Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: +v7lvD0i45XOHExYo+YUDp4hNzWTRuDpJNLE0Q5KQGw=
Subject key identifier: C9:53:89:80:6F:B5:44:EA:0F:28:C7:BF:D8:AF:8D:31:FE:E0:7F:A5
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019A4E862122D59BA98B6BAED69E8E7E15F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:04 +0000
Manifest this update: Tue 04 Nov 2025 11:00:04 +0000
Manifest next update: Wed 05 Nov 2025 11:00:04 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: Z/h+yuv/xm2ViMYwvK6Br3BGR2kcUyCKFloBwGr0d7Y=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:21:22:d5:9b:a9:8b:6b:ae:d6:9e:8e:7e:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Nov 4 11:00:04 2025 GMT
Not After : Nov 5 11:00:04 2025 GMT
Subject: CN=c95389806fb544ea0f28c7bfd8af8d31fee07fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:60:0c:4d:86:c3:ed:f9:21:70:24:f8:0c:
91:20:1a:7c:87:14:c4:5e:95:9c:bb:de:84:56:fc:
0a:4d:5c:1b:cd:a0:b9:7b:2c:18:d6:ef:cc:c9:54:
10:b9:06:12:c2:60:91:f4:4c:a4:80:5a:4e:99:ab:
1f:12:0b:b1:09:90:fd:71:e7:05:cb:de:2e:1a:a7:
64:7b:4a:d2:e7:ae:f1:c1:8b:ca:59:86:f8:2e:6c:
4b:ea:9f:3a:52:94:85:e3:27:09:43:86:1b:8c:a0:
83:ae:e8:29:73:7e:e6:f3:7c:f9:9b:69:86:ab:af:
eb:51:d8:aa:ce:9e:79:44:1a:37:30:56:e3:60:d2:
88:52:76:9b:c3:9a:51:21:e9:7c:ac:2d:3d:73:19:
48:c4:3e:92:0d:14:a1:02:e9:4e:ef:67:73:2b:5a:
0f:1a:e9:f1:92:b6:9f:d5:1b:8b:11:ba:e9:6f:b3:
6d:d7:b5:b9:c7:17:fd:37:26:1d:ca:0c:e2:2f:63:
a5:2b:30:82:ab:5c:99:c5:e2:0a:e2:79:cf:d8:cd:
9b:6e:99:e6:c5:f9:b8:ed:3d:db:6d:df:5d:16:b0:
14:f1:b6:00:62:fc:0d:e7:20:b5:23:9e:b4:42:75:
d2:e0:84:8b:44:bf:28:00:0a:a5:71:f5:3a:62:3c:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:89:80:6F:B5:44:EA:0F:28:C7:BF:D8:AF:8D:31:FE:E0:7F:A5
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:52:57:c9:eb:ad:4f:e3:47:c7:89:e2:e2:f5:65:48:40:68:
ca:33:66:b1:e2:3f:e2:8f:17:47:92:10:3a:f9:61:14:1a:5e:
67:2b:6a:eb:ef:0f:71:c1:6a:93:73:e2:14:e8:cf:8c:40:f4:
65:c8:90:cb:99:da:78:ca:35:90:cb:98:44:32:98:a1:b8:42:
06:ad:29:5f:71:af:c7:5d:28:50:49:af:38:4a:0a:30:e6:88:
0b:f9:22:aa:77:11:e1:aa:6d:aa:78:e2:70:11:08:e8:01:d7:
bb:6e:99:25:af:24:85:3f:da:91:7f:ee:eb:a3:40:39:60:89:
4c:47:16:ec:5e:d4:9a:b3:9d:db:76:18:5a:27:c4:b9:02:7b:
96:13:f9:18:96:fc:44:87:67:72:ff:e9:13:fd:a9:a8:a2:5c:
f4:be:20:45:5f:02:51:86:3f:b0:37:01:39:d5:d5:a5:c2:bc:
a2:9b:0a:06:ff:b3:b1:ef:88:2c:68:3b:71:e5:e9:6a:29:ea:
d1:1e:5b:6b:52:e0:66:2e:eb:e3:13:ec:5d:2a:0f:f2:45:92:
cb:0f:b8:19:30:44:ba:6a:c7:eb:49:70:2a:04:23:23:a5:b7:
07:bf:b5:79:22:f3:b5:f9:a8:13:02:a8:2c:bd:1c:75:27:f1:
4d:af:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:24 2025 by rpki-client