Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File: eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier: vcz4hfm0PRNWrOT01CZ7y33rr2QOjDWsYRu3oMS3SKo=
Subject key identifier: 0E:F5:5F:B1:E9:CA:97:F2:34:76:FF:66:EB:25:10:76:E3:6A:1E:C0
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 019A70DC4C309DB0BEB48D342F59966E8073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number: 1115
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: C9I9L672PlbWqQBGPXD-LljxFm8.roa (hash: +ke4s3nz80Z09QzZpjaWVPGcz+zRYaW46pTivPvijPQ=)
2: _Hv-371f3PpQrPgvaLXFPgbDqAs.roa (hash: LCaDC2GnT7VyfO2v1Zin8LH9TSL6mMs+tcHPlTEQoSg=)
3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: 8LuYiKpmFwMgg46LxoCC9lMdhj/pPK9CiAsvoj9BNd8=)
4: gMIvq9YtCgOkL-7wopg1kqEgOOY.roa (hash: CP7S68jNnZq7f3001jUkejgDjHIYNSAYCHyxzvgL+hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4c:30:9d:b0:be:b4:8d:34:2f:59:96:6e:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=0ef55fb1e9ca97f23476ff66eb251076e36a1ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:c4:b8:a1:de:14:06:c8:40:99:02:f9:eb:
c1:5a:35:5c:62:41:0c:31:73:60:29:7f:b7:c5:f7:
08:b3:ae:6f:45:ea:fd:14:c4:85:17:89:b8:49:fc:
e0:27:f2:bf:2c:92:5f:9c:79:cd:76:45:52:fc:41:
bf:0b:b6:af:2d:d0:bc:0b:74:6e:97:86:10:fc:ad:
16:8c:f9:5a:59:a6:d4:28:64:fe:ea:3a:d4:2c:96:
bc:2f:ef:2b:11:8d:3f:3a:f9:16:d7:3c:25:fa:17:
d2:5f:dc:c0:62:2f:cf:11:c0:50:e4:df:51:08:21:
4f:a5:20:3d:30:01:4b:9c:95:c6:04:21:ec:13:8d:
b7:84:a1:49:2d:9c:69:32:d8:8c:34:70:9d:68:57:
44:f5:8b:30:e8:f0:e0:f4:cc:a9:50:5a:c3:88:7c:
ad:27:f8:15:4d:4e:f4:cd:05:0a:23:ce:4c:ca:09:
7d:c4:87:dd:50:7f:db:f8:e7:c0:ad:a8:a4:6b:fb:
d3:37:19:05:33:60:d0:51:0a:ec:a8:05:fe:50:95:
be:d8:74:1a:a1:11:dd:77:39:83:34:c8:59:bc:ba:
3c:c4:47:4d:bb:10:d1:51:a0:a7:cc:9f:29:b4:73:
7f:b8:ec:20:15:cb:91:2e:cd:b9:27:1e:cc:14:82:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:5F:B1:E9:CA:97:F2:34:76:FF:66:EB:25:10:76:E3:6A:1E:C0
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9e:ce:17:19:f8:e4:7f:7a:1a:f7:93:c8:ac:e3:ae:6c:20:
c9:71:8d:30:da:d4:12:ef:03:07:1b:a7:c9:a8:a5:24:51:68:
4d:f8:3f:a3:af:cd:4a:84:7e:4f:a6:72:38:bb:dc:37:1f:f2:
20:48:ea:32:0a:22:f0:ad:de:52:23:cb:c6:23:92:d9:4e:c5:
c7:3a:64:60:3b:57:0f:37:a9:f8:66:9d:ef:3a:c9:24:de:4b:
40:c5:a2:4d:63:a3:45:6c:41:0c:05:0a:6b:c2:34:96:3d:b1:
76:fb:97:f6:b0:9e:37:1f:58:30:7c:c7:c9:2e:f7:b5:ca:4a:
4b:ae:16:0c:be:60:4f:f2:01:70:01:bb:f5:db:7b:55:a2:e0:
f2:b5:d0:80:00:67:5c:e5:7e:6a:ff:82:47:fa:99:3d:1c:94:
d5:2b:aa:92:8f:cd:f0:aa:37:05:d1:22:28:26:47:ed:d1:43:
8e:1f:53:96:89:4e:38:8d:e7:cb:94:21:72:a6:83:2a:35:b2:
b7:41:e2:ca:f3:75:30:81:1a:52:f8:5b:55:38:de:43:4d:7f:
d7:40:f0:a1:3d:25:a9:9a:43:a1:11:d1:9c:e3:5f:c3:a5:b3:
2c:29:9f:a2:b9:94:bb:60:a8:aa:df:96:2b:c8:5a:0b:81:2e:
58:12:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:17 2025 by rpki-client