Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
File: eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json)
Hash identifier: rNutlA+KJ0Dato5JjFf8M1ZmWjPPXpmQCIMOYN53nkM=
Subject key identifier: 00:85:3D:59:BF:3C:4A:F5:DD:4E:DB:AA:97:B0:05:5F:44:5F:85:4D
Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
Certificate issuer: /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Certificate serial: 019A4DE237431F6EB5A22BBC009F319925C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
Manifest number: 088F
Signing time: Tue 04 Nov 2025 08:01:02 +0000
Manifest this update: Tue 04 Nov 2025 08:01:02 +0000
Manifest next update: Wed 05 Nov 2025 08:01:02 +0000
Files and hashes: 1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: e3Wb0sDL1SkICYY2x/N0PlIlvYXcGfLRc03IjoFyfOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:37:43:1f:6e:b5:a2:2b:bc:00:9f:31:99:25:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Validity
Not Before: Nov 4 08:01:02 2025 GMT
Not After : Nov 5 08:01:02 2025 GMT
Subject: CN=00853d59bf3c4af5dd4edbaa97b0055f445f854d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:68:4d:07:69:d1:5d:32:90:65:6d:31:aa:
59:e5:f6:1c:10:1a:71:b8:9b:7b:65:88:3a:b7:f8:
d2:6d:b6:f8:9d:ba:4b:7e:7b:88:9f:b7:6b:5b:81:
80:1a:30:47:0d:08:7c:43:0e:f5:0f:3a:1f:8a:6c:
f0:c5:40:2c:93:45:c2:7c:65:cb:02:5d:3b:56:ca:
d1:84:ba:da:91:0f:da:66:5f:6e:5f:86:4b:c5:7f:
61:41:78:27:2f:72:0d:42:28:97:3f:1b:ed:a8:0a:
21:38:24:74:1f:3d:2f:da:e6:8e:3f:8f:7c:38:99:
7f:7b:db:8d:61:86:fd:62:50:2f:97:b2:c9:a7:93:
c2:db:59:a0:cb:ac:fd:00:b2:12:bd:3d:4b:42:ac:
e5:da:d6:8b:db:28:a3:50:77:ee:ec:24:c6:7f:d2:
00:48:65:12:cb:7f:7a:10:36:eb:cd:84:1a:a9:82:
3c:1a:f5:6e:0c:76:93:5a:5a:3f:51:e2:37:eb:1d:
15:fd:d9:55:2b:a3:44:6d:c8:5a:86:e3:9c:3f:62:
23:1a:c3:17:46:e4:44:01:a7:76:15:04:5c:bb:60:
98:20:aa:38:40:82:e5:54:12:77:60:44:74:44:23:
40:85:13:e7:f6:17:bc:6b:96:01:7a:81:d0:08:14:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:3D:59:BF:3C:4A:F5:DD:4E:DB:AA:97:B0:05:5F:44:5F:85:4D
X509v3 Authority Key Identifier:
keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:8c:fd:5c:f3:f6:a0:11:c1:b2:b8:65:e7:d4:fd:37:0c:
31:44:ce:88:5f:fd:74:8a:b6:76:3c:02:15:9a:3c:10:39:cc:
b2:6a:14:02:b3:4a:36:6f:0c:c6:4b:1e:98:09:6e:fd:8f:84:
c9:a1:c7:36:36:8b:a4:e7:7a:d5:1f:d9:6f:95:d1:29:7f:ef:
dc:42:0a:0f:71:f2:21:13:6e:4c:43:89:02:00:24:cf:af:00:
49:f0:bd:f8:8a:23:68:49:d7:9e:3a:95:85:9f:88:a0:cb:b1:
89:52:e5:3d:7e:32:bc:31:cb:0b:ea:4e:81:ed:f9:f1:eb:80:
8d:f4:85:9a:35:0c:f8:26:15:bc:41:eb:11:cf:32:0d:d6:19:
b3:08:ef:e4:0b:d7:7c:27:87:dc:d6:bf:5c:35:60:e4:86:9b:
83:ad:ea:50:aa:e8:64:2c:76:28:dc:be:40:9e:9f:e9:df:c4:
c2:52:69:b3:c8:37:a5:ba:3d:7b:a5:35:d9:0b:d2:a3:c3:86:
32:bc:a1:5f:54:97:b2:e3:bf:a4:23:4b:b6:98:5f:e2:ea:41:
92:a8:ba:14:4b:10:89:64:65:da:c9:06:00:41:17:9f:06:14:
bf:95:24:a2:fd:6e:10:4d:a2:7d:75:51:bd:ec:6d:3f:87:9e:
38:eb:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:29 2025 by rpki-client