Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File: EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier: XqJl+oF39tl13LtrcbXFAzBu4T2jfbFSXXsxgoFjRRk=
Subject key identifier: 9F:17:70:D9:E3:D4:10:70:6E:20:88:B9:97:39:38:B4:15:A6:BD:1C
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer: /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial: 019A4D739D75C62D91CFFA1FEFDB08CBFEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number: 04AF
Signing time: Tue 04 Nov 2025 06:00:13 +0000
Manifest this update: Tue 04 Nov 2025 06:00:13 +0000
Manifest next update: Wed 05 Nov 2025 06:00:13 +0000
Files and hashes: 1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: LKkieg0tMo5odMtXs7dQ1QwzC6mH5mgrL4Pmwf9bcQU=)
2: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (hash: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9d:75:c6:2d:91:cf:fa:1f:ef:db:08:cb:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
Validity
Not Before: Nov 4 06:00:13 2025 GMT
Not After : Nov 5 06:00:13 2025 GMT
Subject: CN=9f1770d9e3d410706e2088b9973938b415a6bd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:b0:f7:3a:2e:18:43:e0:22:d6:11:03:0e:
14:1c:93:02:56:56:02:77:a0:3f:ad:ac:12:f1:d2:
50:3e:60:52:fc:ee:de:0f:c4:55:88:d5:52:33:f0:
41:9c:6d:9e:2a:be:ef:97:3a:07:02:a3:2f:34:51:
3e:5d:af:b1:73:64:a4:d1:94:6a:eb:9a:36:8a:f4:
a6:6b:80:ac:cf:68:6e:31:b8:fa:7f:17:72:81:71:
e8:f3:8b:0e:e9:e3:cd:6c:30:1e:c2:5f:8c:81:2e:
51:92:f5:27:9f:4e:45:d1:50:28:2f:8f:5b:ea:c8:
38:e4:16:3f:aa:13:0b:51:26:0a:d2:b2:f5:eb:26:
73:b2:54:88:b1:ce:21:d9:fa:ed:12:db:5c:13:17:
be:f9:0b:24:32:cc:98:22:df:ba:bf:8a:5d:4f:48:
6b:84:e1:c0:66:68:6a:f9:03:16:7f:79:18:92:13:
e0:04:28:3b:0e:1e:55:b5:ea:da:37:20:b2:45:8b:
25:0f:43:9c:cf:a8:90:a6:a5:4e:c6:0a:9f:b4:69:
ff:c9:aa:9e:01:23:e9:02:79:da:38:3a:ee:65:ec:
a8:6a:bb:a4:1c:da:45:9c:ce:d1:a1:93:9d:69:36:
8b:ae:6f:36:88:c2:cd:a9:fe:62:0b:9f:7b:0d:9e:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:17:70:D9:E3:D4:10:70:6E:20:88:B9:97:39:38:B4:15:A6:BD:1C
X509v3 Authority Key Identifier:
keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:25:3d:19:04:5c:d8:2b:39:9d:bd:45:33:b4:d1:ec:ab:0e:
e6:01:b4:57:40:8a:4d:02:26:dd:91:08:48:f7:21:8c:12:e6:
91:3a:d2:e9:3b:23:1a:0c:7a:04:6c:89:1d:67:ca:9b:38:e3:
79:ea:bc:93:1e:31:8d:a6:3b:7a:9e:68:75:65:84:32:09:07:
2d:c6:12:23:c5:b2:e2:78:70:dc:c4:d2:a4:1b:9c:28:d1:a6:
5f:cf:72:2d:88:1b:1d:9d:83:ce:e3:f2:9e:0f:d7:ed:d0:ab:
01:17:b5:bf:02:a7:94:f1:c4:29:b3:e4:76:5f:ca:5b:73:b9:
fb:60:0a:31:82:4c:0b:2f:54:f6:a5:52:78:c5:19:2c:56:40:
4c:bf:ba:a9:6d:af:37:c7:2f:e9:04:4e:30:86:29:6c:a6:e9:
41:8f:41:e2:de:5e:b4:65:bd:a1:08:26:9e:87:9e:df:a8:66:
dc:68:60:b8:7c:b8:5e:aa:0f:57:84:80:1a:9f:33:30:84:26:
88:72:48:55:a3:d0:bf:7c:17:c8:90:ce:2c:bf:41:0d:cc:95:
e2:73:92:8a:85:3b:85:08:fb:69:fe:0d:fd:e8:8f:74:be:b4:
95:f0:4b:6d:9c:fd:69:d7:34:39:aa:86:84:14:fc:ad:d9:56:
fd:3e:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:58 2025 by rpki-client