Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
File: e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json)
Hash identifier: t0zTPfOGQKMqburBK/nKyncPzQvOoRS1EQJ//qRQKFc=
Subject key identifier: 31:4D:A8:C0:A5:08:9B:9E:51:F8:F8:6F:00:D2:6C:35:77:91:27:33
Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
Certificate issuer: /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Certificate serial: 019A4E4FA9C9020F08B55967829E446F0814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
Manifest number: 030F
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: NOWPRApZN+cZhNU6O4SosIs0+ItcAG8+mHGuNgAPBi0=)
2: ywZPNdm-QKZpeMwj8NoEFpCbBVU.roa (hash: P+ldS5mV1bes3QVxJQ8BBR4t28oMMRfexpRbrRRe40E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a9:c9:02:0f:08:b5:59:67:82:9e:44:6f:08:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=314da8c0a5089b9e51f8f86f00d26c3577912733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:c8:e9:40:aa:68:e7:0d:69:1f:20:8c:9b:
35:e0:df:c0:7b:1c:55:ca:85:7a:59:76:17:0d:59:
50:c6:df:b3:9a:a7:76:2c:7b:30:0d:5d:60:e2:ee:
20:71:ff:e0:a6:c1:ed:94:cc:ba:e5:8d:cb:df:2a:
2a:0c:9d:b6:e7:f5:2f:1a:fb:45:a3:6e:4e:35:a6:
26:5d:99:e0:04:c3:38:ee:06:0e:07:c7:09:78:c2:
02:37:2d:30:43:53:29:5e:34:8d:19:1e:5f:1d:d4:
a6:ce:e8:09:f8:e2:0e:90:0f:c6:a7:6f:b2:2c:dd:
7d:87:e8:fe:35:b5:b7:b8:60:8e:d3:b0:61:7b:35:
14:0d:e1:10:ce:c5:23:d9:87:f9:cb:e2:5b:fd:e1:
c9:76:75:9e:a9:fb:9e:c3:2c:a6:83:9a:9d:95:13:
bb:0e:1e:9b:4f:d2:42:1b:7d:4e:43:05:78:31:b4:
72:1c:37:68:70:c2:10:46:58:ca:fb:f2:df:9b:c0:
94:35:95:75:87:71:28:ea:3f:68:37:b5:a1:e4:7f:
c0:a9:57:27:2c:47:36:34:9d:57:22:da:bf:91:fa:
80:15:22:b6:45:46:46:78:72:04:ed:6d:29:a8:35:
9a:92:e1:e2:f9:a5:d1:30:15:f7:85:b1:dc:63:f7:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4D:A8:C0:A5:08:9B:9E:51:F8:F8:6F:00:D2:6C:35:77:91:27:33
X509v3 Authority Key Identifier:
keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:50:38:87:d3:14:03:03:97:b1:da:5d:4a:07:08:c4:73:7c:
ce:cf:34:7c:3b:fe:2b:52:db:44:e8:da:6f:2b:fd:69:42:0a:
3f:7a:11:da:d6:e3:50:eb:07:5e:07:23:52:c4:af:58:e3:39:
28:4a:96:14:b5:8f:35:6d:4e:5c:20:aa:69:15:88:8b:e4:7e:
eb:6a:18:19:24:d0:bd:6f:fe:a3:ec:55:7d:eb:41:a5:c6:e4:
b8:32:94:2d:da:1b:d5:a9:98:14:d0:55:62:a0:9e:95:6c:af:
f3:b9:5e:24:dc:89:37:89:ff:1f:5d:23:ac:0e:f9:52:d5:f1:
11:46:19:99:ed:4d:ee:18:09:da:58:4e:75:28:90:87:bd:e5:
d7:2b:6d:5e:71:27:30:3a:43:cb:9e:71:83:89:48:7a:16:f8:
e1:9e:73:9f:ed:e1:b6:97:b4:71:73:09:8d:af:e1:40:55:d2:
3f:bb:8d:75:d1:0a:ee:37:9c:b1:04:2d:1a:d3:35:00:78:60:
fd:88:70:8a:80:2b:75:db:db:7e:3f:a0:54:9b:31:96:9a:e1:
6b:6e:7b:d4:dc:26:8a:0e:dd:4c:a9:d0:93:24:ee:f4:c4:3d:
46:f1:17:11:f9:9a:24:cf:8d:c5:bb:db:b9:db:aa:b1:ad:94:
8d:d7:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:53 2025 by rpki-client