:10:c5:3c:
32:a9:5f:b7:fe:b6:27:b0:a0:68:99:d5:7b:1c:78:7c:e2:15:
c7:5c:bf:11:94:74:61:42:2c:fd:21:ef:21:22:1c:e9:1c:2e:
be:6c:96:c4:0e:a7:53:55:29:21:8f:df:9b:c0:85:67:02:d3:
f8:50:4c:a5:a2:e0:4c:78:3b:e1:dd:23:eb:51:f4:e3:e5:cd:
c7:8d:47:98:4f:c0:50:fb:05:e2:2c:86:ce:f8:6f:93:a3:d2:
dc:cb:ed:d0:c2:91:35:7a:af:53:e6:67:22:f1:bc:3e:fb:d2:
74:2e:27:b0:6e:48:ed:aa:21:72:ce:24:d4:7a:8b:09:5e:66:
44:71:a9:0d:0d:aa:c4:fc:49:fb:27:6f:ff:3c:e5:7e:8d:4b:
87:cf:c3:29:49:46:17:62:34:9f:7b:8e:04:73:25:e3:e0:ca:
f5:17:00:4c:7b:6d:0b:9a:d0:70:c3:15:be:3e:1c:11:75:2f:
64:76:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:20 2025 by rpki-client