Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: UNB4x4VxJvdQSvNvU119spNnMJMoWR/ybCTJp4IaLyc=
Subject key identifier: 32:D3:15:AD:81:E9:EE:79:43:37:F8:BC:B0:B8:EA:C4:46:9F:5E:AA
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019A522C71FE265DFA8DC87C011BABA2CB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 15D0
Signing time: Wed 05 Nov 2025 04:00:35 +0000
Manifest this update: Wed 05 Nov 2025 04:00:35 +0000
Manifest next update: Thu 06 Nov 2025 04:00:35 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: GVxlZPRqKFrP5QCcz5/t37erTxLuou+6ogi1OLL2rZQ=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:71:fe:26:5d:fa:8d:c8:7c:01:1b:ab:a2:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Nov 5 04:00:35 2025 GMT
Not After : Nov 6 04:00:35 2025 GMT
Subject: CN=32d315ad81e9ee794337f8bcb0b8eac4469f5eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:87:50:7d:87:4e:5b:6b:94:60:42:de:8c:
41:76:12:e7:1c:fa:ad:5e:bc:26:f0:1f:56:39:6c:
52:6e:d6:27:b5:d6:07:b3:0e:c5:66:53:6a:e0:b9:
e8:7e:1a:5b:d9:21:19:5b:23:ab:1f:34:5e:65:46:
83:ac:0e:83:cc:24:9a:e7:ee:91:c6:25:3e:bc:f0:
f6:1f:35:33:b9:44:d8:ca:27:82:fd:24:ef:33:b2:
f1:50:ff:ca:c7:76:ce:31:f4:71:27:1a:9b:be:58:
d4:b7:d7:f5:4b:7f:65:97:7f:ce:89:53:ad:d7:1d:
f5:6b:53:7f:5c:0f:45:8c:4b:6c:cf:b9:37:8e:18:
55:38:16:21:60:93:3f:ba:20:e3:3e:af:4e:6f:fb:
44:2a:88:5b:c6:3a:e4:9a:b3:aa:02:df:53:9a:d6:
2f:6e:e6:9c:78:7b:15:3a:21:16:6c:cd:10:48:95:
4e:27:5e:ea:21:33:43:bc:fd:6c:3c:7f:53:ae:84:
58:26:9e:5b:6b:f1:37:66:7a:23:35:82:dd:6b:53:
49:19:31:83:04:1c:22:bf:c7:f5:74:d3:c6:e9:e1:
3e:4b:47:25:22:c5:1c:1b:e9:03:f4:14:59:b1:b1:
0a:d3:34:58:44:eb:3e:5d:c2:76:80:56:c6:d2:80:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:15:AD:81:E9:EE:79:43:37:F8:BC:B0:B8:EA:C4:46:9F:5E:AA
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:da:fd:73:1b:44:56:fd:23:22:d7:df:79:48:5a:fd:2e:
47:30:41:8d:40:9a:37:c4:19:79:34:a8:9f:dc:3b:e4:54:b1:
27:54:22:90:53:79:46:c4:22:d3:4c:64:c1:fd:7d:e2:cb:54:
65:5d:c0:db:d6:9b:eb:4d:a8:7c:67:3c:87:11:25:bd:d8:62:
2f:b7:49:d9:be:a7:50:61:9a:d0:4c:89:70:1c:e3:de:00:d2:
9e:7c:35:ec:4b:ac:c3:12:77:06:28:04:d1:95:9d:b6:c0:03:
15:e6:bc:fe:bd:96:97:27:0b:82:14:b0:de:e6:c6:72:b3:4f:
f1:ea:10:0d:90:7c:d9:13:9a:70:1b:d9:8d:fa:8e:fa:48:3f:
29:6a:9f:81:0c:07:1a:53:3c:72:ad:1f:b6:df:b3:40:bc:da:
a6:18:37:4c:a9:b1:1c:0b:dc:76:bd:0c:6c:f9:eb:88:91:58:
52:77:db:75:19:c8:d5:26:42:42:9d:01:03:46:6e:1a:5a:2e:
44:17:59:56:62:e4:bf:38:6b:b5:46:65:b6:d3:23:a3:93:66:
d8:0a:43:ed:16:1d:9a:f4:9d:73:80:a9:0c:26:f8:4f:a4:36:
f3:2e:e6:9e:7a:51:61:c5:05:ec:8d:b7:23:7d:0d:2f:4c:ce:
c2:da:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:24 2025 by rpki-client