
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File: EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier: tsPkVEuHsY//pkN/hT5sy1En/NDFxiZsdgx6+NXEaFU=
Subject key identifier: 5E:EC:BB:AF:93:16:3C:C9:E7:0A:F1:C4:E9:08:F5:71:C6:43:AE:82
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial: 019A54C00F89C91610083FB109C1989CEDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 16:01:04 +0000
Manifest this update: Wed 05 Nov 2025 16:01:04 +0000
Manifest next update: Thu 06 Nov 2025 16:01:04 +0000
Files and hashes: 1: 3wY6oGANv8v5KdwOhq0YCyGCR3c.roa (hash: YTsANZzZhIeMDaKWnAImTcGoqYZxIqqraKwHHW/4AQQ=)
2: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: FVscTWBHX/dFuqceT8hoI8FDoiHA3q0TSBNArf7OfzI=)
3: N6mQt4p5LaN2cPNO7YXd-z2Q3Ds.roa (hash: NGM3dzWw+RuSOK1JbfI7JvooWiDasEuAqNb3dRiWmXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:0f:89:c9:16:10:08:3f:b1:09:c1:98:9c:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Validity
Not Before: Nov 5 16:01:04 2025 GMT
Not After : Nov 6 16:01:04 2025 GMT
Subject: CN=5eecbbaf93163cc9e70af1c4e908f571c643ae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:27:ae:2a:53:cd:65:d6:df:55:9c:90:0e:
c1:8e:cb:e4:06:8b:c6:4f:8b:4a:09:dc:f5:6c:be:
9e:ba:1a:82:2c:c8:78:1f:fd:15:41:2a:e5:b7:de:
44:72:9d:f3:d1:57:04:c2:d3:90:a6:a4:c0:88:fd:
d8:9b:bf:dc:9b:0d:85:6e:55:11:7d:8e:ea:a5:d9:
67:90:08:ef:9e:60:e9:14:56:4c:81:2b:0c:c3:a8:
35:8b:74:b2:8d:86:86:14:5a:31:8d:87:07:9b:b8:
9e:c4:89:43:90:b4:96:aa:83:d1:7d:18:9b:42:bd:
e1:43:a2:62:06:6e:12:82:7b:3f:76:c0:d2:b5:3a:
2a:18:67:ce:92:02:fd:11:73:00:1c:a8:11:52:b2:
cd:63:80:d7:6f:8e:e9:97:f7:8c:a6:22:ce:43:c8:
45:f4:95:b5:51:b6:27:12:cc:c4:0d:e8:31:7e:a7:
43:86:ce:a5:53:fb:5e:48:17:49:46:90:f6:0a:7e:
74:7b:a7:20:61:8f:fb:4a:86:f9:2b:f4:bc:27:8b:
19:02:c3:81:59:c5:bb:91:fd:0a:3d:0e:17:92:d4:
42:a2:15:09:cd:84:16:80:9f:d8:9a:e9:14:80:1e:
ad:a2:81:82:f1:ef:44:70:1d:c5:d8:63:eb:94:bc:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EC:BB:AF:93:16:3C:C9:E7:0A:F1:C4:E9:08:F5:71:C6:43:AE:82
X509v3 Authority Key Identifier:
keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:34:eb:97:e6:5d:c0:d1:eb:c6:07:e7:88:41:5d:d2:d2:
17:a7:83:93:33:c6:42:5b:6d:bd:6a:1b:2c:6d:66:02:b6:73:
aa:29:6d:50:0e:2f:bc:32:62:00:a9:7e:a9:fe:92:cf:ed:fd:
e8:32:d1:cb:51:51:0d:04:25:02:83:17:51:1a:ee:45:c1:f3:
47:b7:01:f2:83:de:43:b6:d1:13:89:e7:5d:66:0e:1f:0c:c8:
b9:8f:d3:09:1f:96:4b:41:e5:87:02:f5:76:d1:54:64:1f:1b:
0a:88:b2:3c:55:64:db:41:8e:c4:0c:b5:2a:67:20:c3:8f:55:
af:63:c3:42:55:3d:64:f1:5b:c2:98:9f:4d:4c:05:2b:47:00:
55:4c:12:60:fc:cc:bb:80:dd:f0:82:ec:2d:2d:21:14:3e:b8:
2d:ef:f4:e5:03:9e:73:a3:4f:09:42:e4:40:aa:08:bd:b4:d5:
de:47:b8:a4:7e:4f:d5:73:2e:e1:c0:94:70:2b:f1:fb:e8:a2:
19:55:e0:14:df:7b:c5:4d:1d:18:4b:67:1f:31:17:de:bd:b6:
3b:d5:81:e4:84:72:c6:e1:8a:15:76:38:da:5d:38:89:24:8e:
2c:ab:c5:b4:9f:84:e5:f0:23:26:c3:48:5f:2e:1a:41:17:05:
ec:bc:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:28:59 2025 by rpki-client