Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: 4kEnEST496W9zzRcwnR/8szX/C2jwCRSlJ9bN5Fatc0=
Subject key identifier: 0E:E1:13:45:A9:64:8B:71:43:52:04:B7:D8:06:BF:79:78:6D:E3:D0
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 019A51BE60749CF38648EEA776FDE51415F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0C42
Signing time: Wed 05 Nov 2025 02:00:22 +0000
Manifest this update: Wed 05 Nov 2025 02:00:22 +0000
Manifest next update: Thu 06 Nov 2025 02:00:22 +0000
Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: 5dPYOwYm3ssB8QGHCU+1e3VocuG43lw34TBx1x0Vcis=)
2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:60:74:9c:f3:86:48:ee:a7:76:fd:e5:14:15:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Nov 5 02:00:22 2025 GMT
Not After : Nov 6 02:00:22 2025 GMT
Subject: CN=0ee11345a9648b71435204b7d806bf79786de3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:4b:bd:74:81:60:d3:13:bc:00:c1:d2:e9:
f5:59:d5:70:14:b9:dc:e0:69:90:9f:b1:b9:d7:2f:
b2:ca:9a:64:41:b0:f9:ad:40:e9:83:a9:80:b8:18:
9d:c9:94:f3:f2:b1:e6:39:a3:8a:a4:73:09:99:30:
a9:54:4e:3a:72:d7:1c:fc:9e:f1:cf:df:25:24:b6:
a0:cf:21:ea:d3:8a:96:c2:ed:22:a9:07:1f:0b:74:
0a:c8:2c:a1:de:ab:9f:69:a3:d1:f2:77:28:75:8f:
54:98:6c:f2:cd:57:46:41:74:1f:fd:b9:20:c8:9a:
b6:4f:c4:f0:14:fc:b7:61:8c:3c:58:45:13:2f:7b:
56:b6:60:6d:19:e1:8d:00:c7:78:6c:b0:b5:e3:eb:
d6:7a:6f:42:a2:1f:dc:4d:3a:22:99:bd:4f:f7:7b:
62:e0:6c:a3:ff:c7:b9:ff:5b:3e:de:7a:c2:e1:5f:
90:0a:d4:8c:11:57:e0:34:f8:14:12:13:ea:b7:f5:
76:0a:37:e2:3b:69:e6:2c:f2:81:bc:25:3f:5d:c8:
3e:d9:f2:ba:1c:b4:d4:7e:28:e3:d7:15:4a:01:ea:
f9:b7:0f:63:78:2c:df:df:ba:48:df:cf:7a:f9:c5:
17:82:b0:1f:12:57:94:e0:ae:d6:86:f6:ae:56:18:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E1:13:45:A9:64:8B:71:43:52:04:B7:D8:06:BF:79:78:6D:E3:D0
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e8:c2:fa:e6:18:87:ed:e6:66:be:11:96:4d:7f:e8:19:38:
7b:fb:a1:8a:e8:75:4b:f1:b7:f6:1f:0e:63:a8:a3:7e:0b:e9:
96:01:d1:3f:26:bf:96:54:4d:9f:2b:97:99:2a:a1:9b:f4:27:
5b:2e:3a:1a:7f:af:f5:fb:d1:5c:2c:4d:82:75:f9:ae:0a:38:
bc:7b:c4:dd:6b:74:4d:56:bf:6d:de:f2:b7:bd:90:76:8f:37:
a9:6b:9e:74:0f:48:6a:cf:0a:9c:ae:34:48:d8:41:f0:c8:f9:
1f:6f:2f:ee:70:0d:9a:d0:60:37:14:68:f1:5c:e6:39:86:72:
11:83:b2:2e:37:d6:94:ad:56:cc:26:07:70:2d:4b:c6:76:58:
76:f8:22:f1:64:a3:52:73:ad:ef:68:b1:ba:01:97:37:8d:29:
bc:2e:c3:aa:23:73:85:5b:fb:a4:ec:19:83:ed:b1:6b:9d:6b:
3f:35:4c:36:62:94:b3:7f:bf:78:19:b4:e0:f2:41:28:2e:93:
00:c0:49:38:35:64:4d:e9:06:85:5b:81:df:c7:bf:2b:8f:bb:
b0:f7:86:53:5d:ed:6b:9e:a7:02:31:07:df:1a:36:21:80:c0:
e7:5c:26:86:58:09:70:3b:93:15:6e:3d:5c:b7:08:a5:2b:83:
f8:0e:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:37 2025 by rpki-client