Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: DRUoK392viUvO2BqmD+bv1nf9f7pi8YevJQsjmcx0hU=
Subject key identifier: B7:B0:C0:E1:33:81:7A:F1:F3:F0:B0:D9:09:2E:24:BB:2D:66:DE:31
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019A552D09EA0240F9D38E50889838FDB0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0E34
Signing time: Wed 05 Nov 2025 18:00:06 +0000
Manifest this update: Wed 05 Nov 2025 18:00:06 +0000
Manifest next update: Thu 06 Nov 2025 18:00:06 +0000
Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: 2GnTubGhHt+/RoedFo6rRHyqx8+gRvots5YIxIjxfu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:09:ea:02:40:f9:d3:8e:50:88:98:38:fd:b0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Nov 5 18:00:06 2025 GMT
Not After : Nov 6 18:00:06 2025 GMT
Subject: CN=b7b0c0e133817af1f3f0b0d9092e24bb2d66de31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:aa:9b:1b:5a:65:99:b8:86:85:67:d4:e8:
de:1b:b1:85:b1:db:1b:42:48:e8:1f:19:37:af:f0:
52:01:5a:9a:c8:b9:63:a0:25:41:2e:b1:e3:e9:2a:
3f:69:cb:51:e8:33:87:38:74:e7:a8:9b:d9:fa:7f:
ef:0a:ba:dc:d4:81:3b:ec:6b:75:01:c3:12:b4:b6:
dd:22:94:fc:cf:3f:d7:95:12:3b:43:f5:83:42:9b:
d4:87:9c:fb:71:b0:3e:e5:b3:f8:d5:5d:d8:f2:23:
46:66:0f:41:48:f0:33:95:d5:07:24:28:a0:0e:1b:
0c:e1:2f:07:cd:fb:1a:48:18:58:a1:ef:64:48:4e:
c3:81:cc:7c:0f:6a:9e:ca:ad:ea:f6:68:a3:13:81:
47:bf:1c:b4:cf:be:43:9f:d9:e6:d6:de:4c:e9:11:
6c:63:15:4d:99:ea:f5:4e:7e:51:c6:86:fa:39:6d:
e7:d1:34:89:92:ed:fe:bb:a9:d5:85:73:7c:92:30:
44:de:97:f0:e2:e8:04:94:d7:e6:0d:12:70:a8:14:
a8:ba:a5:10:4c:07:90:d1:77:c4:a0:23:21:81:f7:
53:5e:b9:07:af:b6:85:e1:ac:13:2f:a4:99:24:78:
d0:ae:2a:11:9e:37:6d:c1:09:de:41:30:6d:70:d3:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:C0:E1:33:81:7A:F1:F3:F0:B0:D9:09:2E:24:BB:2D:66:DE:31
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:40:46:9e:9c:fd:0d:56:e8:cc:d4:5d:78:7f:8f:55:c1:12:
9b:b5:ab:c3:d5:b1:ff:c0:bc:5e:a5:4e:20:29:01:f5:9f:dc:
23:9b:15:02:d1:10:aa:aa:d6:50:3b:56:db:e1:56:47:ff:af:
62:ac:09:73:50:e5:9f:35:90:73:c7:46:0d:12:74:a2:e2:2f:
21:66:7a:b9:ed:94:d1:d1:81:60:35:1f:8b:99:92:bd:c4:ea:
d5:6b:c4:bb:f2:89:0e:26:8d:01:81:a5:5f:23:5d:a6:e7:9c:
49:56:f2:f9:4d:54:0a:f2:d5:ee:d3:86:64:87:24:39:ac:e4:
3a:d8:eb:6e:da:c0:24:48:09:60:5e:5f:33:8b:33:4a:a1:e7:
f7:e5:c1:7a:28:bc:f6:c2:e9:f1:3e:fd:5c:28:34:33:37:3c:
c7:45:a0:be:d1:83:71:2e:87:fe:04:4e:39:96:e8:86:63:93:
d8:44:e3:cd:75:15:81:12:82:12:e8:4f:ae:13:d6:e4:9c:17:
5b:69:f5:53:ac:68:73:ea:17:a8:f2:95:aa:b1:e9:39:ac:29:
c3:d8:73:e6:db:be:67:36:02:81:01:10:26:a4:41:9a:ee:56:
b7:27:13:b7:73:1e:29:8c:76:d8:1a:be:ca:5b:0b:f5:6f:7d:
37:b3:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:00 2025 by rpki-client