Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: vtDgB6lYtveWrgaL7JmRGSUYT36XcbB80TGdYjxjGgs=
Subject key identifier: 2D:D6:FD:89:97:CA:12:15:DA:84:55:CE:92:A7:23:2C:63:31:6E:0B
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019A5307C8E89823A556BE48962C6743605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 1359
Signing time: Wed 05 Nov 2025 08:00:10 +0000
Manifest this update: Wed 05 Nov 2025 08:00:10 +0000
Manifest next update: Thu 06 Nov 2025 08:00:10 +0000
Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: TXsbs46IOhrhB5Nyso5+zvjSSMMz00xO9sf86bELQgE=)
2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c8:e8:98:23:a5:56:be:48:96:2c:67:43:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Nov 5 08:00:10 2025 GMT
Not After : Nov 6 08:00:10 2025 GMT
Subject: CN=2dd6fd8997ca1215da8455ce92a7232c63316e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:35:ec:a4:a2:7c:2b:42:02:2a:42:e1:25:
e9:57:8b:55:0c:01:51:33:c5:c6:c7:6d:69:85:88:
2a:ed:f9:d9:05:6f:aa:de:b1:0e:31:15:4c:d7:15:
3d:17:67:87:f4:e1:eb:1f:32:65:a5:2a:83:b8:79:
8a:fe:df:15:b4:47:84:aa:db:57:c0:00:59:99:39:
99:01:ed:d9:e1:2a:5e:34:3d:f9:2b:8e:04:de:ef:
3d:3b:25:9c:2d:c1:2d:48:74:5f:83:25:d0:d5:d4:
57:83:1d:27:3e:3d:e6:2a:15:61:61:2f:56:a9:d4:
66:19:58:dc:be:56:b0:12:f5:2f:98:42:88:14:da:
03:84:90:fc:51:98:a9:98:ec:73:2d:09:ea:84:73:
0a:9f:dc:6d:55:52:02:b4:f9:41:7c:0f:0c:a4:82:
d2:4e:47:bf:f0:03:1c:9e:7e:dd:a1:31:f9:3c:c9:
11:84:61:19:a8:54:89:da:f2:aa:40:68:05:9e:dd:
5b:a4:0f:f6:d7:55:86:56:d3:b4:84:07:59:a5:98:
80:19:a7:75:ee:95:20:c3:38:8f:fc:88:7c:89:2a:
a6:03:00:8e:bc:f3:55:26:26:d9:f9:31:96:ac:fa:
04:7a:23:43:40:ec:f1:c1:37:55:0c:0a:a5:d9:b0:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D6:FD:89:97:CA:12:15:DA:84:55:CE:92:A7:23:2C:63:31:6E:0B
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:36:e8:14:82:11:9f:74:8f:11:bb:fe:b7:44:f8:14:3f:7e:
94:a4:5e:9e:56:fc:cc:47:70:d1:ee:21:09:a2:59:9f:c8:f8:
57:d0:1e:af:9b:eb:c0:1a:9a:d0:8a:12:56:f1:ef:5a:05:7c:
9e:ff:65:d9:c7:8a:43:0a:10:b6:e6:b0:e9:0a:13:6a:ae:a6:
02:ce:cc:0e:f2:bb:4c:b6:17:2e:48:db:2f:96:8d:d0:50:e1:
3d:6d:4e:a9:3f:88:e9:ac:32:3e:72:a0:87:48:59:a1:26:b9:
21:9b:6f:77:1a:4d:9c:e8:5f:1c:d5:56:86:0a:5d:a5:c1:18:
cb:f1:e0:69:84:56:47:27:65:40:87:ce:79:81:84:bc:0f:c9:
fd:e4:40:6d:a1:85:84:aa:e8:50:f0:81:7d:74:b5:be:fc:97:
64:af:74:d4:78:30:c5:75:e6:4a:61:cc:ed:d5:26:0b:82:b6:
ec:03:8d:f2:73:d5:de:0b:05:1b:8a:21:bf:99:5b:3c:da:46:
f7:b5:85:33:c9:26:34:f1:25:71:ed:f8:ca:d8:34:26:14:41:
6d:70:0f:dd:fd:3a:e2:37:f3:03:78:0c:8e:d7:42:46:9f:67:
6d:aa:d7:14:06:bc:68:cd:cd:d4:eb:49:d2:ab:ab:ac:2b:9f:
11:14:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:46 2025 by rpki-client