Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: oBG7qQ3C8VIx6xz4Ka2dH3jIAbmsqeubogClyiBpUao=
Subject key identifier: 43:54:BE:5C:E9:A5:D3:D7:11:66:FE:73:8A:5A:E1:FD:02:51:51:6B
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 019A4D740FE3DF5480EDC00BE4A9256D7159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0B3A
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: 9yftf8++DqbhzS5EgUUDD99PHcwNHLTIeVDZaDITWAw=)
2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0f:e3:df:54:80:ed:c0:0b:e4:a9:25:6d:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=4354be5ce9a5d3d71166fe738a5ae1fd0251516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:45:e3:26:e1:c4:88:10:2c:ab:ea:f8:57:
6c:82:d7:e3:fb:87:e1:d6:2b:b6:77:d6:1e:0b:69:
b3:36:9c:26:d5:6b:f5:0b:cc:b8:cf:86:d0:f7:0f:
31:ec:e0:fe:1a:01:8e:60:a7:b6:43:a2:f5:7d:52:
52:8b:c0:1e:9f:d5:8b:93:ff:65:48:d3:d1:c9:03:
60:6f:15:76:6b:96:e0:17:72:34:b1:38:3f:4c:3a:
43:d4:e4:16:8a:43:e3:9f:c5:e2:ba:53:19:48:c0:
fb:17:0e:a2:cb:98:5f:9a:02:d3:fa:16:f3:5e:d0:
16:3b:45:55:eb:51:9e:b2:1b:79:ee:34:f6:df:fa:
02:f6:39:3d:20:54:2e:f1:62:19:58:7e:b2:71:d9:
85:f4:d4:e3:6d:0e:34:00:13:0c:3c:f3:73:e7:ac:
f4:ef:1c:70:ee:13:10:bd:ed:e3:aa:b7:c9:80:25:
9c:03:35:ef:31:8d:30:63:97:8d:03:67:44:95:85:
d6:26:01:02:d0:14:c2:a3:72:3c:bb:77:8e:75:c4:
78:ed:65:58:22:c8:07:d8:38:47:2b:bb:72:15:41:
5c:ae:a4:07:ef:d3:b7:f5:88:f6:8d:a2:d3:66:42:
fc:8f:f1:46:0b:fa:21:fd:d0:24:67:e7:4f:11:85:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:BE:5C:E9:A5:D3:D7:11:66:FE:73:8A:5A:E1:FD:02:51:51:6B
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:9c:93:c7:4e:a9:ab:7d:7d:d5:60:26:80:c3:88:04:e0:
b0:6d:c9:6f:8b:30:15:4e:31:68:6d:e8:d0:52:8e:6d:ee:39:
b6:3b:33:4d:7f:f8:64:15:4c:cd:e8:a9:7e:c2:78:e7:19:f1:
3d:e9:f6:fe:cd:fb:b7:55:e6:c5:b5:c2:38:43:59:bc:1b:9a:
97:d8:f8:b7:07:a6:05:97:b6:b1:f3:88:43:37:8d:3c:3e:7d:
30:91:20:b7:2b:63:e3:98:15:7d:36:b0:c3:d3:ce:89:39:27:
5a:e9:54:6f:80:5b:bc:57:dd:e1:b9:11:e9:31:e8:a0:d2:4a:
55:3b:40:f5:6e:c8:11:79:b7:d8:cc:5e:91:f4:40:73:04:12:
35:4d:bf:a4:2b:77:e0:e7:ac:04:9f:df:d3:d8:e9:e2:3a:86:
8c:cc:0e:6d:0a:97:fc:65:dd:b4:01:73:08:32:3d:37:11:18:
dd:a2:37:27:30:34:d1:bb:d3:9d:86:96:ca:b7:fc:04:fb:10:
72:ae:74:b2:08:a5:6a:b9:20:7d:8e:b2:4f:b0:f6:ce:ec:a3:
15:57:bb:6b:52:fe:6e:e0:fe:bf:62:6f:63:36:6f:67:4d:86:
7e:df:8f:4f:c5:17:6d:f8:9c:1d:6c:83:b1:b3:24:97:4a:63:
96:a5:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client