Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File: EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier: WsGhCirG6LTgKA7vtJCzQNrfYmNddaRyVIXCrhnfdLM=
Subject key identifier: A2:2A:75:C4:36:88:23:93:C4:EA:9D:D5:77:EF:21:93:38:89:61:4A
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 019A4E4F7DF1267A85C9D34BBC1FB9E41262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number: 0DF6
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: yZVs9lp5QupVJLDdkTFR4N8qQmF2cvCA9YGJSNDyyWg=)
2: TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa (hash: fvos90x1MCHlKrWkPLr1FS+wwkNQEqqCA62xdTd9V6A=)
3: upwUY-IRDf6A9l9uowGDJXhgTCE.roa (hash: IubMyXokYf5K+jVmzZiM+AZcRQ0zYk8rqAfoAkObB6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7d:f1:26:7a:85:c9:d3:4b:bc:1f:b9:e4:12:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=a22a75c436882393c4ea9dd577ef21933889614a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:60:a2:7e:df:6f:34:8e:fc:68:b1:da:ea:
76:98:bd:1b:58:b8:c6:e5:4c:42:be:ec:d0:05:77:
ac:25:b5:e4:8d:fa:bd:f4:22:17:99:fb:98:b5:5f:
85:96:e5:dc:28:68:a6:1e:b4:2f:3c:77:a5:3a:3d:
5b:f7:0e:da:60:5d:61:47:b2:9b:66:bf:37:e4:e9:
fd:47:aa:38:bb:6e:28:b4:11:44:f0:38:c5:af:1b:
c7:90:49:d0:04:a2:9e:29:cd:87:37:d4:75:44:03:
a4:4e:7f:12:04:d4:55:94:63:8e:52:10:8e:9c:2c:
9f:42:84:f3:25:51:a2:23:5a:e0:a9:2f:c0:ba:61:
a3:92:82:02:30:00:36:3e:85:73:69:b3:cc:b6:96:
55:f6:c2:e1:f6:9e:85:fd:10:69:88:d8:29:46:88:
1a:6b:f8:27:75:09:c2:96:38:e4:82:ee:a9:e1:5c:
44:65:cd:ee:7a:18:2c:14:93:95:4d:58:9d:b2:ad:
6e:f2:f4:24:41:63:3e:25:7f:89:66:13:f2:cf:dd:
b0:68:e9:13:f3:09:4c:69:3e:87:25:3c:36:3a:c6:
c7:76:85:9f:05:b0:cd:74:ea:02:3d:bc:36:c1:1a:
f4:f0:35:63:0c:88:60:5f:47:20:b5:ac:33:6e:c7:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:75:C4:36:88:23:93:C4:EA:9D:D5:77:EF:21:93:38:89:61:4A
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8c:22:41:ed:7e:db:9a:71:82:90:7a:5d:00:f9:48:d3:3f:
f0:32:e6:4a:97:6f:a0:03:db:c8:39:73:d1:43:82:63:ec:ab:
5e:ed:10:30:4a:7f:b4:a6:de:fc:17:db:e8:3b:5b:ea:ad:ec:
de:11:6c:6a:c7:47:3c:34:73:a8:3b:c5:3f:b3:ad:07:e2:84:
02:99:46:23:02:7d:dd:ec:2f:aa:92:9f:14:0b:32:e6:e5:23:
32:93:64:36:13:b4:b6:46:f6:2d:47:86:f9:a4:fa:88:07:ac:
3c:9b:7b:e3:4a:91:ce:ef:23:a6:5b:11:5a:4a:7c:27:c0:4c:
e8:25:2e:77:49:c5:f0:cb:02:d1:80:30:8c:b8:fd:01:eb:30:
56:39:d3:47:81:4b:bf:f4:4c:40:3d:1b:d8:f8:5c:da:e8:5d:
cf:23:d7:96:6f:1d:36:c9:0c:6b:75:c1:30:44:63:6e:9f:52:
d8:d9:52:5b:55:b7:e5:e5:3e:69:23:83:e1:26:3e:d1:90:b9:
cb:ec:bc:d6:23:38:bb:db:b5:8a:8e:af:25:45:81:4d:1d:f2:
18:da:62:b3:87:06:69:71:c7:fc:10:b6:d4:10:0f:d6:e6:a7:
00:de:53:88:ab:80:b6:9d:15:83:f2:65:5c:15:7e:27:6a:e8:
49:46:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:43 2025 by rpki-client