Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: UK0lZ9ww/yYNHW730GecUjUMHclGG4KH3l0s1vDvfTw=
Subject key identifier: 96:14:AF:91:DE:53:BC:2F:88:6C:62:C0:A7:E5:04:D3:67:0F:65:13
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 019A4DAAA9DB369E2504C4F56123EEA8EFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 0427
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: 4AR8D6XDGx1XuSyV4JdaPwHiNp2W52RyLc6UEsC9Y7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a9:db:36:9e:25:04:c4:f5:61:23:ee:a8:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=9614af91de53bc2f886c62c0a7e504d3670f6513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:21:6e:9b:c3:d8:61:31:14:9e:3a:ca:bf:
8e:c0:d2:42:8e:b8:2c:62:ff:78:bb:8c:ac:42:7e:
dc:10:99:ed:b4:32:b8:5f:78:02:d9:16:a8:58:db:
cc:f1:ec:14:ca:14:c5:13:b7:a2:01:55:9f:b5:6e:
cf:b2:f0:42:6b:c3:46:0a:cd:f3:a1:f7:fb:dd:7c:
80:d2:7f:04:6a:7e:70:98:11:b6:d7:c3:b3:8a:cc:
f0:b4:44:a7:aa:6e:80:3c:7b:fb:60:ad:27:cb:37:
e6:2e:4a:96:a9:2c:72:4d:2c:38:51:1d:14:88:6a:
f5:95:2d:61:48:23:41:6e:23:db:62:7b:ab:17:df:
9e:0e:b6:d0:5a:42:a0:2a:00:f7:5b:3a:22:7c:93:
c0:01:e6:01:7b:f2:48:10:91:9c:85:66:cb:a9:02:
0f:ef:d8:44:55:2e:6f:3e:af:39:3f:10:14:5f:f3:
49:80:37:50:3a:8d:49:b0:e9:12:11:54:aa:5a:b2:
82:30:32:1a:8f:3f:ef:e4:cb:80:5a:32:ec:30:f2:
30:de:ee:fb:cc:20:00:6e:1a:59:d1:82:d5:00:c9:
77:22:e9:50:80:d4:6c:17:b1:0d:65:55:f0:fa:23:
c5:a9:ea:3e:a6:ee:e4:75:6c:eb:a1:88:fe:e7:d4:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:AF:91:DE:53:BC:2F:88:6C:62:C0:A7:E5:04:D3:67:0F:65:13
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8b:c7:d8:99:0a:6b:52:13:7a:f4:1d:c6:e7:78:1a:0a:6f:
aa:cb:97:bb:d9:b3:dd:65:1c:b0:98:72:9e:8e:b4:48:0c:87:
df:dc:ee:e0:6e:e4:d6:d5:d8:99:74:b3:34:05:d7:fc:00:58:
cc:90:44:73:5c:6b:b1:7c:cf:c5:48:11:c3:88:ce:b4:1e:f5:
cd:62:64:9d:4e:e0:5d:24:f6:0f:5d:56:47:af:b5:af:41:d1:
80:cc:32:5c:e0:3b:80:32:fc:4e:cd:2f:65:98:b7:35:a3:29:
78:7c:fa:fc:fc:87:95:b3:85:76:ae:d9:48:37:93:99:4a:70:
36:a9:c9:40:13:63:95:e9:a3:78:eb:ce:ab:09:ea:cb:9d:f6:
50:00:80:c1:94:21:7e:23:b4:35:cc:02:f3:f3:30:8c:a6:28:
7b:7d:74:70:31:41:a6:9d:1c:a0:25:fd:fd:ef:02:34:ba:4d:
49:19:0b:60:b4:59:3b:fd:da:8c:a0:b9:36:13:30:dc:be:bf:
fb:83:27:a0:a1:64:eb:bf:4a:79:2d:a6:5b:c0:65:93:72:ce:
99:e4:4e:11:9b:74:6d:3b:e2:ce:c1:04:49:4d:d0:2f:d4:05:
ab:9b:ca:a7:e6:0b:6f:b7:e6:cd:82:b9:0a:02:19:0e:5f:0d:
69:79:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:24 2025 by rpki-client