Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: iKpum06fD0WZ52DwnDzk8KGbs+EG1I/RuoVOTQGLxvs=
Subject key identifier: 10:EF:BD:5B:C7:F9:A5:FA:74:F9:CB:13:C7:5F:49:1B:D4:EC:4D:F7
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 019A4FCFB5CF24AD057008E001C94CEC2834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 14AC
Signing time: Tue 04 Nov 2025 17:00:03 +0000
Manifest this update: Tue 04 Nov 2025 17:00:03 +0000
Manifest next update: Wed 05 Nov 2025 17:00:03 +0000
Files and hashes: 1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: b8B1tMCgrz1Wc5gxX1QtMBtkNrNQYmGjEl/pkUsTbd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:b5:cf:24:ad:05:70:08:e0:01:c9:4c:ec:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Nov 4 17:00:03 2025 GMT
Not After : Nov 5 17:00:03 2025 GMT
Subject: CN=10efbd5bc7f9a5fa74f9cb13c75f491bd4ec4df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:7d:0f:72:8c:cd:50:03:f0:e7:df:26:5f:
d7:d2:19:f0:73:59:94:fc:0b:93:00:a4:ce:74:db:
4b:04:e7:25:1b:02:3d:9d:fb:36:c6:fe:89:cc:ed:
a0:48:51:ad:6c:d4:66:32:a9:8a:1c:40:26:f8:06:
fd:81:63:99:b8:e3:65:c3:48:3a:80:47:0b:37:c0:
9d:47:66:d9:9d:40:bb:bf:0c:48:b2:71:3e:bb:2c:
7f:ed:4c:b3:ae:ec:e3:24:79:d4:bf:57:94:70:44:
51:dd:5a:c2:75:be:91:63:98:a8:f4:5b:c5:99:0b:
a5:6d:76:b5:cd:63:e7:93:82:11:ff:a4:09:d8:6c:
62:ae:27:ac:fb:7d:56:66:67:c1:91:d0:33:00:24:
8a:b9:15:d1:3b:c5:19:ac:ce:b6:8a:a0:21:9a:57:
4d:26:d2:ae:c5:ee:25:67:ff:8a:bb:88:4e:84:3d:
d8:e6:8a:eb:e9:b9:e3:68:a2:55:68:6a:d0:60:59:
cb:9c:2d:53:c6:0e:a7:bc:99:b2:b7:1b:5b:cd:f8:
6e:54:6a:ff:e0:85:e0:12:48:7e:93:93:b4:fc:69:
97:17:a8:1d:6d:ba:b6:c1:d3:c3:e0:28:01:5c:f8:
b9:51:08:19:38:e5:4b:16:c2:35:a6:6a:25:86:2c:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:BD:5B:C7:F9:A5:FA:74:F9:CB:13:C7:5F:49:1B:D4:EC:4D:F7
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d2:1d:91:0d:2b:a7:ee:5c:12:a4:65:4f:95:fa:f6:1e:56:
60:d0:87:31:e9:d4:86:2c:bb:97:40:75:16:cc:ef:7f:a1:1d:
20:42:f0:d2:01:d1:a6:e9:6e:93:3b:6a:26:12:53:37:66:ef:
55:01:47:9d:72:86:33:33:43:f9:e6:5a:05:04:3e:59:ab:85:
25:e0:e2:5e:79:e8:dc:65:54:3e:09:66:9e:a5:41:49:b0:95:
e1:7e:21:49:28:a3:45:28:38:b8:e4:92:6b:60:7e:60:fc:cc:
eb:44:87:9c:b5:45:b8:9a:e6:68:d1:b8:4f:49:b3:91:ea:0e:
5e:04:36:6f:be:23:bc:5c:b2:1f:0d:72:fd:cb:d6:b1:52:7b:
da:46:7b:7f:61:3f:15:7d:cc:ae:96:80:f2:b7:d1:2c:3c:64:
6b:ce:ad:5f:94:43:da:cb:3b:18:60:f7:94:31:d0:b9:b1:be:
c0:70:16:bb:53:a5:86:96:62:d2:82:92:0c:d7:db:05:fb:a2:
e5:ad:e8:58:c9:87:91:f7:80:7a:44:50:c2:7a:69:4d:e5:22:
a1:aa:75:4a:a4:ee:bc:8c:c5:9c:bb:86:c3:27:5c:e4:8c:ee:
5f:a1:e9:17:94:06:8c:cf:8c:80:3b:41:26:c8:81:84:63:ae:
bd:e3:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:42:53 2025 by rpki-client