Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: DIslM/gonpf2MAAeBJeWPetzqPr/wIHa9HaL07IDN84=
Subject key identifier: C1:23:6A:02:3B:7E:39:D1:61:14:BA:59:00:12:DC:81:37:0C:EA:F1
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 019A515137D851220D562181C9F5798B59C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 06EF
Signing time: Wed 05 Nov 2025 00:01:08 +0000
Manifest this update: Wed 05 Nov 2025 00:01:08 +0000
Manifest next update: Thu 06 Nov 2025 00:01:08 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: Vz/h6hp9H2Ae0OFu86CKh0X5ip4mx13z5Bzatj1CU1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:37:d8:51:22:0d:56:21:81:c9:f5:79:8b:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Nov 5 00:01:08 2025 GMT
Not After : Nov 6 00:01:08 2025 GMT
Subject: CN=c1236a023b7e39d16114ba590012dc81370ceaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:b6:41:91:1c:f6:78:f9:8a:98:85:23:79:
ff:71:51:47:76:e5:b0:04:ae:47:2c:a1:ec:72:4b:
37:70:b2:83:0f:24:f6:c7:fb:62:90:4b:a4:76:41:
29:31:f4:82:0b:eb:f7:e7:be:45:66:e5:00:a0:51:
46:7b:73:69:f1:d0:bf:9e:ed:88:0f:31:1c:cc:11:
d1:0d:50:47:b6:a9:4a:a1:4e:b0:2a:3b:ad:7e:ba:
77:5b:98:2d:79:69:25:e1:89:c9:76:c6:75:be:f1:
9f:ec:f9:07:48:45:cc:e5:5c:d8:4b:36:d3:fb:48:
48:29:79:aa:f1:e6:e1:91:6e:59:82:a7:26:ef:03:
a4:b5:7e:4e:b7:8a:cb:b9:27:15:1c:19:d0:15:b2:
b0:8e:9e:cd:71:c9:11:2d:fd:7e:df:f4:62:83:45:
1a:6b:f8:2c:89:0c:66:cb:4b:d2:1d:c4:4a:03:27:
3c:ed:4e:b5:9d:57:65:1e:de:f2:c2:24:26:01:8b:
c5:b4:7a:02:fa:4f:32:75:c4:86:d4:27:d1:0d:d8:
92:53:b4:0b:9c:e8:1a:f8:6a:c6:12:7a:0b:07:86:
aa:8f:89:56:eb:00:e8:86:a0:72:9a:36:11:1a:4a:
ad:31:18:75:2f:f4:6c:1a:c4:8f:94:7c:48:f8:51:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:6A:02:3B:7E:39:D1:61:14:BA:59:00:12:DC:81:37:0C:EA:F1
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:88:8e:4f:27:34:44:a9:32:f6:9a:83:54:fc:b8:4c:c5:
2e:be:eb:f0:f8:21:6f:58:91:11:58:dc:d8:fc:d8:67:24:32:
c9:58:2b:24:20:cb:78:7f:60:83:a8:48:da:2b:b4:ee:44:b1:
2e:d9:99:c5:94:50:4d:07:9b:35:8b:31:0a:0b:c1:38:c1:13:
60:d4:d6:33:5b:93:8a:69:53:eb:20:62:bc:ee:a1:f4:12:c8:
d8:84:fe:c5:2d:79:18:9d:66:ad:69:bf:84:d1:dc:61:08:6c:
32:55:1c:56:3f:88:ef:db:0f:6d:2f:07:fe:4f:16:0f:9c:10:
2d:22:e8:eb:56:21:e1:d6:17:cc:f2:15:89:76:a8:ca:c8:b8:
7f:a7:54:c5:dd:8c:1a:6d:3d:c1:02:43:8a:50:2c:db:be:aa:
9f:70:38:96:38:03:3d:bf:b5:54:c1:ed:41:1f:a5:e3:92:7d:
52:17:70:b6:a8:4c:4b:30:27:e8:6c:d4:b2:92:67:1f:e1:5b:
5c:75:14:b5:a2:a2:46:83:99:6e:11:b7:06:47:a5:09:97:f4:
73:a7:36:ce:ec:5d:f2:3d:be:76:29:f8:84:97:41:60:a9:7c:
c3:97:ac:82:c7:98:9a:48:b7:53:2d:f4:57:5d:66:8e:47:ff:
8e:d3:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:04:39 2025 by rpki-client