Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json)
Hash identifier: YJJcinHUOWgVVg0hAL53VWgUJOf7nYk4ruKX5CzZRD8=
Subject key identifier: D0:6E:FE:E5:BA:D5:E3:AB:DA:F8:BA:DB:14:C8:F4:E8:ED:3B:66:DE
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial: 019A72266F4C32CF5C43A7F707CB823E1E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
Manifest number: 11E1
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=)
2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: ntw2P265V6s0kz6zvam41KPr/XNc0AFsbYvUI95rcyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6f:4c:32:cf:5c:43:a7:f7:07:cb:82:3e:1e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=d06efee5bad5e3abdaf8badb14c8f4e8ed3b66de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:d2:d1:73:76:a7:a8:3a:e2:5e:96:23:24:
1f:fe:c7:ff:e3:6c:06:b5:63:f8:ce:9f:93:6e:51:
65:8d:1c:04:08:5e:f1:59:32:b7:fd:1c:46:3c:99:
0f:92:80:e9:19:e9:3f:8a:29:d7:08:1f:8e:bf:73:
db:13:fd:8a:81:dc:fe:8f:81:ce:ae:47:66:39:44:
79:a2:49:c5:b0:ff:c2:9f:ba:6f:f8:8a:26:c8:32:
bc:dc:c2:67:da:05:91:92:78:b0:7f:76:7f:c1:77:
63:df:97:cc:97:a7:90:f1:a9:7b:41:83:4e:b9:39:
5b:7f:cb:33:15:f7:62:de:40:ad:99:dd:12:43:ff:
81:fe:b8:dd:78:32:bc:ec:93:af:20:70:56:f9:63:
2b:5d:6f:a8:f3:d6:a2:27:94:1c:79:06:d4:ec:6f:
2f:f8:e0:35:b5:18:9c:e7:e7:a2:07:bf:18:f3:f1:
e5:c1:23:45:ad:3b:c2:ef:59:e5:0b:a5:7b:4b:51:
c9:60:41:7d:bb:62:6a:a2:79:dc:20:5b:7a:40:bd:
d1:9c:1a:ab:f0:48:a3:1a:b3:e2:a4:c0:a3:d4:d9:
82:7c:53:d9:aa:23:83:0d:12:40:ad:05:39:01:22:
f3:b0:db:50:56:19:a3:d1:97:93:6a:66:76:03:30:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:FE:E5:BA:D5:E3:AB:DA:F8:BA:DB:14:C8:F4:E8:ED:3B:66:DE
X509v3 Authority Key Identifier:
keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5a:ce:c8:8f:a6:95:b0:dc:83:1f:7c:45:a5:77:d6:6d:9e:
8c:53:e0:6f:aa:6d:c9:9e:40:33:91:54:3f:04:f2:dc:8b:a2:
59:2c:0f:08:76:8b:90:af:2d:1c:e7:95:b8:e3:97:6c:c3:e7:
3d:ad:a8:66:ec:44:5c:53:8a:2b:a7:c1:69:9a:b6:81:ac:ef:
c8:71:34:28:7c:30:58:94:d6:4a:55:94:d6:bc:fc:04:68:a3:
60:fb:02:02:8f:ae:c1:10:ba:ca:6d:2c:ec:02:af:45:f0:e4:
e5:00:a3:a2:a3:9c:1f:34:03:a6:69:e2:a9:00:c8:76:22:ad:
89:ba:c3:4f:9c:89:ba:39:10:54:25:c8:22:6c:44:3f:f0:f4:
ab:42:3c:7f:cd:80:78:16:9d:94:73:cf:20:f5:e0:79:e1:e2:
e7:44:b2:d6:0c:6a:4a:7e:2e:c8:74:e7:d6:10:3a:26:8b:d8:
7e:b0:46:b4:e1:af:b6:48:70:e8:f5:e7:97:8e:7b:34:15:13:
01:00:0c:81:4e:30:bb:90:b5:95:5a:45:a9:c9:25:7d:3d:aa:
90:ac:99:d8:06:ae:f2:cf:5d:4e:2b:c8:bc:55:4a:cf:45:29:
a6:e1:57:53:e6:a2:cc:07:5f:4e:e9:ef:33:41:10:3a:0f:1b:
bc:37:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client