Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File: eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier: wcAtBMK9zjlJGZ1N9Rm1YAC/0clX+li7j3vG+REhSI8=
Subject key identifier: 9A:49:B6:FC:EA:C7:6B:C5:CE:12:E5:4D:45:1D:18:8D:96:3A:BA:B2
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial: 019A73A7053FCDF9BC3B41707F2C242748E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number: 15A2
Signing time: Tue 11 Nov 2025 16:01:56 +0000
Manifest this update: Tue 11 Nov 2025 16:01:56 +0000
Manifest next update: Wed 12 Nov 2025 16:01:56 +0000
Files and hashes: 1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: NfnQMm+LDlo2JsSUzKcP280D8lFOSVPTOfqvy33a1dw=)
2: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (hash: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:05:3f:cd:f9:bc:3b:41:70:7f:2c:24:27:48:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
Validity
Not Before: Nov 11 16:01:56 2025 GMT
Not After : Nov 12 16:01:56 2025 GMT
Subject: CN=9a49b6fceac76bc5ce12e54d451d188d963abab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:64:77:67:85:b3:cc:f1:44:c2:c7:97:57:
cc:be:f1:ba:33:3c:5c:11:15:35:56:21:43:9d:58:
6b:03:e0:ba:ac:1e:bf:ab:b6:d4:63:01:4c:c7:3f:
d8:5a:ba:ed:02:d2:02:b9:d9:05:4f:02:1a:af:82:
64:28:59:be:0c:05:07:0f:0e:9d:1a:72:0f:8b:62:
8b:e6:6d:05:aa:90:2e:25:58:ef:2c:14:a8:a1:15:
5b:19:64:08:ee:e3:ae:60:f4:fa:47:a0:b3:6e:da:
ef:96:45:12:72:ce:bd:a9:9b:4a:77:b4:0b:42:c4:
51:e7:09:94:7e:6a:fd:c8:94:57:0a:5f:31:46:97:
c1:40:39:f3:df:e4:8d:47:ce:52:a7:d6:7b:ca:d5:
a2:1f:ab:86:3e:73:a6:1e:1d:e3:1e:cd:ae:57:14:
d1:a9:0f:db:65:60:25:79:5e:d8:44:e8:c4:05:a2:
b1:f0:9c:1e:f2:71:8e:9f:93:a9:00:ef:27:d9:2a:
0f:00:9e:86:2a:a6:97:80:61:23:61:90:95:4a:75:
e9:44:4a:48:64:7e:db:ed:0f:35:8f:08:75:54:d8:
21:86:8d:7d:cc:14:c8:dd:57:4c:c5:f5:31:10:75:
6b:c1:09:72:11:2a:62:0f:5d:1b:c4:e7:0c:f7:d2:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:B6:FC:EA:C7:6B:C5:CE:12:E5:4D:45:1D:18:8D:96:3A:BA:B2
X509v3 Authority Key Identifier:
keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:67:f6:6c:cd:53:ed:30:1b:25:d2:9d:92:a9:f7:4e:6d:c3:
7a:52:00:90:8b:b9:cc:02:93:9f:b6:f4:cc:f8:ba:e7:95:1d:
64:71:1b:bf:8e:37:6a:55:43:98:b3:dc:59:45:20:ba:cb:d1:
8e:cc:05:0f:f2:70:e6:07:78:80:bc:2c:49:96:5a:a4:4d:27:
b9:9f:29:ef:be:17:6c:f5:9c:03:b8:bc:fe:22:37:30:43:47:
6a:34:64:d8:dd:56:76:08:c2:7d:4e:1f:14:6f:03:c3:ff:f8:
e9:d6:15:2e:48:73:e4:ce:65:46:f6:18:8d:fc:c1:94:cf:62:
05:c2:7d:3f:a9:bb:c4:5c:93:63:0b:51:93:a2:47:b8:01:db:
3d:de:cd:e5:b4:08:86:94:1f:ca:cb:5f:5b:d1:85:01:c4:28:
dc:c0:31:04:6d:bb:f0:ea:5b:fd:68:cf:1e:58:5f:65:9d:16:
bd:97:0a:66:23:8f:0b:8c:5f:ee:4a:0e:06:64:43:f2:51:52:
a1:9f:5b:e1:74:e3:a5:b3:b1:4a:db:50:98:d4:9b:bc:39:46:
9c:d5:2d:73:d9:f4:68:75:58:9e:ed:c3:a0:58:77:72:d4:bf:
8b:be:18:61:38:db:21:9c:29:06:35:11:66:ac:47:9b:47:02:
ab:08:6c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:03 2025 by rpki-client