Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File: EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier: 0CcQ/TIB/QMWQUdjHkp/A6OWjHhOWM3wW8L42ZL/I+0=
Subject key identifier: 51:0F:25:73:86:F9:89:C1:7A:06:26:52:15:B3:B2:CB:AF:2D:EE:CE
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019A51BE4D06E9D62669DF0B7B126F226C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number: 0A14
Signing time: Wed 05 Nov 2025 02:00:17 +0000
Manifest this update: Wed 05 Nov 2025 02:00:17 +0000
Manifest next update: Thu 06 Nov 2025 02:00:17 +0000
Files and hashes: 1: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: HKpUa9AXoKjq+qGruj0fyw3KMEBoCxDBPv5CcSQTmCc=)
2: oWV04MIM-RKhpL3iCBPxMNYdvNg.roa (hash: y5jWD0UHuDBxNvyztj9K4XUOWYfO7oJMHZUIIkVTcM0=)
3: oswo9YKLg0u3JC1IbA7Gj8m0msI.roa (hash: iMLKS98/HXnStabev/m1xnD9F47lNw2WEBo8S/dBQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:4d:06:e9:d6:26:69:df:0b:7b:12:6f:22:6c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Nov 5 02:00:17 2025 GMT
Not After : Nov 6 02:00:17 2025 GMT
Subject: CN=510f257386f989c17a06265215b3b2cbaf2deece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:33:44:06:4b:50:3f:fc:d2:05:0c:3b:27:
04:bb:3a:bf:74:b2:89:ab:13:41:dc:e9:75:c9:d7:
05:68:8f:eb:2b:83:42:75:51:32:52:7d:44:01:a6:
33:22:42:f9:a8:04:1a:3e:2b:26:39:29:50:82:a5:
9e:07:3b:18:d3:90:50:d7:1d:68:86:e4:29:47:a1:
20:d9:90:64:c3:5a:37:02:15:20:ca:27:6f:0e:22:
aa:6a:d5:fc:04:6f:b1:ff:3a:b1:23:1d:ca:03:68:
ea:e8:9a:f4:96:37:cc:7d:9c:90:1f:a3:63:bb:30:
51:d5:42:74:41:4b:f5:f4:da:7d:da:72:47:ca:f2:
da:1e:8f:cc:19:f6:eb:da:36:92:2b:7e:3a:6b:25:
55:af:7c:58:77:d2:24:6c:00:aa:e0:ed:30:27:71:
d4:53:56:b3:4f:07:03:24:50:58:dc:f5:55:9c:54:
d9:6f:21:7f:12:f3:a0:d9:65:6b:00:87:e4:b3:70:
12:16:d8:1d:29:11:1c:80:f2:53:78:21:5a:03:c6:
54:3a:c3:72:51:ee:d0:d1:36:3b:19:af:24:3c:f8:
86:52:ac:ea:8d:1f:78:8e:34:1f:48:0c:92:a7:1b:
fd:43:7c:64:a3:4b:fa:ce:ad:ad:0f:48:cf:b2:f8:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0F:25:73:86:F9:89:C1:7A:06:26:52:15:B3:B2:CB:AF:2D:EE:CE
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:81:04:85:06:1d:f4:80:0c:a2:11:1a:88:8b:5b:b4:c5:47:
d3:d4:28:07:70:4a:43:0f:b5:bf:8f:ef:32:5f:3e:8f:26:32:
47:b0:61:da:4d:6c:f5:8d:a3:e1:1b:67:25:f9:e1:26:f6:5f:
75:e5:43:bf:a7:81:30:45:e0:fc:bb:10:6a:1e:c2:a6:f7:f9:
a9:46:b6:e2:f4:60:b1:80:ae:26:89:a0:29:d1:83:30:4d:7b:
97:3d:35:0f:82:47:18:e0:cc:68:60:dd:46:e1:33:95:04:72:
94:8b:82:a9:9e:da:3b:c3:72:43:e7:b3:52:e4:bf:64:7d:78:
ca:71:43:86:5c:16:38:ea:6d:bf:99:26:f5:59:1a:c2:57:40:
85:5f:5c:ec:cd:2b:53:db:ac:72:e4:a4:f3:99:a4:90:84:c2:
1c:9c:4f:e4:71:87:3a:68:85:ad:dc:6e:fa:7f:54:0f:69:70:
6e:f2:47:26:af:6e:8d:5f:5d:51:7e:f2:64:d8:3f:81:40:32:
98:09:f2:64:5f:06:51:21:85:a2:34:03:5d:32:b8:ca:21:67:
df:1c:29:00:9f:31:a9:81:93:2a:7a:e2:eb:be:18:6f:92:9c:
2c:46:94:47:56:17:fc:aa:12:63:33:97:b8:c4:47:d6:06:c3:
d0:f3:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:29 2025 by rpki-client