Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: Sn4LkUgqj8HNCSxoh1ejkFVtCUkV6RWqikQVxqUd6FQ=
Subject key identifier: 8A:9D:F6:C0:C1:06:15:90:81:4F:E9:E8:06:50:20:9A:BA:83:56:74
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019A4D05BD0B775BB9D6871177F28F187D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 04:00:12 +0000
Manifest this update: Tue 04 Nov 2025 04:00:12 +0000
Manifest next update: Wed 05 Nov 2025 04:00:12 +0000
Files and hashes: 1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: RxdllQZeGe5aHwzO17oa5ZsONxC0nhrJUzWFJ74IB14=)
2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:bd:0b:77:5b:b9:d6:87:11:77:f2:8f:18:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Nov 4 04:00:12 2025 GMT
Not After : Nov 5 04:00:12 2025 GMT
Subject: CN=8a9df6c0c1061590814fe9e80650209aba835674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:b6:3a:a1:c1:a7:ba:ac:29:cb:75:a5:5d:
c1:63:5d:70:b9:0a:f0:3c:e1:11:a7:25:57:83:ca:
db:82:d6:c8:51:b3:9b:cc:f6:fa:9e:e5:dc:00:53:
92:65:4a:98:e1:ca:65:8a:ad:ae:be:36:8b:80:99:
2f:81:67:bd:d4:32:25:a8:69:f5:b0:29:a5:e5:90:
08:95:ec:6a:17:44:77:23:1a:39:79:ee:61:e5:48:
fd:4f:e7:4e:34:c8:87:6d:88:3c:39:c0:95:cc:05:
d5:dc:94:d2:d7:ce:fd:7e:36:ea:b4:b4:07:0e:47:
c4:d7:6a:b1:f7:d4:4f:fa:75:fa:13:17:b0:fd:a7:
85:e1:6b:28:0f:9d:79:ee:96:c1:f1:fc:6e:8b:40:
ee:28:4f:3b:99:b7:a9:f5:13:3e:f0:3a:1d:36:c5:
db:13:ac:04:c9:ad:cd:26:95:90:ed:77:18:e0:9d:
56:2d:86:92:61:b6:e2:b6:06:a3:a8:d7:3e:3a:bd:
30:d1:a8:c1:a0:72:86:b3:3b:a2:9d:aa:6a:a0:bd:
c7:92:ec:f2:ab:71:ef:f4:c5:fe:fc:66:79:75:8a:
81:d9:7f:c5:69:35:65:2a:0c:20:7f:42:6c:3d:6a:
e0:d1:bb:9c:c0:e8:4d:12:82:55:02:ab:02:cc:2a:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:F6:C0:C1:06:15:90:81:4F:E9:E8:06:50:20:9A:BA:83:56:74
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a0:70:ae:48:9a:ab:c2:3a:32:36:46:8d:96:ca:8f:b7:4d:
84:f3:fe:f8:c6:e7:5d:a4:ca:ef:f1:39:24:0e:8e:1a:c7:90:
5c:33:62:c2:54:4a:df:9f:d2:2b:47:6e:53:14:3c:ec:72:32:
a1:6d:5e:fa:3f:94:20:dc:ac:77:3f:b7:c8:74:08:d8:c1:e7:
bf:2c:de:de:f9:b5:36:dd:1e:19:64:c8:9d:50:74:b1:2e:60:
a2:4f:4e:a1:c9:29:13:46:a7:a8:c0:21:94:7a:04:df:cb:0d:
21:9c:78:78:0d:84:74:5e:e3:8e:af:11:8e:e6:2f:68:cf:d8:
67:be:a2:6c:71:b8:75:26:fe:b4:fa:8a:d3:9d:9f:3e:2a:1d:
7a:24:ab:71:df:1b:8c:5c:87:24:a7:91:d8:39:3e:09:30:d2:
02:7a:9c:58:ef:6b:2e:72:07:8c:22:da:8c:48:1e:b2:a3:b5:
5f:5d:24:12:be:5d:37:b5:fd:f6:6d:21:86:26:f3:c8:c4:8a:
6f:e6:7b:2b:19:ca:8c:cd:f1:dd:77:25:3e:53:43:2d:96:38:
eb:b6:4f:64:ea:d3:48:79:52:21:dc:d5:74:58:e6:98:5e:30:
22:74:5d:67:f6:c1:ef:8a:66:ee:ba:3e:d9:0f:10:de:da:21:
0a:6a:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:54 2025 by rpki-client