Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
File: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft (raw, json)
Hash identifier: kZkfeyppAJg9eCZUQYGEZKv1jzp+nKnUpKx1eVRN8Rk=
Subject key identifier: A3:8E:F7:A0:E6:8F:90:45:31:F1:8C:19:08:AD:C2:F7:1C:87:BD:59
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 019A4EF4FED32104CCAFECDD2ABD729D771B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
Manifest number: 0994
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: Wu_sLBd52P_80aF3hK1EyS_6DCc.roa (hash: 84Ssu5t49rk7+hfFW1vqYrXMV8Dl21sv4EL9/rh88NY=)
2: YKiu8Xhy4YGRnPsmfhZXeRWkmlw.roa (hash: W2Qk9HNfNUxgCgmpVb5xDsd/PI6WJRAoQxWcxNCmQ1A=)
3: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl (hash: 6Uj3ilZcAiB8cBaP05WAgiPrQEylWaY0zogFhXwjaoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fe:d3:21:04:cc:af:ec:dd:2a:bd:72:9d:77:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=a38ef7a0e68f904531f18c1908adc2f71c87bd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:68:67:30:4f:5c:0a:b1:0c:08:c6:56:79:
4c:5b:15:4c:2b:1e:54:fd:ff:f1:26:a8:19:b4:9b:
af:3d:98:b9:d6:8b:b7:8a:08:20:e6:1e:45:64:b7:
ca:fb:58:be:5e:76:9f:0a:ba:62:1d:10:df:b6:ed:
af:4f:b8:42:92:95:ee:72:54:51:8f:7b:35:f6:43:
1e:bf:31:61:0c:51:7f:dc:35:67:8c:10:e3:7f:dc:
19:2a:db:43:15:63:01:bf:0f:40:ae:17:33:fc:e0:
b5:29:63:4c:b7:ea:e2:47:94:82:65:14:38:80:06:
32:a5:c2:b7:3f:a8:10:06:3a:f0:e4:78:ca:20:f8:
33:32:16:53:a5:75:38:21:a6:47:82:ea:09:85:37:
25:54:43:6b:81:40:79:c3:f3:b3:94:e1:46:2a:59:
c1:22:2f:a5:a5:5c:fe:16:e0:b8:ba:95:af:d3:d1:
dd:25:65:08:f1:64:d4:66:c1:ad:67:03:3d:79:cf:
cd:d4:d6:3d:35:cc:ec:27:be:c2:9b:1e:c5:88:16:
33:43:12:3d:af:4f:d2:fa:ba:c4:74:f6:f4:c6:46:
b9:3c:a5:77:37:2a:cb:d8:f2:36:20:8c:03:f4:04:
0b:19:8a:fa:26:6e:f1:ac:c4:69:49:85:5f:80:87:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:F7:A0:E6:8F:90:45:31:F1:8C:19:08:AD:C2:F7:1C:87:BD:59
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7e:1d:f6:7a:4f:a5:44:7d:0e:b1:16:af:bf:cd:b3:00:97:
b0:71:81:ae:fc:82:49:d5:1e:f3:36:3e:93:66:dc:f3:d7:ef:
1b:82:b7:1d:bc:0d:47:a3:3b:59:e3:6a:9c:8a:7c:c8:f1:5e:
55:77:5d:87:ad:51:a2:2c:05:c7:03:43:77:ae:11:f9:65:0f:
3e:3b:3f:f6:54:f8:be:6a:81:f9:a3:ae:26:5c:62:9c:84:fb:
0f:0f:8f:0c:c0:d2:9a:64:bf:19:a1:ce:2c:8b:ff:a7:1c:4e:
cb:37:21:b6:a7:62:be:70:68:80:10:ec:34:76:e2:da:63:cb:
35:6a:9e:cd:34:5d:4e:ff:f5:f4:6c:18:48:32:ac:94:ad:c4:
b4:fa:cd:18:65:c3:dd:f8:cb:ac:a1:52:59:df:c5:2a:dc:37:
47:36:26:89:e5:ba:d7:fa:7d:6a:2b:b1:0b:ce:ad:41:0b:86:
5d:cc:ba:ff:9b:6b:81:49:64:1b:22:4c:75:c0:01:0b:f1:89:
15:00:1c:21:45:b0:40:e1:9c:27:5e:cc:b1:bf:0c:56:74:52:
7d:e4:9e:c2:b8:51:f6:9d:37:18:d8:1d:04:03:64:a0:e9:b9:
b8:ae:d8:55:0a:3f:04:69:48:1a:cf:cb:cf:a3:54:89:30:34:
66:9d:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:38 2025 by rpki-client