Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: V3BBtGiBdfMNwGaI20kw7b+XX95W1WY+7HLChdqrn8s=
Subject key identifier: 8C:01:55:F9:FF:DA:3B:D8:CC:1E:AC:B3:1D:58:DA:0D:B3:03:FF:21
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 019A4E863B85F9F9CE65F014D5A00F0FDEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 0653
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: 8itJxxYXHBk4+SecZSjxSpRc+mC0GbDtGgSJwen2PWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3b:85:f9:f9:ce:65:f0:14:d5:a0:0f:0f:de:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=8c0155f9ffda3bd8cc1eacb31d58da0db303ff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:59:f1:73:01:97:19:94:14:e3:26:e2:97:
05:be:c8:ba:77:c0:8e:f0:02:fa:0d:95:55:ea:64:
c1:8e:ab:cd:aa:43:04:0e:b3:cb:0f:78:9f:19:26:
9c:84:77:ed:19:81:41:e5:b2:6a:91:a0:71:12:02:
c3:81:01:6b:44:6c:16:c4:cf:8e:b6:8c:2a:04:8a:
d6:9b:17:b8:e0:17:9c:e2:b3:9f:1d:0b:1b:a6:79:
9b:cc:10:a2:ea:b6:bd:64:af:79:60:8d:ed:96:39:
3a:a0:2d:09:4a:b8:02:9c:02:19:da:84:50:eb:37:
bc:b5:5f:4a:c1:5f:a3:d1:9c:39:0b:b7:bf:71:24:
92:e2:89:52:6f:fb:3d:7a:67:fb:15:17:a9:e9:5b:
70:da:b9:d0:08:51:0a:e1:1c:eb:46:87:54:7b:c1:
22:df:dc:5a:1b:79:1a:61:c1:75:0f:a2:bb:2c:81:
2d:09:9d:de:1c:2f:61:71:35:c7:90:2e:75:7c:33:
09:57:b9:da:20:65:5a:5d:dd:b8:5f:d7:fe:db:08:
aa:6d:0f:c7:ec:63:5c:ac:73:5b:e5:53:ee:aa:a3:
ee:f4:ce:82:16:56:60:7a:72:cc:59:1b:c2:0a:9b:
42:b7:96:fb:fa:3f:0a:bd:2a:0a:5a:fc:8e:22:b5:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:55:F9:FF:DA:3B:D8:CC:1E:AC:B3:1D:58:DA:0D:B3:03:FF:21
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:57:27:62:44:48:15:43:c7:8b:c1:ad:14:fd:7e:ee:98:b6:
a0:74:77:d2:9d:77:04:e0:be:61:34:8d:75:c1:f5:61:4d:f9:
dc:ec:b6:44:d1:bd:e4:b2:96:db:c6:5d:22:34:49:e5:39:3c:
5d:82:61:99:39:2a:26:ad:e3:d6:94:6e:53:6c:04:5f:a5:51:
a5:55:c3:16:33:bc:0b:ea:e9:37:da:75:bb:41:a4:64:08:af:
96:7b:01:e5:bf:65:33:74:bb:97:21:99:79:13:16:69:9a:6c:
55:19:df:e2:95:29:9a:75:25:a3:ba:c2:c7:24:da:78:62:be:
43:43:11:97:be:00:f9:60:57:a7:35:43:5c:13:de:68:d1:57:
36:a7:fa:41:d8:80:d7:da:ca:3e:80:bf:27:c6:66:a9:df:55:
9e:63:96:4a:be:de:2b:f0:82:29:4d:6e:e0:ce:5f:15:fe:cb:
06:51:e7:04:29:6a:e0:ca:0d:58:3e:d3:f6:a0:a8:b7:d2:61:
ea:ee:dd:49:51:f6:a3:c3:46:36:c3:9e:1d:3b:b7:0a:6e:3c:
35:d4:38:61:4b:57:ac:ac:8e:37:81:2c:62:04:b8:41:df:38:
ff:31:fb:22:a7:4e:ba:de:66:ee:be:a0:ea:c6:9f:5d:af:c5:
0a:41:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:19 2025 by rpki-client