Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier: 5bWP8kd8CZrJ1m2e66/WctW/tjXbXCWFTsNauTd8F04=
Subject key identifier: 8A:85:0C:0A:2A:D9:8A:59:01:D4:98:A8:24:9E:1B:55:0D:DD:32:54
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial: 019A51F5CD4D8B795D145234CBE63A95A205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number: 05F5
Signing time: Wed 05 Nov 2025 03:00:54 +0000
Manifest this update: Wed 05 Nov 2025 03:00:54 +0000
Manifest next update: Thu 06 Nov 2025 03:00:54 +0000
Files and hashes: 1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: 7jNH16+UOho6SZoeou7ved0X2ThsBNC0o5rzlIeSTOw=)
2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:cd:4d:8b:79:5d:14:52:34:cb:e6:3a:95:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Validity
Not Before: Nov 5 03:00:54 2025 GMT
Not After : Nov 6 03:00:54 2025 GMT
Subject: CN=8a850c0a2ad98a5901d498a8249e1b550ddd3254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:87:a9:14:53:10:fb:c0:82:f9:95:fe:de:
a2:13:da:22:43:b1:3f:24:8e:0c:bd:48:6d:0d:9b:
34:3e:bc:67:26:ab:49:43:b4:ce:27:32:a1:42:94:
27:c1:47:14:16:d8:15:75:24:fa:ac:66:19:5e:06:
79:8a:61:f9:3b:6a:98:db:17:5f:f0:91:be:14:ea:
6c:3b:7b:99:e0:fb:39:0f:e5:ee:fd:c3:bc:35:e6:
3f:ab:b9:6b:46:76:1a:92:10:48:87:85:da:e8:6f:
07:66:5f:1a:43:e0:52:9b:b5:fe:ae:1e:b2:6d:76:
89:95:fc:5d:2b:1f:f3:8e:fd:eb:f5:a2:94:ec:58:
b9:60:5b:76:ea:72:59:5d:32:1c:71:8d:3b:b7:8a:
ed:77:63:66:b5:e7:12:88:57:40:46:ad:65:b9:8e:
fa:fe:dd:3e:19:af:aa:a5:03:47:ad:49:3d:c7:81:
d4:e8:9b:75:d1:31:b2:27:77:4a:ae:b4:c7:6e:70:
b1:51:97:ba:e4:5b:6e:cb:c3:e5:e4:fc:1c:88:f1:
7e:70:74:ba:8e:88:c1:15:b3:04:06:de:44:a8:1c:
54:11:bd:8b:e3:78:cb:cb:8e:d5:c8:7b:8c:49:fe:
af:87:8f:20:1e:d3:07:02:79:da:2f:7c:55:66:16:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:85:0C:0A:2A:D9:8A:59:01:D4:98:A8:24:9E:1B:55:0D:DD:32:54
X509v3 Authority Key Identifier:
keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:62:65:8d:b7:ad:5f:ef:0f:3c:77:df:ba:f3:2a:9b:73:
d3:34:a7:f6:8e:65:7d:2c:14:f1:dc:26:9c:ba:85:2b:3a:54:
73:52:1c:20:e7:9d:b0:97:b9:80:ed:55:bf:37:44:47:55:26:
fe:11:93:4b:e4:3d:27:9f:81:aa:1c:6b:9a:4a:71:1b:9e:50:
91:f8:3e:da:4c:d1:75:98:7f:d3:fc:5f:66:8d:0a:0f:5c:86:
28:e3:88:13:57:f4:12:99:09:07:e3:03:70:bb:6a:f3:a7:fb:
38:dd:f1:21:a0:fe:d2:b2:4d:3f:de:b7:2f:4f:cf:37:7e:ee:
4f:c7:6f:3d:86:5a:ef:15:da:ed:3c:5b:57:28:71:85:a3:3d:
23:e9:b9:52:fb:77:5c:1b:6a:68:cc:73:8f:23:e0:04:c2:7b:
d7:9c:47:92:07:03:7e:c2:14:e3:f5:5e:45:74:22:e6:45:40:
3e:66:4c:76:a6:bf:0e:db:e3:b0:60:69:c8:b4:27:f9:ec:c6:
3c:69:5f:91:98:37:10:ee:e1:c0:60:14:6c:03:58:9f:d3:46:
fd:b8:72:a1:cf:11:6d:d2:71:74:7c:51:32:40:c8:6b:f2:86:
d5:a3:9b:58:5f:90:41:b8:19:8c:8b:2f:65:d8:66:f2:e1:fc:
1a:71:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:15:33 2025 by rpki-client