Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: ZHOtbvwSED5BwlO889iKOluuZOYwkafxR349EA5nZHQ=
Subject key identifier: 81:58:68:9D:1B:F4:6F:2C:98:B8:C2:0A:D7:A1:7C:34:BB:95:BE:23
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019A4F99159E3EDE835856B5E1961AB7794B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:23 +0000
Manifest this update: Tue 04 Nov 2025 16:00:23 +0000
Manifest next update: Wed 05 Nov 2025 16:00:23 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: ZA3Cv1iiUVNt4ervr0EeFuT8TsuA1DOvpc06WrkIRio=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:15:9e:3e:de:83:58:56:b5:e1:96:1a:b7:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Nov 4 16:00:23 2025 GMT
Not After : Nov 5 16:00:23 2025 GMT
Subject: CN=8158689d1bf46f2c98b8c20ad7a17c34bb95be23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:87:25:b7:47:39:90:03:86:50:3e:51:0f:
00:79:e1:42:dc:6c:b7:61:0a:52:32:0a:f3:aa:ef:
ea:15:5d:a7:92:c3:1e:5f:f2:9f:95:8c:3b:e0:cc:
02:2a:78:68:32:2f:12:52:6c:bd:9f:68:c1:e0:47:
aa:63:94:c7:70:e0:82:82:20:ac:32:65:be:d8:d6:
e2:07:54:e1:ad:cf:86:be:40:ff:e1:ef:d2:51:6e:
c4:d9:38:a4:4e:a8:ca:4f:01:ad:98:f6:cc:50:6d:
4f:c9:90:ce:44:f6:07:c7:61:07:82:10:92:c9:fa:
ff:ff:3e:07:b5:d3:7d:bd:f4:d6:d4:17:1c:db:a9:
28:97:1c:eb:30:84:37:f6:10:91:48:9c:96:76:78:
5a:ff:c4:93:fd:80:bc:d6:34:a7:e7:50:0d:40:b4:
b2:89:e7:59:e6:84:91:68:fe:54:3d:a8:34:e7:a3:
c7:08:a0:22:05:78:56:39:8f:ae:03:f1:60:63:77:
5f:b8:01:8b:5b:5b:6c:d4:b1:93:ab:47:00:c5:95:
a1:e1:da:fe:fc:40:89:09:ee:c6:5e:cb:ad:81:41:
af:0c:7f:a6:90:38:ea:4d:44:a6:c6:6a:84:dd:cb:
7d:02:f2:76:db:38:6c:fc:4b:0b:dc:d3:b6:6c:d4:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:68:9D:1B:F4:6F:2C:98:B8:C2:0A:D7:A1:7C:34:BB:95:BE:23
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:7a:cf:e6:e4:94:c8:df:79:3c:21:94:e7:54:3a:36:cf:
95:4e:08:5a:7a:1a:0b:fd:f8:b3:6a:24:9f:70:58:22:95:c7:
5b:32:c7:78:a3:05:a7:ef:d7:40:8b:b0:b4:00:81:03:4f:52:
2b:34:78:b3:70:a1:86:c7:d2:b7:bb:2a:4a:ec:bb:31:f3:aa:
a6:e5:fc:a2:ce:98:89:2f:10:20:0a:80:0e:d9:90:9d:8d:e4:
8c:6a:9e:3b:a8:2f:84:d1:c7:22:90:42:81:be:86:c1:75:d0:
80:b9:c5:a9:ce:e7:ed:9a:79:71:48:60:b5:27:a6:8b:c9:ee:
08:cc:ce:b5:2f:14:d4:9c:ac:1c:07:75:90:a0:2d:ab:04:28:
0b:4b:2d:be:7c:96:70:7e:b0:6f:b5:d2:66:5e:6d:b2:17:23:
46:19:33:0b:bc:92:d8:f3:1d:0b:92:18:e1:f1:6d:7c:eb:bc:
00:1c:ab:7a:0c:44:1c:91:e0:24:ec:36:db:47:f4:dc:0f:99:
24:8e:20:dd:6a:f1:24:82:ca:08:8f:7a:47:46:6e:6f:13:ec:
4d:9b:5b:fa:4f:1e:a0:21:4f:b6:9d:da:af:e5:8e:b2:a8:df:
d3:22:bf:60:a1:ec:74:b9:0f:61:40:89:5d:61:30:e3:24:10:
f3:fe:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:40 2025 by rpki-client