Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: UYiTf1VqAcrW5cIFJJpC+LCS9vGjOtK2gW2EwkIW+cA=
Subject key identifier: 39:EF:8D:1B:11:9F:C5:D6:75:02:EE:F2:DD:B1:97:81:73:F5:C7:9B
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 019A0290C32CF1DD7942B04429F327515822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 12F5
Signing time: Mon 20 Oct 2025 17:00:32 +0000
Manifest this update: Mon 20 Oct 2025 17:00:32 +0000
Manifest next update: Tue 21 Oct 2025 17:00:32 +0000
Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: hRhx/DBNayqciy5+0S2xKwJmHmeFNbt/id+rld8B/zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:c3:2c:f1:dd:79:42:b0:44:29:f3:27:51:58:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Oct 20 17:00:32 2025 GMT
Not After : Oct 21 17:00:32 2025 GMT
Subject: CN=39ef8d1b119fc5d67502eef2ddb1978173f5c79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:16:3a:d2:04:85:26:8d:92:74:6d:fa:ec:
0e:ed:af:88:d0:31:1c:ff:7b:b4:cb:5a:8e:ee:ca:
be:75:6c:30:f1:89:8a:97:24:45:a6:04:9d:dc:9e:
10:08:e3:a4:8d:ad:06:ad:df:98:d8:ab:22:43:55:
19:ed:9d:87:31:c7:ae:6f:ed:96:f7:7c:b4:ba:01:
36:d8:ad:28:0e:f4:aa:5a:c0:cc:55:f1:c3:6e:d2:
5d:2f:e8:31:a4:02:fa:42:87:d9:c4:d6:5e:4f:99:
64:7b:b4:58:b8:6d:2c:50:ce:67:3f:1d:9f:75:3e:
ba:ad:e1:a8:c7:07:90:63:dd:f9:9a:5b:71:52:d9:
a0:d7:c2:bf:12:a2:9b:b1:87:69:33:74:41:98:06:
9d:c2:66:0a:13:3a:7c:25:ab:49:89:a9:ae:6d:f9:
ea:2b:92:76:be:2e:a3:14:b5:b0:d3:dd:d0:a3:d8:
32:f8:2f:e0:be:30:9c:7e:a4:af:ba:7a:f0:c5:2a:
b0:21:18:9d:28:e1:18:08:89:9e:a7:f9:38:1d:c8:
e5:ed:00:36:47:73:fd:02:01:fe:7c:b9:3b:53:a7:
81:e2:ec:9e:e7:f3:b0:6a:9a:83:ab:86:fc:dd:42:
0f:33:40:19:f7:d7:8a:8b:38:df:56:ab:77:50:54:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:8D:1B:11:9F:C5:D6:75:02:EE:F2:DD:B1:97:81:73:F5:C7:9B
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:ef:89:1b:9a:03:89:21:a8:f1:74:9f:01:19:52:2b:08:
c9:ae:94:cb:e2:e7:78:f1:f3:2c:38:ce:38:97:7f:e2:29:b5:
77:fa:0f:a7:de:10:d2:19:27:73:45:47:be:cd:69:f0:0a:38:
e8:17:10:8a:df:6f:08:68:e9:d2:0e:61:6e:e8:3a:40:e1:d4:
7d:e6:f7:54:29:19:16:31:de:1c:ca:2a:07:7a:02:24:21:38:
9b:1e:6c:6d:0c:39:c9:c3:25:72:a2:bc:ed:23:d1:12:f4:90:
42:2c:9f:82:e2:32:cc:ed:ee:35:12:69:9b:29:8e:9d:69:04:
42:7b:88:b3:a8:1f:5a:69:04:d2:a7:16:c7:fe:f0:d7:c9:4c:
d4:e2:dd:73:44:44:4f:06:95:57:28:06:be:ce:5a:1d:32:e0:
a1:08:df:f1:09:1f:6a:85:b8:d0:3c:b0:cb:f8:0b:ff:5d:39:
8a:1f:ac:d2:c7:e9:cf:5d:16:fe:26:c3:15:79:c0:a8:ab:b9:
9b:9d:dc:af:15:03:8e:53:5e:1f:da:88:f5:96:55:f6:62:4e:
2f:62:37:ba:62:48:35:af:67:c4:6a:d1:2b:31:80:f3:4a:28:
22:0b:3d:79:7a:a1:21:38:80:cf:89:2b:89:e4:d7:59:2a:bd:
19:2f:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:52:48 2025 by rpki-client