Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: feInlPT0A0Ny87QbtRntkkG7YrLjy5oJZ46umnKSOf0=
Subject key identifier: 5B:96:F5:72:20:FF:28:1A:E6:1E:56:7D:B9:BF:7D:CE:7D:40:4C:BF
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019A4EF5A5BE4A0224771D560DB742BF8C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 11E8
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: ZMPG/zBpbQUuHG3gqhcDo8TI8HV33umIz+WYw0Hm2Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a5:be:4a:02:24:77:1d:56:0d:b7:42:bf:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=5b96f57220ff281ae61e567db9bf7dce7d404cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:67:5c:52:c1:26:5b:80:33:a4:8a:43:3e:eb:
3b:5f:cc:06:ec:33:6a:dc:79:5f:51:e9:83:35:41:
63:1d:22:52:3f:59:8b:68:55:39:1e:16:e5:9a:bf:
61:87:d8:30:22:99:be:21:ad:84:ef:f9:f8:97:38:
79:3a:8c:99:aa:dc:6f:dc:b7:93:80:b0:bc:1b:12:
29:0f:94:ee:6b:0c:06:7a:07:d5:b4:5c:fd:37:16:
22:72:67:41:bd:fe:6a:dd:54:84:a5:5c:8c:32:a3:
3c:b5:9b:a4:e6:d3:83:eb:cb:4a:1d:5d:07:be:e7:
de:25:0e:fb:14:20:1a:a7:2f:40:eb:26:d0:fe:91:
6c:8e:0c:c2:59:1d:8b:58:9d:e5:90:6e:4e:37:27:
ce:27:d4:9b:1c:10:c2:a9:ba:d8:c2:6e:1b:c3:b1:
24:15:65:31:f1:94:54:04:ea:fc:77:d5:57:be:8e:
64:6f:ec:29:f9:02:96:8b:a3:39:e8:45:38:bd:69:
fc:a3:10:c4:93:54:e3:10:4a:f2:d7:95:f3:d7:08:
68:6b:0f:8b:c8:75:f4:42:f3:ba:04:1c:34:d0:fa:
26:c4:08:75:1f:41:e6:00:fd:ff:eb:92:00:22:0c:
44:d7:59:e0:86:78:98:cd:69:8d:24:f8:28:68:0b:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:F5:72:20:FF:28:1A:E6:1E:56:7D:B9:BF:7D:CE:7D:40:4C:BF
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:37:9d:cf:66:1c:52:70:f0:c4:7d:4b:c8:24:c4:10:35:77:
de:68:0c:b5:01:fd:0f:8e:e7:6e:19:5e:41:69:9e:59:57:3d:
6b:1f:6a:0b:ae:7e:e9:99:17:13:b0:19:56:ea:ae:4b:f6:58:
05:57:b7:39:d3:60:38:bb:92:8d:10:16:d1:f1:5a:62:f3:cc:
d0:bf:7a:cc:31:db:47:be:63:18:c0:bc:12:2a:74:32:f6:43:
45:15:be:5f:23:a7:df:09:b2:31:2e:f1:8e:68:be:8a:1f:c8:
79:e1:9a:98:7a:33:e7:ed:89:7a:59:79:a6:3c:69:2a:5e:80:
b0:26:89:a4:91:35:ed:ef:e7:65:ec:e9:7c:6f:04:e0:05:4a:
33:45:25:f5:27:f9:53:10:f2:ed:b7:67:1e:05:8c:22:b9:8c:
a8:62:ef:08:e4:e3:d0:47:94:2f:b2:b7:2d:25:ca:a0:e2:05:
9a:ed:43:d7:46:2d:d2:f8:80:46:ac:83:39:4d:f4:d0:14:fc:
ca:6e:2d:83:1a:5e:36:e0:d2:54:5f:f0:1e:d8:2d:90:3e:4f:
aa:a9:d7:14:00:b1:4c:76:2a:26:76:65:8a:70:4a:a5:52:ed:
ad:ad:db:fe:26:88:f0:f0:1b:82:51:8a:a4:0d:eb:f4:11:77:
34:85:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:44 2025 by rpki-client