Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
File: edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json)
Hash identifier: UYZiZ91/LD5JrkRHqUp0elQVaBt3R6Kg4CivzdJibso=
Subject key identifier: B8:BA:B4:81:BD:EC:EE:50:B5:C6:3D:F2:7F:D8:56:DD:78:40:98:F3
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial: 019A4D3D084BA46186D539F0D92968907C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 05:00:36 +0000
Manifest this update: Tue 04 Nov 2025 05:00:36 +0000
Manifest next update: Wed 05 Nov 2025 05:00:36 +0000
Files and hashes: 1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: 6OK/kP2DT/C3GqrwWPXVF0uNCiaBve5V6ZET5fLt1lI=)
2: hqnI55-BtuuM4vFpZ56v79LAU1E.roa (hash: de3zBJnkxcrGTCeqUEM+8xu6xpr3xr2UbYA58RD5CTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:08:4b:a4:61:86:d5:39:f0:d9:29:68:90:7c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
Validity
Not Before: Nov 4 05:00:36 2025 GMT
Not After : Nov 5 05:00:36 2025 GMT
Subject: CN=b8bab481bdecee50b5c63df27fd856dd784098f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:9e:7b:80:29:14:23:b6:1b:07:eb:63:d2:
b3:58:cc:c0:43:92:e3:8f:60:ee:d0:fc:c4:ea:26:
35:0e:29:8e:79:21:55:06:f4:cf:be:7c:59:6e:32:
68:ee:da:94:58:66:8e:e4:1c:7d:85:81:ef:36:de:
a1:6f:04:e8:06:2b:b1:75:2d:1d:d2:13:ee:b7:bc:
b2:f4:b4:52:45:57:a7:97:3a:94:ff:43:78:cb:3a:
d9:aa:e5:e5:0f:f1:8b:bd:42:bd:d2:78:45:69:3e:
c7:a5:d7:bd:5a:c0:31:cf:21:a8:f2:01:a7:6b:bc:
3e:14:bc:8b:c8:80:d9:50:30:4c:c5:9c:38:6c:ab:
31:c7:28:cd:6d:05:24:92:66:85:a4:47:72:23:d3:
b0:9d:8e:89:d4:15:42:b9:3e:2c:81:5b:b4:26:3d:
ef:a8:9d:2d:6e:b4:9d:17:e9:64:47:bb:52:20:76:
a5:33:29:04:21:32:d2:6c:3e:2f:c7:8a:f3:60:cd:
c7:2a:0d:a6:f8:db:95:39:a9:06:40:1f:59:e1:84:
9f:ec:3a:5f:ff:5d:97:eb:f4:63:76:04:d4:98:6c:
09:56:57:91:21:57:eb:2b:1a:8c:4e:4b:4b:a7:97:
07:61:04:1e:c7:27:47:6f:10:76:c5:87:47:19:71:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:B4:81:BD:EC:EE:50:B5:C6:3D:F2:7F:D8:56:DD:78:40:98:F3
X509v3 Authority Key Identifier:
keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:84:18:31:37:f5:83:18:09:b7:b2:e9:6b:f9:db:d2:f0:
73:cb:a6:4c:6f:8d:d7:61:b8:d0:e8:c1:38:cb:07:14:ef:55:
a8:50:3d:b4:11:3c:20:ec:e1:0f:66:0e:6e:60:af:8c:4a:a7:
16:63:35:12:bd:e7:8a:25:35:f5:26:08:2f:24:84:d2:9b:23:
15:50:e5:74:7e:f9:b6:06:1b:0f:37:f1:48:fc:d6:e2:ed:ac:
ae:0c:ad:c1:a0:57:74:3d:08:da:34:16:06:55:ec:b7:e2:dc:
1b:58:08:93:5a:e2:22:5c:f8:8c:ef:df:3f:78:a7:e7:2b:fe:
62:27:78:fb:a1:89:ef:58:cc:1b:d3:e1:ec:42:e2:05:82:8a:
da:d5:de:9a:15:85:c6:fd:a4:00:40:b7:38:ca:14:a8:f5:f6:
56:9d:2f:73:fc:e7:84:bb:d9:5c:f2:9e:97:13:7a:5d:9c:63:
16:24:c3:7c:26:cd:f2:c7:4d:32:9f:8f:ec:44:d8:e1:53:5b:
df:31:f2:52:15:24:57:88:57:ca:cf:95:28:8a:5f:3d:8f:48:
3f:7b:4a:cc:43:27:e2:05:95:98:ac:2f:87:b5:17:50:7a:2b:
06:04:9f:9e:53:9a:68:44:f8:18:df:ad:11:cc:8f:c9:21:36:
d4:65:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:22 2025 by rpki-client