Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: TvjT8lRZ9Quf+9n1Vydezrf1TKqraJb99k9YSdHgkwc=
Subject key identifier: 07:ED:F3:A7:38:6E:39:26:59:E5:30:38:F2:39:23:12:E4:4D:F0:6A
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019A4F62A9D9F8B54FE336425A73DFDB30BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 1003
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: 4rcK4cFH6oMd8Qsczh+wbrG8unoLAVVKmjo3YxAeT/o=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a9:d9:f8:b5:4f:e3:36:42:5a:73:df:db:30:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=07edf3a7386e392659e53038f2392312e44df06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:7e:ce:35:c1:cc:2a:3c:b4:00:0b:ea:25:
e8:ba:f6:1e:13:9d:81:62:ba:1c:1f:1b:43:64:31:
7a:8b:b4:6c:a4:86:c6:f8:c9:57:9d:20:c8:1c:4f:
60:39:ab:2d:d2:50:be:8b:f9:79:2c:c6:0a:0a:39:
fd:67:b3:e8:f5:63:4c:88:98:22:f3:cc:fe:bd:9a:
ab:1f:5f:1e:23:ab:7f:32:7a:8b:93:98:32:6d:a7:
f8:a9:5b:99:2e:87:39:e8:ca:58:6d:50:bf:a9:90:
9f:71:b8:59:eb:63:0c:af:c5:54:f9:84:7c:c9:44:
ef:3c:1d:8d:84:1e:e7:26:1e:53:37:d5:2d:ca:14:
e5:00:84:da:95:5c:d8:bf:71:c0:0a:ef:36:fb:ef:
40:d7:3d:b4:f9:51:53:ff:f1:ae:83:8d:31:11:52:
5c:79:9f:de:9d:7f:5b:ef:c7:c8:fb:99:50:8e:b9:
c1:7e:e3:29:57:cb:bc:b0:51:c0:43:fa:8d:59:c6:
ca:7c:1d:c3:a2:64:ed:d2:34:2c:41:43:11:c9:2d:
83:34:9c:0f:d6:ae:ed:bd:7c:c4:7c:89:84:7d:67:
65:04:35:c8:96:a4:c5:7d:5f:f5:55:8b:15:6c:3a:
d6:94:c2:05:0a:7e:d4:ff:6b:40:99:25:a9:45:f1:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:F3:A7:38:6E:39:26:59:E5:30:38:F2:39:23:12:E4:4D:F0:6A
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:f9:3a:1f:8f:62:8a:a6:84:21:14:b0:5e:6b:05:f1:dc:
eb:63:42:cf:e0:e7:c9:45:f7:a5:48:f7:20:d1:b0:4e:6e:b2:
b5:9a:5b:5b:fd:c7:98:0f:fd:a8:12:01:18:ad:de:35:fa:78:
66:70:07:41:38:4f:19:3c:16:88:4c:8b:89:77:12:f6:69:73:
51:6d:59:33:8a:34:4e:6d:ef:3e:c9:0d:bd:aa:a0:32:08:73:
67:70:d2:87:86:25:34:d4:40:bc:d5:32:f0:35:39:5b:d8:d1:
5d:02:4c:c4:95:77:ed:ef:6a:67:b7:b6:77:a2:0b:98:a7:16:
ed:cd:b7:ad:1a:5e:f1:90:e0:74:2d:ea:6a:40:cb:4d:71:18:
20:63:52:5d:8a:48:b0:39:f1:8f:55:8f:5b:35:be:cb:23:3e:
4d:4d:c8:39:37:6e:66:a6:80:ff:9b:b0:84:c3:77:bd:62:62:
dc:f4:b3:b4:ff:5d:02:38:e1:bc:0c:ff:64:d0:d8:b6:b6:2b:
a4:14:45:04:29:48:92:21:24:46:be:95:89:c3:3f:d0:fe:fd:
a4:f4:f7:50:06:93:3a:17:98:4e:eb:e5:36:23:94:c8:4c:50:
3b:07:8e:5e:a7:e2:fb:7d:44:b5:6b:3f:43:46:22:6a:86:06:
36:6f:21:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:23 2025 by rpki-client