Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier: Cfw2xwNJO/xPXPqRm6ErL11bSCFcAVmuRsdv2w6IlgM=
Subject key identifier: 78:07:02:D7:E5:06:7F:01:88:5C:02:B9:D2:81:CF:7B:0E:AF:33:25
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 019A4E86B387E30C616331A18644C225B185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number: 04E1
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: 3653b013QZ4F4no37SBxPb91GNXwhyHPbf/w8L03YOM=)
2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b3:87:e3:0c:61:63:31:a1:86:44:c2:25:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=780702d7e5067f01885c02b9d281cf7b0eaf3325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:91:a3:5c:b6:16:d0:73:a0:a8:81:3e:22:
25:d0:b8:cd:df:8c:85:3e:42:2b:4b:cc:5f:0b:24:
85:93:64:50:5a:fc:9c:3d:92:b4:68:39:b4:3f:6e:
74:9f:ae:e4:5c:9f:03:29:82:dd:21:5b:6e:9d:7c:
42:a3:28:f4:9f:84:53:27:22:ba:5b:93:93:57:18:
c9:29:30:86:16:7f:63:5b:e5:7d:82:1f:90:07:d0:
dd:62:9c:e1:88:c5:ab:71:59:96:9e:ba:23:5f:03:
c8:f1:60:73:23:9d:f6:b0:62:44:57:aa:48:ef:0f:
ac:06:98:e0:e5:62:0f:fd:c6:dd:34:2d:f1:d2:18:
8f:b1:49:62:b2:6f:cc:09:80:93:eb:0c:5d:8d:d3:
3f:51:be:db:f0:ed:4b:df:a7:c3:e9:8d:a3:c3:f4:
f8:59:ea:3c:3b:f6:c8:2d:2a:b4:74:fc:86:36:cd:
4f:2b:b2:60:30:66:73:87:5c:d4:96:32:f3:c1:30:
b2:cf:aa:be:d4:8d:99:42:a2:cb:8f:6f:09:df:20:
93:91:84:33:70:42:58:d4:db:39:1d:3b:a0:95:f1:
be:9f:69:12:b6:b4:31:03:05:a9:80:78:82:4d:15:
50:de:d9:18:cd:77:52:ae:7c:82:fa:67:f1:f7:7b:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:02:D7:E5:06:7F:01:88:5C:02:B9:D2:81:CF:7B:0E:AF:33:25
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:cd:da:86:3e:c7:6a:5c:f0:a6:b1:b6:b8:7a:a2:b4:45:
9d:78:f5:ca:c4:c6:34:43:28:4a:a7:05:e1:42:31:2c:c1:51:
11:0d:20:19:a7:a7:1d:ae:64:55:d9:69:84:ba:c6:df:50:0e:
3c:7d:37:e6:cb:53:4e:49:77:00:6b:8d:ad:4c:1f:ef:35:d9:
36:d4:51:7d:41:15:26:74:83:a2:2f:02:3a:a1:e4:74:06:02:
e7:5a:60:34:a1:7f:66:26:67:be:f3:a6:f4:db:7c:6e:6f:76:
47:5d:9d:44:a7:fd:ec:3c:5b:fd:bb:89:14:72:4f:70:74:84:
07:81:55:ec:74:ab:59:af:9f:6a:49:f0:be:2b:fb:d2:da:24:
fb:26:4b:57:70:b5:89:e4:bf:92:72:56:ac:22:b7:83:08:c4:
8e:7f:d9:57:7b:c1:f2:5b:1a:45:07:fc:1a:9a:ae:f0:0f:a6:
ed:8f:85:ba:31:29:79:13:28:e4:40:f7:59:74:24:ae:26:3f:
42:b5:c4:4d:41:50:47:ec:82:ad:a4:e9:22:25:85:40:05:ec:
06:97:fd:f6:62:1b:e1:74:10:5e:d0:78:fc:ca:26:0b:e5:ad:
1f:85:9a:24:8f:2f:37:0d:d7:84:f9:8c:a2:e9:b8:e9:b3:46:
13:ec:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:24 2025 by rpki-client