Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: xExDGzzaIN+EwxqiHWYeR43x/X30Qi/83UhbDWjSp1o=
Subject key identifier: A6:61:F9:66:E3:4E:EB:F7:9E:4B:E9:E8:64:06:FA:FC:65:69:B6:53
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019A515131EDA64E5D4593A2EEDD12EED8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 169E
Signing time: Wed 05 Nov 2025 00:01:06 +0000
Manifest this update: Wed 05 Nov 2025 00:01:06 +0000
Manifest next update: Thu 06 Nov 2025 00:01:06 +0000
Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: KKKPacUApcfSem+gY1zt6b5WAasPz1/3UCrPVN4FEAI=)
2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:31:ed:a6:4e:5d:45:93:a2:ee:dd:12:ee:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Nov 5 00:01:06 2025 GMT
Not After : Nov 6 00:01:06 2025 GMT
Subject: CN=a661f966e34eebf79e4be9e86406fafc6569b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:ec:00:9c:da:1c:1f:6e:7b:6b:1d:b7:44:
2b:3e:32:ff:1a:73:8e:fa:99:61:59:5e:08:49:30:
19:eb:10:70:0b:b4:f9:2d:26:6f:86:18:93:58:a1:
88:82:d0:60:37:99:de:53:0e:e5:cd:f0:1a:5e:ad:
fa:a7:eb:3e:04:49:1d:6b:f5:18:81:bf:f5:26:36:
b3:68:e0:61:d3:f5:e2:59:da:91:50:a3:23:62:9e:
91:d7:95:b9:94:37:07:0d:99:fe:0f:53:2d:91:5e:
da:3e:2b:d6:91:94:bb:71:1a:ad:ea:13:a1:ce:47:
99:f3:c4:16:89:a5:ea:3d:44:fe:a6:b7:b8:79:35:
aa:f4:71:21:9c:ad:ab:68:28:8d:31:b7:d7:15:5b:
17:b1:9b:d7:bc:fa:30:64:b5:3d:20:90:c2:50:b2:
88:ac:5d:5f:97:0c:66:1f:5c:cf:f1:d5:33:a8:f9:
08:58:ac:78:08:f2:6b:1b:29:e5:44:60:f7:34:e5:
39:1f:88:c1:05:68:c7:a9:55:18:9d:b1:c2:a6:a7:
03:2b:e1:31:8c:da:47:fc:13:88:32:61:b0:a6:b7:
78:a3:69:51:18:a7:74:f6:08:98:3e:41:9f:59:22:
ab:7b:7c:1b:8e:23:85:3e:be:08:9d:ef:26:dc:05:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:F9:66:E3:4E:EB:F7:9E:4B:E9:E8:64:06:FA:FC:65:69:B6:53
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:45:1c:c1:16:20:ca:2b:83:af:c2:e9:91:75:6e:25:c0:d8:
ff:04:d3:97:33:6f:fe:98:6d:62:36:17:52:4a:c0:9a:bd:2f:
f4:a0:6a:d2:42:26:7e:e7:0a:80:0b:26:be:04:cc:43:31:bc:
7a:31:04:6f:7f:eb:e1:b5:bb:c6:8a:18:aa:c3:b1:3c:9d:0f:
d9:a7:3c:e1:1e:d4:f7:e7:e2:a5:47:90:5a:ba:bc:5a:28:37:
b2:33:59:0a:58:02:75:0b:db:47:34:15:bc:d6:9e:24:9c:93:
cf:62:b1:fb:91:5d:d7:11:98:00:c3:0c:03:79:43:14:6a:27:
40:79:ec:27:59:7e:18:38:7b:8c:63:fe:dc:be:03:56:56:31:
21:f9:35:20:6d:c9:ae:3d:75:f9:f5:2c:91:07:4a:8c:e3:32:
c1:c8:d4:bc:1a:73:a2:f5:a5:fd:69:65:02:82:21:2a:91:e8:
78:e9:81:1f:de:a3:de:31:b4:a5:47:a9:b6:bf:a7:60:fa:51:
11:a4:46:37:51:94:79:df:f9:b8:e0:cd:ee:f2:a3:f9:2b:65:
2b:c4:27:75:a9:43:5b:0d:c3:f6:98:54:e0:cd:8d:f5:ab:ae:
5a:e9:3b:de:70:e8:74:12:37:d3:d2:08:45:8d:04:ad:2a:11:
64:8a:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:31 2025 by rpki-client