Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: eoIjrZXRIuBD2ewZy9DoZG+YtFRbyItI/5p4BWL6++M=
Subject key identifier: 6E:1A:A5:10:AB:1D:F8:7B:7F:1C:92:78:C9:AE:F0:5B:40:BA:69:8E
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 019A4EF5AC7FFDBA2FB145FFF2899C1D1D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0C2C
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: 75z9w5virMbh68xvsP78IGE0Q4gpnR2qXAKFJ29E1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:7f:fd:ba:2f:b1:45:ff:f2:89:9c:1d:1d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=6e1aa510ab1df87b7f1c9278c9aef05b40ba698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:f1:81:48:14:f2:10:d3:af:cc:37:ee:e0:
03:a9:17:c9:80:44:9b:2c:38:74:9b:c0:6e:14:78:
c1:96:a0:66:62:3f:77:13:78:33:bb:ff:95:0d:40:
c0:28:92:f4:cb:8b:dc:0d:49:a9:8c:6c:ce:7f:89:
2b:3b:2b:e1:84:39:ea:ac:c4:2c:c1:1e:6e:15:74:
3d:f2:6b:41:f9:f8:cd:d9:ef:21:7e:32:b4:5e:f3:
a8:92:fc:a4:c6:14:9e:f0:8d:fb:a7:34:a0:51:35:
ae:e8:93:16:84:44:a7:56:c0:f5:7d:0a:5a:80:19:
73:cf:f7:b4:5e:f9:9d:00:82:63:2e:d7:54:ff:3a:
53:49:07:0f:f9:11:14:26:99:32:af:4b:e8:e8:1d:
50:8b:7d:f3:07:ae:b2:33:cf:9c:86:0e:c0:6f:e2:
f0:49:96:2f:b5:c6:ee:ef:76:0c:28:aa:35:4c:4d:
7a:99:03:c1:14:ab:3f:ad:d3:6c:7c:ee:33:c5:5e:
90:ec:1a:d1:be:19:3d:db:d5:a9:26:ff:ed:51:90:
a0:13:ae:be:ff:70:ce:61:db:22:d7:55:d1:a1:c8:
29:cc:0f:43:29:a8:05:8b:2d:6c:ba:bc:22:4b:e1:
27:a6:0f:9f:85:93:61:1e:79:ec:b1:84:49:8a:73:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:A5:10:AB:1D:F8:7B:7F:1C:92:78:C9:AE:F0:5B:40:BA:69:8E
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:49:e9:c7:df:88:f8:3d:90:c4:5e:62:d2:72:13:ad:aa:
c0:2a:8a:38:b4:8b:bd:9c:a6:23:ef:a5:18:8f:80:2e:f8:7d:
b5:0c:1d:7b:64:de:17:8d:2a:93:27:36:91:e6:af:ee:f0:e2:
d4:ab:b9:e5:95:92:4c:52:98:87:14:ec:d5:a9:c3:66:8e:f2:
49:40:c8:2c:5c:aa:17:f0:c6:f9:48:e7:fe:8f:e4:d3:22:f1:
d0:6c:aa:30:a4:89:c1:22:b0:3e:3e:81:96:a0:ad:46:49:6d:
90:61:c2:e3:c6:51:0f:2e:0f:1e:7b:fe:9e:47:e2:63:0c:01:
de:6a:d5:72:a8:42:ee:d3:dc:90:37:9e:1c:f0:f5:b7:61:b8:
4b:24:b9:cc:f3:8d:15:16:95:29:3c:c4:6d:c8:76:07:0b:c7:
76:2f:04:a1:ba:8f:00:e0:db:bf:5e:bf:de:f5:98:1b:e7:f8:
49:2c:fc:b1:9a:21:54:1a:26:ed:21:af:85:fd:91:18:1d:be:
f0:a1:3e:07:7f:f2:46:9f:3a:53:36:5c:bb:b6:e9:b2:f2:0a:
46:bf:20:c4:a1:02:e5:2c:8f:b0:85:d4:69:61:53:21:21:a8:
53:d1:d2:ab:ca:19:87:97:07:be:77:00:8c:e4:08:b9:62:31:
67:2c:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:55 2025 by rpki-client