
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: E5fCn1HJ81nig8giVOavpEWkTSdr86j6n95TG5ySmhI=
Subject key identifier: FE:EC:B0:2C:8E:11:2B:34:66:BB:05:12:49:E0:33:9A:10:84:ED:74
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 019A0D81D46517EFCA1DC2C0BC6EA42AF023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 11F5
Signing time: Wed 22 Oct 2025 20:00:03 +0000
Manifest this update: Wed 22 Oct 2025 20:00:03 +0000
Manifest next update: Thu 23 Oct 2025 20:00:03 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: yObCOqSHOFTzkA2xjTSNCSVP6jTxB/+/l3+29fgUZw0=)
2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:81:d4:65:17:ef:ca:1d:c2:c0:bc:6e:a4:2a:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Oct 22 20:00:03 2025 GMT
Not After : Oct 23 20:00:03 2025 GMT
Subject: CN=feecb02c8e112b3466bb051249e0339a1084ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:73:2b:f4:57:5d:e5:47:8f:ef:48:9d:d3:
22:3a:57:de:85:8e:48:b6:2d:f8:ce:2d:08:9b:c2:
7a:4e:64:cd:18:a7:ea:d3:79:e6:c2:d1:5a:ab:67:
91:9a:8e:7d:c7:e6:f1:ff:b5:1b:be:6e:9e:3a:7d:
49:c2:87:d3:52:72:be:94:25:b3:e2:b0:ec:8a:81:
88:d5:a1:d5:87:ee:b3:82:6d:da:ca:d8:5f:5a:51:
8c:00:f2:65:4f:ff:0a:ba:5a:72:9a:14:07:ea:6e:
53:d4:99:7f:0a:b2:f9:69:42:c8:57:b3:15:76:fe:
86:0f:64:79:ac:26:1a:27:c1:9a:2a:e4:49:52:ff:
38:aa:fc:9a:d5:2e:94:12:ab:2e:94:dc:56:e1:b3:
92:12:7e:d5:bf:05:5a:66:02:56:ad:13:7e:ae:51:
78:ec:33:ea:05:57:a2:d3:ca:f2:9d:22:b3:79:c3:
a6:d1:b9:96:18:8d:d8:5c:03:d6:b7:5b:3b:d7:86:
86:92:2f:51:94:34:76:6c:c0:1f:51:88:39:81:19:
2b:e4:f7:ae:b1:1e:36:1f:a2:19:01:ea:91:a1:a4:
40:ec:40:e5:db:17:3c:e8:fc:6a:b9:22:af:c5:26:
b5:8d:e5:64:03:5c:7d:d2:61:dd:4f:3b:ec:4f:9d:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:B0:2C:8E:11:2B:34:66:BB:05:12:49:E0:33:9A:10:84:ED:74
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a9:3d:c1:e9:5a:43:36:6d:84:19:eb:1b:7c:cb:e1:ee:e5:
48:b3:e7:a9:b6:8a:88:42:ad:9d:8f:bd:dd:a4:83:c2:e4:e1:
5b:5b:8d:75:fd:a6:19:ff:c3:51:5c:5b:e3:31:ce:53:22:a9:
55:bb:34:f2:34:18:7d:91:b0:c0:f5:f3:7f:23:94:e6:bb:a0:
86:b4:a2:40:8a:2f:b5:9a:80:38:37:69:90:d7:66:f9:02:95:
ae:c7:56:dc:f6:a4:18:c4:64:87:15:1e:36:4a:a4:29:a3:cb:
7f:de:11:db:68:97:7f:da:32:ec:c6:66:9f:97:fe:87:6f:3f:
4d:78:f0:ca:a7:a6:d6:57:ef:7f:2c:82:b2:38:19:f5:0a:2a:
c0:17:aa:2d:8d:88:ab:04:7f:6a:d4:c6:40:81:c3:ca:bb:ae:
59:34:20:39:44:ee:e4:01:79:3c:ff:9b:4b:f2:25:65:f5:cf:
84:e0:a6:65:ac:a5:8a:c4:e0:9f:4c:af:95:b7:a7:99:af:45:
85:f8:f6:10:df:bf:0c:02:51:a3:85:98:3f:b2:dd:cc:6b:1b:
93:6e:29:0e:58:6e:6d:16:35:6c:65:b4:ee:73:85:b2:01:c9:
dd:87:3d:0c:af:a4:af:73:98:22:64:a3:8e:db:a2:32:82:6d:
84:59:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:00:54 2025 by rpki-client