Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier: XgjLUQCoRkd+48eNnws4wipze3+y+QbjQwYCF1GR+H0=
Subject key identifier: D4:5F:3B:3A:3A:F6:0C:15:A2:6D:21:0F:DB:E5:A8:15:52:53:85:6C
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 019A725C52210948914A0109611693B40DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number: 12B5
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: 3Wof7uYAwWVJC7FJcs8LqWOe2FdWpddhfOVVmJsjiCE=)
2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:52:21:09:48:91:4a:01:09:61:16:93:b4:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=d45f3b3a3af60c15a26d210fdbe5a8155253856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:ee:a3:18:44:20:38:f1:5f:1c:cb:38:81:
97:5b:4b:90:21:36:8a:15:c0:ca:b4:30:37:cd:bb:
2c:06:fb:61:f5:3e:71:ed:6e:ec:2a:7a:70:80:bc:
79:38:5b:fd:12:fa:c0:f3:5f:f2:90:0d:59:dd:3a:
16:7c:62:52:9d:26:0f:10:19:2e:7b:2f:0b:7a:6c:
f3:2e:c3:0f:67:27:36:91:6b:7c:72:9f:5c:90:7c:
08:26:e9:bb:b8:2b:fd:26:f3:50:67:19:c5:bc:b4:
21:ff:e7:62:1f:49:20:a1:91:58:28:51:8e:65:36:
f5:14:28:02:30:1a:d4:24:dc:27:f6:62:f0:23:af:
15:1d:80:27:e3:13:06:dd:bf:1d:19:25:5f:e2:3d:
c6:6f:dc:18:75:b0:3e:46:7f:ce:77:53:8f:4f:88:
4a:6b:e3:15:d0:7d:57:6b:55:32:91:9b:9b:38:4e:
51:84:5c:a6:56:bf:61:2e:62:51:40:9f:0c:21:7d:
eb:08:2f:e2:39:69:db:a9:98:ba:fa:95:f4:da:7a:
61:73:62:14:f1:8d:25:47:e1:c0:f2:60:a8:63:da:
bd:f7:be:0f:78:60:9f:e6:6a:f7:12:2d:14:1c:fe:
1a:d6:ff:8c:c7:34:85:d8:f7:c0:95:4b:01:50:ec:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:3B:3A:3A:F6:0C:15:A2:6D:21:0F:DB:E5:A8:15:52:53:85:6C
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:f9:96:1c:64:48:0f:02:a6:e5:ae:f6:df:0a:aa:58:20:
4a:73:7f:d1:71:ce:b3:07:1f:ed:3b:fc:5a:2c:94:ff:07:17:
d9:54:76:43:fe:bb:61:63:2b:a9:74:30:f2:51:c1:f5:2d:dd:
b8:b7:c7:ce:92:3c:ac:9b:76:37:d6:6e:a8:fb:fd:80:f7:2f:
ea:3c:26:4e:47:7f:87:5d:39:cd:b7:f7:71:1c:27:15:1a:f7:
43:f8:a9:79:67:c6:eb:91:e5:7b:52:0f:bb:f8:7b:49:c6:8e:
15:4b:af:fa:38:4c:62:aa:0e:56:8e:2b:0d:ba:7a:3c:6a:e7:
1d:03:12:c8:96:64:12:cf:7b:33:b4:6f:79:cc:a7:a8:cd:ae:
32:32:3c:f7:66:c6:97:b0:18:7e:c1:f1:37:24:f3:65:03:14:
db:20:ad:07:20:c1:39:26:e5:6c:f4:23:29:41:4b:c7:43:0c:
e1:81:cc:7b:8f:7d:cb:a0:ca:05:b5:f7:b8:05:23:b2:5b:e2:
19:04:dd:d2:4b:10:4b:23:a8:51:9d:a8:96:65:87:36:c5:9d:
95:a5:67:bd:fa:9e:93:e2:5c:63:e6:69:09:8c:42:17:6a:29:
3f:91:ca:16:a4:dd:d4:60:a0:39:a3:ac:99:9c:3d:c3:fa:e3:
c4:70:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:10 2025 by rpki-client