Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: hJjyizmQBrpzyORN11SaZou192uhblZSELe8Mgi5ZYE=
Subject key identifier: 01:9C:6B:68:8F:FA:83:07:BB:88:35:80:FA:0A:EC:3B:AC:75:A8:11
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019A71136842CA943A8ECC1ABDE357D9A86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (hash: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=)
2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: +IoO9HmRH7TNuIAHRs1rj93nuYkHxbyIlmmJ3MQPNuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:68:42:ca:94:3a:8e:cc:1a:bd:e3:57:d9:a8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=019c6b688ffa8307bb883580fa0aec3bac75a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:6f:f1:a7:8a:1e:1c:27:6a:0c:39:19:1b:
80:de:a9:5b:e5:5e:bf:2d:b3:a2:f3:eb:b9:70:ae:
75:af:2c:b8:e1:35:f6:7b:4f:28:b7:d6:ba:06:c3:
37:e3:80:da:2f:04:87:7b:f1:04:8c:cc:e1:10:4f:
01:81:b4:49:b6:6a:d9:7a:c9:ae:ce:e0:48:32:32:
bd:a2:59:2c:51:5e:d3:9f:e5:24:2e:db:48:32:08:
c1:f3:92:2d:17:57:f5:7a:7f:1e:84:9c:c0:7e:25:
44:7e:ee:cb:b6:61:2e:16:ec:69:76:5b:c3:f4:ad:
4b:dc:cd:7d:0b:e2:72:6b:b2:cc:d4:38:8d:a2:65:
3c:cd:93:5e:ae:cd:3c:96:3b:24:aa:18:89:59:dc:
a3:23:11:3e:e1:68:01:b5:3d:ee:4a:d3:1a:f8:97:
3e:f1:ff:16:9c:09:1e:10:f8:20:c4:27:f4:ba:8c:
95:73:0e:a8:2e:c4:81:fc:f7:63:a8:8a:96:85:8d:
52:59:50:79:4f:fb:ae:a2:e9:dc:da:03:05:8a:09:
70:c5:d8:52:31:66:c1:6d:67:1a:f2:7b:c2:80:41:
73:23:b5:f7:ed:7b:cb:65:dc:d0:46:76:0b:66:c1:
78:b9:0f:c8:a0:58:84:88:43:37:8a:32:73:a5:6d:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:6B:68:8F:FA:83:07:BB:88:35:80:FA:0A:EC:3B:AC:75:A8:11
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:87:a2:40:b1:b0:99:9a:a1:e0:10:b9:ef:1b:70:99:a0:
99:1f:ee:2c:c9:f4:fe:8f:05:d3:e1:a8:d4:20:f5:5d:2b:39:
05:c2:88:d8:6f:5f:b2:f2:19:c9:c2:61:2b:de:71:bb:04:c1:
8c:93:49:15:50:40:c3:1f:38:c7:e3:c5:d8:77:0d:67:49:46:
45:c5:06:fd:af:94:4b:0d:72:99:14:1d:7b:a2:08:b6:e8:bc:
1f:e1:5a:8b:81:67:bd:ee:b9:10:a5:58:8d:73:47:a7:43:3b:
68:ad:9e:c2:5c:39:b4:e4:66:84:95:f2:4f:8c:7a:86:e7:96:
a6:3f:75:12:86:a5:03:ee:62:1c:e8:5f:16:2a:31:97:04:d7:
52:ef:c9:d8:43:da:6a:01:e4:04:e7:2b:86:eb:2b:1b:41:d6:
b3:9c:9a:6c:f3:9f:cd:b3:d2:ef:ee:05:7d:d3:12:48:1b:6c:
d1:1b:a0:f8:15:da:b4:8f:dc:5b:47:a9:f6:cf:fd:a4:9e:96:
34:39:59:5b:de:ba:ef:85:02:d6:4d:fb:46:2c:84:e9:86:fc:
85:a6:6c:2c:5d:f7:3e:8c:f6:a4:6a:18:73:17:b9:72:4c:de:
ed:be:c8:15:2e:f2:67:98:59:af:c9:62:2b:1c:a1:4f:75:d8:
3a:0f:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client