Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: BBn7UBB8SiWLady3Kp/VFvUMzlYFym/ztbQFxTIqn0o=
Subject key identifier: DE:B3:FE:E7:67:F5:52:B9:93:E0:D5:80:68:1E:76:29:1B:D2:B3:4C
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 019A4E86453B2BD418DDEA0484FF5DA1FCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: jB0Yoxfi6w7OtpqNjpodY3/2Q9HjmQUV4CHmRRJtlEA=)
2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:45:3b:2b:d4:18:dd:ea:04:84:ff:5d:a1:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=deb3fee767f552b993e0d580681e76291bd2b34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:89:ff:e0:8b:9a:09:06:1e:de:db:a1:89:
ae:59:b3:04:40:30:92:b6:69:b2:c0:c4:a5:02:2a:
7c:bb:ba:3e:8a:70:1f:fb:6d:72:73:a4:93:2a:df:
aa:37:75:e8:01:d9:a0:c8:36:81:22:13:5c:6b:c6:
0e:9e:13:6f:57:c3:47:96:19:04:32:3d:91:77:8f:
ce:d0:ac:19:2a:00:1c:1b:bd:d6:04:e3:99:3f:84:
eb:6e:3a:dc:86:8b:40:5e:71:e2:1d:7d:5b:ad:15:
bc:12:3a:e8:5e:44:3a:1a:4f:c8:90:d6:20:cb:9b:
61:9d:e7:fd:84:47:1e:fa:57:e7:3b:ba:89:c3:4c:
68:67:66:61:8b:67:66:1e:f8:e3:6c:ac:8e:16:63:
b4:c4:5d:4b:34:4d:21:f2:dd:e1:3b:6c:a1:a8:80:
b0:e2:e1:b9:96:e6:d8:b9:e2:85:7a:2d:c6:60:2f:
99:ec:d3:1f:c0:d4:19:c7:47:fb:b6:02:40:8d:a0:
f4:90:59:13:64:6b:6f:92:61:d2:9b:6c:df:3d:29:
e8:6d:21:37:cd:df:ea:80:e7:73:b0:42:84:19:bf:
dd:a0:5c:4d:1d:16:95:b0:22:e9:86:52:32:72:ef:
d3:81:0e:dd:74:fe:cf:7a:f9:e7:e5:d2:a7:2f:39:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:FE:E7:67:F5:52:B9:93:E0:D5:80:68:1E:76:29:1B:D2:B3:4C
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:b4:99:23:76:04:29:9d:56:22:04:7d:bd:37:31:ab:a2:
07:42:bc:8f:5f:69:80:d0:a8:ef:f6:33:c1:42:3a:6e:c2:56:
af:bd:7f:2f:9d:cc:43:af:1f:c0:3c:af:a9:93:c7:28:ee:f4:
15:24:da:f2:4a:b8:53:32:9c:b3:a9:91:85:7a:bb:47:5f:b3:
66:6d:89:2a:72:83:33:c3:3f:47:95:10:ac:71:82:61:c2:74:
d2:7e:36:93:c5:a5:aa:2a:00:f8:4a:43:d6:fc:ff:3d:d9:a2:
74:25:15:79:d0:e7:f3:eb:81:aa:c2:69:5b:2b:60:b2:b7:4b:
c5:4d:8c:fd:e5:d9:c1:23:f5:62:95:8d:10:fe:9b:7d:7c:bd:
8e:8c:69:23:b1:e5:fa:b0:d8:b9:2f:a7:70:b4:3d:4e:0b:2c:
d0:6d:7a:1b:58:36:85:22:7a:09:57:88:8e:99:a1:4f:8f:58:
43:36:63:54:0c:b2:52:87:27:54:ed:c0:5f:25:93:d3:d4:68:
a9:28:39:bc:c6:aa:ec:8f:48:11:d6:de:99:57:4d:21:10:81:
50:7a:aa:88:58:6c:c5:f0:3b:91:20:0c:e9:cb:74:73:a8:43:
d6:c3:b2:3e:6e:17:c4:3f:40:d4:cd:41:e8:e7:dc:d5:57:52:
59:c5:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:39 2025 by rpki-client