Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: Y0Aw0yyYHDAWSFE3BGOjSHsfbwgjwfRmmJxFVHK8Yvw=
Subject key identifier: D9:69:18:52:23:72:23:79:C7:78:17:F7:B1:00:99:2F:0F:30:3A:88
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 019A4EF458EADC981EAEFA97AB70CE6E6943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: 6S1ioe6r/IX+AwTUzDJEWN0AxeI1AefOSHnTYdCkLPE=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:58:ea:dc:98:1e:ae:fa:97:ab:70:ce:6e:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=d969185223722379c77817f7b100992f0f303a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:96:e7:1c:71:da:85:17:21:d0:10:f1:a9:
20:f6:5b:97:c7:83:9f:6f:55:98:37:32:9d:40:40:
76:1b:79:e6:9c:05:61:1c:f4:63:b7:e0:45:ba:9f:
12:39:9c:71:bb:cc:96:28:ef:6f:8b:62:59:55:63:
6e:70:06:17:76:c0:f0:8c:0b:d2:d8:d1:bd:3f:ba:
ba:12:ff:f5:0c:de:d4:ae:72:41:a2:50:30:e4:97:
e4:04:ae:8c:e6:8b:b1:90:2c:1b:da:06:39:6e:83:
0e:5c:45:d1:95:61:93:bf:34:50:c1:91:f5:5b:f8:
a8:10:49:ab:c9:ef:9d:4d:e1:c9:f0:f3:f8:56:ab:
fe:c5:23:8f:7e:64:3c:38:53:71:c6:c4:ec:41:b4:
d2:4b:2f:fe:c1:82:b7:33:b6:87:66:64:a5:f6:6a:
38:f8:d1:3d:bd:c9:c0:4e:7b:c2:ff:04:48:dd:9d:
38:da:b1:fe:22:93:99:6b:fc:3b:a3:83:8a:a8:5e:
b9:2b:0c:61:d4:08:97:49:92:df:67:4d:e6:f4:ad:
39:09:80:e2:54:16:1e:b3:08:fd:d7:60:ae:01:92:
22:92:04:5d:e2:5c:34:32:e6:c1:76:5d:32:15:7e:
f2:9d:39:98:a4:fa:08:f3:72:69:34:26:7b:01:a6:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:18:52:23:72:23:79:C7:78:17:F7:B1:00:99:2F:0F:30:3A:88
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:0e:36:17:aa:98:ed:99:ec:87:12:98:29:72:6b:fb:19:
e6:23:dc:17:42:97:48:bb:dc:9e:c1:e2:1e:1d:5f:c9:11:40:
e3:54:9b:1f:f2:82:59:f7:ab:f3:ca:11:74:7f:c8:43:5a:70:
a7:1c:d1:34:38:3f:e6:64:70:bf:cc:b2:cd:4d:92:8b:77:82:
db:c5:91:aa:f5:ee:88:fc:d5:64:db:c7:2a:48:18:3b:7a:dc:
dc:e8:9d:84:de:0d:92:2e:65:17:f4:fb:e4:7f:4a:35:77:32:
b7:9b:ca:7b:c1:d8:0e:26:b6:65:4b:0c:95:d3:e7:66:de:85:
9f:18:59:0d:c5:9d:85:bc:ff:49:a3:cc:0e:d6:d7:a6:9f:24:
2c:c6:e2:4d:de:22:a4:a4:a8:60:b6:ff:11:e8:7f:a8:89:8e:
46:a5:0a:d1:cc:44:f8:c6:cf:9c:08:ad:f5:13:4e:16:74:19:
20:8f:ba:4d:e4:78:f6:be:8d:3c:61:e9:de:68:64:94:59:6a:
f9:3e:35:2d:ea:96:42:27:2a:e1:7f:6e:60:cb:7d:6e:5e:36:
5e:53:a5:25:ac:c3:05:cc:4c:19:c1:ea:96:21:3f:93:c9:0c:
12:5c:14:c7:44:0a:c1:e7:66:fb:b4:24:68:09:11:d4:e2:37:
e4:3f:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:25 2025 by rpki-client