Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: TKXfGhOiLPSVgHFF0oN/+vjfpltk6GCKNlukXvioVwk=
Subject key identifier: DC:2A:2D:33:FC:93:BA:8C:B9:29:EB:91:5C:F8:50:73:63:19:C2:E5
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 019A4EF5232D3D7FD2079B14ECA665F6AE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: ivSd3n1wlDX/3CmpEiGMauqPXX9ZjlFX3lAP9YzoDtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:23:2d:3d:7f:d2:07:9b:14:ec:a6:65:f6:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=dc2a2d33fc93ba8cb929eb915cf850736319c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:db:60:16:c5:48:a0:00:6a:9f:a8:cd:4a:
d2:b9:75:9a:a3:c0:57:fb:96:4f:d2:89:62:6a:6b:
28:fc:6c:83:f2:14:ec:a9:36:27:de:1c:0e:9a:12:
1b:af:4d:be:7d:50:0f:29:33:e0:63:28:74:8a:71:
3a:c1:cd:d4:4a:d6:77:9b:dc:13:ac:c4:d8:8b:b8:
e1:bc:83:17:93:1e:fe:c1:f0:df:5d:cb:2a:c2:cf:
18:46:c0:f6:8b:f5:8b:80:ea:2c:d6:75:22:eb:cb:
b9:17:da:07:57:45:50:12:e0:67:46:a5:8a:bf:9a:
59:37:60:67:8f:72:31:f5:05:f9:40:c0:a5:0c:65:
8f:a9:59:3e:13:a3:97:6f:ed:00:18:d8:d2:c7:a9:
5f:5f:88:b0:da:89:40:d7:c5:02:fa:2d:95:b2:d3:
14:1c:3a:07:65:53:ea:a3:48:ce:22:72:3d:86:66:
63:5c:84:ff:92:4b:1c:46:e4:fb:73:20:3e:f4:52:
02:51:96:cb:4a:cd:8b:77:a1:59:e7:46:37:93:5f:
3a:38:c6:73:00:4b:af:1e:c9:b6:e8:49:49:33:58:
0c:cd:7b:69:89:fd:df:36:c7:81:9e:22:96:30:e0:
df:98:5c:cf:c5:3f:3b:71:fb:f2:e4:12:db:d1:36:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:2D:33:FC:93:BA:8C:B9:29:EB:91:5C:F8:50:73:63:19:C2:E5
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ae:f3:d1:9c:30:67:68:1a:30:d9:ad:33:79:73:ec:ac:d2:
07:5d:53:f1:db:f0:51:c5:f1:8f:9b:05:4b:99:52:d2:8e:62:
f8:0f:d0:c6:6e:54:90:83:73:a7:9f:60:d5:2a:5b:2e:f6:a9:
dd:cf:72:eb:21:97:fc:eb:9f:6c:64:d2:40:2c:c6:e7:12:ce:
5a:43:28:32:34:7c:f5:23:56:6b:1c:a6:26:d4:d2:f2:15:7c:
24:34:21:93:a4:b7:ff:fb:e3:6f:e0:2d:de:df:41:49:ec:7d:
0b:0d:f6:16:83:2f:8d:aa:d1:21:1b:f3:51:ba:b1:5e:39:18:
53:d5:87:bc:af:79:a5:4f:51:ab:4c:06:4f:b3:3f:90:eb:00:
47:45:8c:c2:e1:aa:36:4b:73:b7:97:1d:d7:0f:09:08:90:8f:
da:46:08:21:cc:d3:35:fc:4e:3e:19:4d:33:ed:f7:d7:f5:77:
53:bf:a5:8a:92:ff:01:cf:98:a1:d1:43:e2:cb:43:2b:74:de:
29:77:15:64:3f:97:5a:6c:14:45:38:bd:54:2b:46:a9:4a:4b:
ce:c1:92:fd:a8:a5:4b:a2:28:28:ad:02:38:e5:3f:0d:15:c3:
c4:90:4d:b4:7a:7c:39:ca:5e:0d:fb:8d:22:24:da:ef:8b:5f:
db:0c:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:14 2025 by rpki-client