Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: JtCsNQX4G5Hx3Rxb9ap01M7T37w8H+LZnO7yWpK2YLY=
Subject key identifier: 75:DA:87:75:F6:4F:29:31:44:5A:23:DC:4C:09:A0:88:CE:26:BE:CA
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019A5119C2AD7591C5B5ED3E15A6B0CC084D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 1665
Signing time: Tue 04 Nov 2025 23:00:33 +0000
Manifest this update: Tue 04 Nov 2025 23:00:33 +0000
Manifest next update: Wed 05 Nov 2025 23:00:33 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: IHIt4z9S+4mjbCUUu8w4Lv4WACc+bvi3rT8ObXxXu0k=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c2:ad:75:91:c5:b5:ed:3e:15:a6:b0:cc:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Nov 4 23:00:33 2025 GMT
Not After : Nov 5 23:00:33 2025 GMT
Subject: CN=75da8775f64f2931445a23dc4c09a088ce26beca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:f6:0d:24:3a:d9:c4:88:3f:34:d4:44:1e:
4c:c4:04:cf:f1:ba:e6:52:0b:5f:4c:da:78:92:1e:
b7:76:e2:f0:97:e7:22:26:2c:53:4d:49:6f:b0:cd:
df:9d:bd:97:e0:a2:c1:27:69:ff:57:0d:d9:04:6a:
6c:b4:dd:68:db:13:41:fd:c3:d3:80:9c:bb:93:a6:
d2:14:fe:a4:c8:25:c8:84:dd:50:63:79:25:46:3d:
b5:27:33:5e:92:b7:e6:a0:bd:30:ac:7f:5b:9a:33:
66:eb:fb:fb:e8:33:b4:18:b8:a4:5c:1b:e1:a2:f0:
34:a9:a9:17:2a:98:3e:a2:26:4b:ac:cb:ed:8b:cd:
e6:8d:5f:37:1d:cf:3e:14:49:a1:30:32:26:1a:4e:
96:cd:38:19:52:ac:50:5e:2f:63:9c:9d:75:a9:1c:
8f:2c:9e:5a:c9:35:a0:9c:64:d4:5c:01:6b:75:e4:
46:21:d7:14:b1:02:b9:8c:58:48:41:8b:4a:0d:e2:
af:2c:c7:e0:6c:64:4f:7b:e3:e6:18:43:b4:68:08:
6f:cd:7b:e9:39:36:d0:22:7b:32:f3:b8:9d:8e:6e:
77:fd:4c:71:21:d2:e7:57:c4:cb:c8:f2:b3:3d:31:
58:c1:5b:d6:ee:a0:83:90:68:20:9d:fa:73:e0:c1:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:87:75:F6:4F:29:31:44:5A:23:DC:4C:09:A0:88:CE:26:BE:CA
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:e6:14:6a:ee:53:e7:c1:69:a2:53:db:e0:7d:6d:0a:f0:
b2:76:26:13:20:57:58:58:e3:81:b1:cb:3a:fe:c6:26:08:46:
c3:14:1d:d0:a6:34:e3:11:53:07:b3:67:ec:2d:02:32:60:bf:
7f:b0:24:3e:c6:f7:9d:57:1f:4b:f4:b6:dd:2a:e5:bd:4c:e7:
12:95:ca:e8:f1:3b:82:a1:cd:6e:f4:16:20:0e:e4:98:89:e2:
b5:fc:57:75:2f:43:33:b6:f1:55:e5:8e:0f:41:78:9f:cb:f1:
18:2e:48:1b:d7:35:17:5e:8f:c8:0a:f3:d9:2d:74:da:45:17:
86:87:25:51:a3:10:c7:3f:b1:15:c8:a8:06:56:24:8b:81:ca:
62:8a:5e:ae:e9:23:05:f8:55:ac:ea:2e:0c:86:ae:21:1c:e1:
a5:05:d9:ab:2e:dc:ad:d7:2f:74:61:c2:03:d7:7e:3f:c4:10:
a7:20:7c:c5:0b:9c:93:92:21:c7:87:67:68:1c:04:8d:70:c1:
5a:0e:f9:ea:34:45:e2:89:ac:0c:6a:ce:b8:15:09:af:06:1c:
d8:89:e7:dc:b9:7f:16:f4:87:0e:35:c9:eb:6b:d0:42:1b:60:
eb:f4:55:36:15:8d:8a:52:ad:da:e8:fc:56:e7:f6:7c:cf:7a:
83:df:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:14:45 2025 by rpki-client