Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: 0+W1ax3GgdelprbtP2NOquZboopH1PqWLiX7aDl/BP0=
Subject key identifier: C8:BF:BF:AD:2C:7F:25:07:C7:2F:5A:48:70:B9:62:AD:CC:D1:64:65
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 019A500735A46D926866A8E96374C4459DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0DF6
Signing time: Tue 04 Nov 2025 18:00:40 +0000
Manifest this update: Tue 04 Nov 2025 18:00:40 +0000
Manifest next update: Wed 05 Nov 2025 18:00:40 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: sXOrUbOxbxIjYRpf+WaP4VWFQ349r0GKVyzOeU1y1xM=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:35:a4:6d:92:68:66:a8:e9:63:74:c4:45:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Nov 4 18:00:40 2025 GMT
Not After : Nov 5 18:00:40 2025 GMT
Subject: CN=c8bfbfad2c7f2507c72f5a4870b962adccd16465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:b4:4d:33:d9:57:c2:6b:c9:33:f2:c4:20:
ca:83:13:f4:0b:06:bd:7a:f6:62:44:7e:bd:46:70:
be:0e:55:f2:50:ff:c5:f0:c2:54:94:3d:57:ee:f1:
36:dd:91:3e:fe:9b:c4:83:6d:2a:6e:19:e0:c2:55:
14:b1:0c:8d:2b:d6:43:00:d8:a9:fb:7e:b1:fd:e6:
5c:7b:76:dc:4e:81:c7:34:0d:66:81:d1:65:e6:1a:
ab:e6:b7:9b:a5:5c:e8:f6:0e:85:7e:c0:ce:d5:f9:
e8:fd:c4:72:e5:13:58:3c:37:fa:3e:bd:78:eb:c1:
45:6d:5b:c9:27:86:da:f6:a2:ed:c4:81:e6:11:28:
c0:5f:1e:4e:51:77:15:61:a9:31:ac:70:26:47:e8:
b4:82:96:eb:ad:15:ec:f7:e0:50:8d:3e:48:1e:e3:
83:a7:69:6a:10:b2:4e:e5:f8:99:6f:b2:f2:53:c5:
3e:d2:cc:9c:d9:c1:39:76:fe:89:5a:ad:17:18:bd:
a6:db:0b:4b:b3:e0:ee:73:3c:e4:fd:63:bd:b9:44:
60:0c:1d:44:31:ac:da:ed:3c:d6:25:f7:2f:dc:6e:
68:6b:84:21:7f:c5:15:7a:44:7b:34:55:5e:39:b7:
7c:e3:44:bc:b0:77:ba:15:0e:e3:9d:be:73:44:40:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:BF:AD:2C:7F:25:07:C7:2F:5A:48:70:B9:62:AD:CC:D1:64:65
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2a:df:e4:0b:6e:9b:6a:04:62:15:d1:60:fb:d0:06:f9:53:
8f:60:d9:21:b6:e9:36:a7:66:37:73:f2:f2:bd:56:0f:dd:f3:
07:eb:17:f8:25:56:b4:07:d7:6d:da:8f:6b:38:56:67:b5:4b:
1c:fe:90:a8:cf:65:77:cd:77:13:93:80:07:a6:3f:12:3c:91:
a3:f4:63:1f:d7:e9:68:39:64:ce:ce:e0:a2:fa:44:eb:e3:dd:
f6:3e:a7:f6:bc:55:5f:15:45:cc:a4:ca:59:19:59:09:ec:e7:
d1:d1:7b:52:da:56:65:f9:df:30:45:08:92:0e:56:02:ad:0f:
3d:a3:09:1f:30:ea:2e:39:3e:3b:c6:44:91:a3:61:b5:a5:81:
af:e8:e1:13:ba:2b:1a:4a:30:b7:9e:5b:8b:c8:0b:28:12:d8:
a8:9a:4a:49:b6:84:10:0b:52:37:f1:3f:42:c7:58:e6:3f:ff:
16:13:81:f2:81:d8:b9:7f:47:ee:cd:ba:cc:d0:f6:4b:6d:fb:
34:3b:27:f2:a3:89:db:af:00:19:c0:d1:5d:95:07:3b:31:b6:
ad:3b:57:17:3c:5a:d1:c2:18:1f:3b:a5:d2:01:01:c9:48:ff:
59:ec:be:b9:40:bd:9d:10:b5:6f:26:06:d9:96:e2:68:61:7d:
d3:5d:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:58 2025 by rpki-client