Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: nfAAw4qeODcVat2qos6BHTLe6idL7aOQAiLXnR3KkHc=
Subject key identifier: 82:96:42:A9:38:A3:8B:E4:04:37:E7:46:CF:6E:FC:86:3A:EA:69:D8
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 019A70A4ECF179B0AF2E19150247D990F4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0E0B
Signing time: Tue 11 Nov 2025 02:00:48 +0000
Manifest this update: Tue 11 Nov 2025 02:00:48 +0000
Manifest next update: Wed 12 Nov 2025 02:00:48 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: YBIShiOmSVVDFg+aoZqEQtFjxSsmHq2HDyl0ur0gwjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ec:f1:79:b0:af:2e:19:15:02:47:d9:90:f4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Nov 11 02:00:48 2025 GMT
Not After : Nov 12 02:00:48 2025 GMT
Subject: CN=829642a938a38be40437e746cf6efc863aea69d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:ab:e9:b7:45:39:f5:5f:0d:c4:b4:bc:d7:
29:d7:6b:08:5f:02:2a:6f:d5:8c:f2:64:e7:bd:5d:
38:dd:8a:5d:c3:e0:06:db:4b:64:4b:14:2d:8a:29:
16:ea:ce:5c:25:71:79:82:1d:c9:67:a7:f2:a7:5f:
6d:76:34:23:77:5c:5a:9e:88:4e:ea:78:89:7b:f4:
61:f2:9b:64:20:5f:60:a3:50:e2:e6:37:2a:4f:6f:
a6:1d:47:46:ce:56:78:96:28:39:9f:45:97:82:ab:
dd:f3:4a:81:c7:8a:93:6e:07:4a:01:73:a9:c2:49:
99:e8:ee:57:70:ab:0b:93:dc:a2:4c:9b:27:08:15:
03:59:79:83:08:4a:4a:36:6c:5c:54:ac:40:0b:e4:
cb:0f:aa:8e:51:ad:ee:87:f9:76:a5:45:fc:93:19:
a6:b0:6e:84:c0:c1:03:35:23:d1:c8:79:10:0e:e3:
cb:77:fc:fb:6e:d7:ec:78:15:bc:35:bc:4e:87:23:
7d:4f:ec:92:db:ed:67:19:9a:5b:6f:7f:8c:1b:4c:
97:d2:6a:16:e7:95:db:f4:e0:75:9e:6d:c0:46:ae:
fa:2b:62:44:a7:40:25:d7:d7:40:c0:ab:b5:5b:15:
48:8b:c5:29:9c:66:16:90:39:f5:71:b5:45:4d:a0:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:42:A9:38:A3:8B:E4:04:37:E7:46:CF:6E:FC:86:3A:EA:69:D8
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4e:28:f6:d4:45:3e:4b:08:66:7a:f0:77:46:df:cd:b1:cc:
a9:c8:e4:a9:bb:b7:4e:3a:35:6a:24:57:3a:2c:1c:fa:d2:66:
99:67:01:6b:db:a3:11:fc:be:fd:79:56:e7:a3:a4:1b:0e:6e:
be:03:d2:b9:9a:20:2e:a4:b6:5f:f7:31:2f:99:42:aa:34:ee:
84:8c:c7:01:01:a8:32:e4:19:90:0e:6b:ee:ba:1c:43:51:98:
5f:65:2e:39:03:29:ba:0c:89:63:84:6c:65:40:54:be:a0:86:
f5:ff:5e:c6:8e:c1:c5:28:e1:fc:12:08:cf:52:cc:64:98:ca:
05:52:fd:87:71:04:ba:56:1a:5e:41:68:fe:bb:dc:eb:fa:69:
6c:ef:3e:42:de:17:8b:0a:12:a4:ff:9f:95:82:16:9c:a1:8a:
95:73:b8:c6:89:7c:ba:45:4b:80:07:e1:31:6a:58:28:ef:c9:
5e:dd:28:b9:f9:13:59:7c:62:21:db:0e:41:eb:fd:4f:71:e6:
32:be:1a:31:b6:ad:c2:67:27:16:ce:69:61:bc:5b:df:00:33:
93:0f:97:0a:d3:4d:cf:26:83:17:a8:5b:54:7a:bd:92:21:2d:
05:80:b2:6a:c1:65:f8:f0:bf:b4:0e:26:d0:01:c2:53:bc:7f:
4c:58:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:18 2025 by rpki-client