Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier: gHrA9+WSDOlMtB9XVmycN/P6pMg8awDDSwPj7Dv85Aw=
Subject key identifier: 21:44:C5:03:48:FC:03:26:F4:C9:27:CB:F2:5B:01:A5:1A:63:46:26
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 019A4FD07297C237CE1B97E86AA7C43A561D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number: 0EA0
Signing time: Tue 04 Nov 2025 17:00:52 +0000
Manifest this update: Tue 04 Nov 2025 17:00:52 +0000
Manifest next update: Wed 05 Nov 2025 17:00:52 +0000
Files and hashes: 1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: 3ojc7MpGH2HQdLPb4oWFrSgSK0JIFXcTaHc1iBTFqb8=)
3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:72:97:c2:37:ce:1b:97:e8:6a:a7:c4:3a:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Nov 4 17:00:52 2025 GMT
Not After : Nov 5 17:00:52 2025 GMT
Subject: CN=2144c50348fc0326f4c927cbf25b01a51a634626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:c6:a4:dd:4d:98:83:ee:2e:6a:f3:ae:ca:
8b:04:dc:ed:63:bd:e5:f0:b1:f8:30:a0:d2:7a:d8:
17:38:b1:27:45:bf:06:bb:2f:37:a7:a7:41:67:d0:
74:ac:aa:fa:c0:f5:31:31:ef:70:31:51:f2:d9:50:
5e:99:61:66:07:ca:c0:fc:f7:1b:9f:3a:c2:68:9d:
d7:75:3f:af:e1:e7:01:d4:02:32:e6:7e:fc:47:93:
9e:9b:98:1e:c4:79:33:30:3a:1d:85:d6:43:73:3d:
e8:14:1b:2a:e9:8c:53:b6:b5:dd:d3:f2:75:7c:16:
00:53:11:b3:4b:32:7d:b2:44:d4:e0:ce:d9:08:ec:
bb:eb:72:a4:b3:6b:25:d0:0f:f8:47:cf:10:3b:df:
d9:6e:15:ae:82:a2:49:8f:f3:6d:d6:28:d7:44:8a:
2f:19:0a:23:b6:08:6c:26:6b:70:22:07:ee:04:a3:
cd:07:56:d7:41:3d:ce:ac:07:60:77:c5:2f:a0:1d:
30:1f:dc:e5:51:55:da:f3:7d:91:7a:06:b5:f6:e7:
98:70:5c:94:8f:58:ed:32:f8:42:4c:8b:0d:d5:89:
2c:a5:d9:b0:e6:d8:2d:6c:c1:66:11:87:6b:c2:24:
5e:b7:e4:92:ef:40:36:5c:fb:87:a2:5e:ee:d3:32:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:C5:03:48:FC:03:26:F4:C9:27:CB:F2:5B:01:A5:1A:63:46:26
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:e1:b8:17:be:ea:ff:ba:e3:c6:fe:fe:1c:e8:4c:6c:e2:
00:c1:8b:c5:2b:47:1a:2a:45:72:51:84:3c:0a:32:10:44:7c:
6d:13:71:8b:bb:7c:f2:89:8c:0c:76:63:7a:b8:dc:6f:5f:6b:
bb:63:94:11:f2:72:82:a6:18:46:7c:a0:aa:9a:a3:ba:0e:8e:
82:fd:2a:6b:2e:d7:3a:a9:80:65:f8:0b:05:70:4d:e3:b0:97:
64:fb:cd:d7:30:64:37:0f:ac:3f:bc:70:17:15:bb:60:25:76:
16:8a:bb:05:3b:44:43:50:3f:c3:1b:bf:53:a7:94:72:13:fb:
1a:c6:66:f1:46:a5:95:39:8c:9f:f5:23:80:9c:86:6d:a7:dd:
1a:44:78:dd:2a:32:00:90:ee:0c:4b:b5:59:d0:d3:f1:9e:3b:
cc:96:31:a1:9a:58:31:1a:0c:78:45:ea:05:a1:9e:bb:42:2a:
2c:28:16:77:61:15:8a:fb:98:c7:ac:e7:00:39:4d:92:f5:50:
00:76:de:d2:8e:84:7f:ea:f0:aa:82:a0:5d:b6:a5:90:5d:9d:
45:bc:35:9e:ae:23:3f:1f:64:8d:25:94:08:60:81:7b:04:28:
7b:b1:9a:9f:82:15:45:1d:0c:03:15:41:87:d7:69:f4:e9:3c:
5e:00:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:48 2025 by rpki-client