Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier: ku1doVexRYdW1GD/hlpadq1pWX5NiOhZBf5Ua5+x4DE=
Subject key identifier: 9D:12:24:9D:A4:0A:84:FF:01:07:3C:B3:93:CF:A5:C7:1E:4B:F5:73
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 019A4F98EAE9D98D21C92F71CAE48B2AC639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number: 12A3
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: czgS8HkLFm5+oX9syl8Jimv2NtdSVCT9pPT08IRRD8E=)
2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ea:e9:d9:8d:21:c9:2f:71:ca:e4:8b:2a:c6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=9d12249da40a84ff01073cb393cfa5c71e4bf573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:7d:5c:f2:7e:94:1c:4c:ba:1e:5f:77:dc:
69:6f:c2:62:5f:c5:94:44:63:36:bf:a3:fd:74:7d:
e1:57:06:67:0d:62:e5:d8:8f:fe:f3:80:da:07:e2:
fb:fe:da:ba:4d:ab:8b:98:19:e7:97:27:65:b2:38:
40:14:67:3b:e3:1d:6a:d4:b5:52:6f:73:b2:9b:da:
a9:61:8e:46:b5:01:e2:85:31:bf:bf:5e:e3:49:f4:
d5:28:a6:d0:46:28:5e:91:08:f1:1a:89:6b:3f:53:
22:3a:2a:c4:8c:4c:58:4c:ab:d8:f3:1b:9d:ef:cc:
5f:e0:4c:5f:82:1c:bf:f8:06:14:50:ab:91:48:94:
26:3b:8e:3c:1a:4b:10:2d:9a:a0:4b:82:b2:a4:30:
05:0d:7b:67:6a:ef:e8:b8:30:a3:65:20:e7:19:20:
a3:3b:3c:11:29:16:a8:0b:0f:1c:e4:71:17:12:51:
4b:f8:95:8e:83:66:43:e7:81:c5:1f:79:e6:6e:e0:
1f:a5:3a:23:d0:46:6f:16:ac:f0:ca:ae:63:d5:a1:
f4:2e:07:d8:23:6a:12:bf:03:d9:48:8b:7b:d8:8e:
44:bc:c3:84:7f:99:be:ca:72:64:99:4e:51:a3:e3:
f2:72:4d:15:7f:6f:3a:d7:34:3f:34:89:3b:9d:68:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:24:9D:A4:0A:84:FF:01:07:3C:B3:93:CF:A5:C7:1E:4B:F5:73
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1a:a9:2b:75:28:bf:2f:14:bc:c8:31:41:23:06:92:ee:6b:
4a:65:15:e8:71:a6:6a:0b:51:c9:cd:fa:95:a2:44:e1:63:c4:
ca:99:49:12:b7:05:e3:d3:4c:7f:b7:1d:d9:ea:3d:39:cb:46:
9e:40:43:35:66:39:24:80:e1:c9:bf:05:2d:ea:05:16:39:07:
dc:85:21:24:01:32:48:5a:a3:78:bc:d7:43:f6:35:69:df:a8:
47:a4:f1:63:f1:94:c9:35:9e:54:1d:e3:3e:a9:eb:50:3b:36:
00:4c:bc:ae:eb:a0:91:da:d3:2c:e9:3d:37:4d:b1:20:5e:45:
4a:85:08:c5:ac:1c:ce:c5:b9:fc:16:ac:eb:a0:1f:db:a2:aa:
f5:fb:58:34:74:b0:10:7c:9b:25:0e:90:db:81:38:33:95:f2:
c2:cc:e5:ac:cb:6b:ac:94:2b:42:55:fa:3d:9d:4f:12:c1:be:
00:12:19:30:d8:5d:f7:15:e6:3e:b7:85:4b:10:6a:99:07:e0:
e3:ae:0d:d7:bc:27:7b:15:4a:6c:64:9f:7f:72:63:34:de:79:
38:fd:62:f8:e8:4d:a9:df:f4:c2:6f:65:7f:ff:3d:9e:94:52:
a9:ce:26:be:45:b0:73:c5:12:09:c0:e2:bd:09:76:0a:eb:d0:
a8:41:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:44 2025 by rpki-client