Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File: mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier: j1seSgF4Ydf0IJGmGxRW6iNqwqZLj+0kOrTsSTRVcWo=
Subject key identifier: BB:4A:7B:55:E3:12:40:19:E2:C5:B9:9C:B1:EB:FE:38:95:B8:AF:76
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer: /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial: 019A4F98C6417B22EA942ADC346AFB865B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=)
2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: zeB2J4zKmjTtnWmP9ZBic5buBI9dVYV4bxG5us8fpPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c6:41:7b:22:ea:94:2a:dc:34:6a:fb:86:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=bb4a7b55e3124019e2c5b99cb1ebfe3895b8af76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:5b:83:df:2b:fe:e2:14:aa:61:05:4d:92:
af:f2:9b:b7:52:e8:4f:c8:59:f1:7d:4e:1e:8a:e9:
65:c4:e1:cb:61:d2:76:5c:70:72:15:47:df:ef:dd:
13:6f:58:ce:23:26:06:f1:0f:e2:47:d6:17:c6:1f:
c2:f0:39:13:d8:d2:0c:81:0b:6c:ad:0d:ef:43:96:
a9:51:b7:ce:ac:de:57:8b:6c:f5:87:82:43:ac:61:
b0:00:90:1f:3e:e9:e4:02:ab:30:00:78:e8:7c:cc:
25:21:e8:a2:ac:a9:ea:0c:c2:6d:02:74:35:00:f2:
87:2d:93:f8:98:18:a6:ae:13:e4:dd:99:2f:73:55:
89:7d:fd:57:f9:c0:67:b0:a5:5f:ff:7e:3f:21:37:
c9:ff:51:f5:de:cf:37:4d:01:43:46:8a:3e:8d:1a:
dd:c9:26:bf:73:cc:3d:7d:ac:12:f6:ea:5f:c0:8d:
8f:39:4b:ea:90:d1:55:cb:da:c8:ed:0c:f2:77:48:
cb:25:c3:a6:5c:7a:55:92:3d:65:61:f6:37:96:ef:
a2:e3:fe:89:2d:6f:49:99:8d:89:b0:d4:f0:58:f4:
50:a0:f9:a3:55:4c:2b:bf:54:f0:52:97:19:c7:02:
d8:de:e6:2c:98:07:c6:40:3e:4b:9f:37:e6:7a:04:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:7B:55:E3:12:40:19:E2:C5:B9:9C:B1:EB:FE:38:95:B8:AF:76
X509v3 Authority Key Identifier:
keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:2d:0e:f1:24:29:7e:26:b6:81:83:af:d4:7d:91:8a:74:
eb:1b:e6:c9:76:1e:9b:5c:04:57:c8:7e:5a:dd:cc:0a:ff:4c:
26:c0:17:02:69:f9:dd:f1:57:a2:4d:0a:22:a8:cd:7c:ce:8d:
3d:df:c5:df:0c:9d:ce:49:01:4d:3a:ed:a0:58:b6:ad:a3:31:
e4:4c:c0:cb:8a:49:4a:38:a7:04:2b:13:d7:82:4c:9a:64:fc:
03:91:69:4a:68:35:68:f0:6e:a0:5e:a8:3e:b1:a0:54:6b:1c:
3b:80:56:6f:a0:21:ca:eb:95:7f:2e:1a:e1:1a:d4:91:71:d5:
fa:19:34:13:bf:dd:48:08:c7:fe:a2:ae:09:7e:12:6c:d7:e1:
65:0f:e8:12:dd:85:ed:85:db:bf:a0:50:67:96:b4:ba:0d:e6:
3d:a9:9a:bc:39:c8:8f:a0:20:fc:23:30:8c:fd:a4:59:32:34:
5a:16:5b:e7:2c:a1:6a:6e:ab:0e:c9:aa:8a:32:cc:92:33:64:
e3:d1:68:58:ef:34:fd:88:bb:d2:ca:2a:88:05:30:33:a8:98:
1f:de:c0:f5:6e:4f:38:8a:e5:e2:04:4a:8c:f8:f7:16:1d:57:
7d:50:68:d0:b1:26:89:4d:96:20:6b:6f:ee:b5:fc:77:09:fc:
da:db:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:37 2025 by rpki-client