Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File: eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier: IGcLgUYeR7OlfJTjFFkK+tCprxPYiTgnBZEY9A3zoVY=
Subject key identifier: EE:EA:27:CD:94:72:EA:78:14:6F:48:56:C7:70:49:09:35:13:2F:55
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial: 019A4EF403F49652DB650565439F349F7EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: IQ2Uz2+NlzlitM9UH9cHVXZ+ko0Og3wUjufHXTu39nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:03:f4:96:52:db:65:05:65:43:9f:34:9f:7e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=eeea27cd9472ea78146f4856c770490935132f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:bc:aa:43:62:65:c2:4b:0f:42:2a:b3:f6:
93:46:b8:db:84:c6:3b:37:2e:c2:ed:4a:fe:47:48:
76:02:78:8a:6b:5b:34:06:02:55:64:54:55:25:46:
7d:21:57:8c:4c:06:c3:c5:e7:c7:e4:39:37:75:56:
b8:f3:5c:a7:5f:67:8e:ca:a4:ba:51:da:72:7a:4e:
04:a1:03:ae:57:81:ea:a7:47:c4:0c:2f:dc:57:a8:
c4:90:a6:df:cd:a1:2c:a6:d3:a7:97:f0:89:44:f2:
db:00:aa:d5:b9:54:ac:3d:27:ff:1b:0c:ac:0a:46:
d3:e9:44:86:a4:7e:9d:2e:f7:0b:e4:08:29:75:ab:
3b:d0:93:87:3b:d2:0e:55:be:05:c0:03:dc:16:71:
77:23:f2:51:d9:cc:7b:39:f3:29:14:0e:46:1e:c6:
61:ae:d2:50:87:07:56:d9:45:d5:7f:56:d6:2c:5b:
95:ea:ca:75:b7:a9:d0:57:20:3d:cc:7b:aa:1c:4c:
64:0a:4a:28:3d:e8:33:da:97:e9:5e:8d:28:76:f7:
b5:8c:42:e6:63:9c:06:dd:7e:49:67:02:52:35:f7:
2f:8d:8c:33:80:9d:7e:61:5c:cf:8a:69:76:2c:53:
f8:40:c3:1a:48:15:36:cf:1e:57:c8:fd:c1:c4:12:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:27:CD:94:72:EA:78:14:6F:48:56:C7:70:49:09:35:13:2F:55
X509v3 Authority Key Identifier:
keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c6:e1:3b:9a:63:92:6c:d4:df:d0:8e:63:f8:1d:ca:c3:1c:
c7:8f:1a:7e:ed:28:f8:e4:6a:06:88:3e:f3:8c:dd:a4:83:55:
f3:0e:8a:44:0c:c8:9f:29:2c:f5:0f:06:08:c0:24:98:88:dd:
1d:98:21:e1:d5:fa:53:f1:1b:82:4a:3c:08:11:2b:d3:29:8a:
23:04:0d:ad:05:ca:9d:da:91:d1:62:29:ca:2b:27:bc:6c:c8:
50:ae:00:fd:a6:8f:5b:00:34:4a:ba:0c:b7:7e:0f:01:9f:cb:
a2:7f:85:aa:23:e9:b2:7f:b7:18:f5:39:6a:b7:df:cb:e0:1e:
3b:00:64:5b:ee:b8:99:9c:ab:32:ff:28:d4:e8:13:64:71:77:
0b:f8:36:72:40:41:d0:90:b1:50:db:3b:55:42:36:bf:8e:7d:
9c:7c:df:fb:54:9a:10:d3:4b:8b:17:a2:38:f8:c5:96:38:de:
e1:2b:c5:35:2b:eb:22:8f:c0:c8:18:d8:7a:a2:d2:3f:2a:43:
6a:80:e6:55:14:68:09:5c:b3:df:8f:ec:b5:60:f1:a8:94:13:
d1:d6:ca:f2:2f:d8:15:c2:f8:47:d1:a0:fe:40:7c:f5:12:cc:
b8:1b:ba:ee:c6:3c:56:1b:91:53:a7:49:50:e8:de:bd:d3:69:
21:93:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:17 2025 by rpki-client