Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
File: _eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft (raw, json)
Hash identifier: hRiiEwjAIN8LFrN8IZx0otTGuNfAVUvbpMrZvExwRU8=
Subject key identifier: A0:81:2E:87:21:8B:D7:3C:04:9C:F4:B7:61:9F:BD:B8:6D:11:83:8F
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Certificate issuer: /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial: 019A7226696D5C151159BA9FACE69F056368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: YExiaarbuvH9TQzZ24egFcmAkD0.roa (hash: mt2m3RTRnmt9DmA4UJddV/a1P2ybagRmPkEyYSpRGrY=)
2: _eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl (hash: WLNUuH+7gmjTGIDIDEt1z+6wqqO9sBUjDKgNJ+ie6VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:69:6d:5c:15:11:59:ba:9f:ac:e6:9f:05:63:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=a0812e87218bd73c049cf4b7619fbdb86d11838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:5f:24:8f:8d:42:cb:df:09:8f:a2:c2:33:
97:d7:67:37:67:66:1e:db:cc:82:19:4b:1f:f4:5e:
c7:e2:ab:ae:35:6c:21:ee:29:62:47:67:d0:59:aa:
18:34:1f:1e:cb:5e:bf:a8:b0:59:55:c5:b9:6d:b0:
b8:a0:71:2b:0a:88:e8:06:3d:8b:93:f9:db:06:3f:
9b:79:ec:0a:e9:3f:60:b1:4a:aa:5e:21:69:5c:1f:
1d:ec:cd:e5:1f:06:90:10:6c:ba:b3:e9:8d:fe:87:
29:6c:b3:3a:49:02:30:60:20:fb:07:40:05:8e:15:
b4:33:db:e4:b2:93:43:b2:22:9a:ad:ff:2f:f2:bd:
ca:52:26:7f:1a:3b:55:73:87:17:0c:5e:0e:91:82:
fa:f8:cc:4f:84:7b:40:76:d1:a5:85:d5:a7:ce:93:
c2:d7:e6:c9:61:e1:ed:3a:f6:96:3a:88:c2:08:44:
fc:85:7a:63:67:04:e9:51:63:5c:9f:c5:2f:9e:36:
e8:59:a4:b2:fd:b6:22:3a:84:cf:d5:4f:bd:30:e7:
fc:bc:87:b1:d6:13:22:5c:74:56:ac:67:54:03:f6:
68:72:9c:9d:ac:78:48:ee:b9:f5:b8:f1:52:5c:63:
bc:77:71:8d:e3:10:b5:85:73:c4:29:41:fc:05:71:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:81:2E:87:21:8B:D7:3C:04:9C:F4:B7:61:9F:BD:B8:6D:11:83:8F
X509v3 Authority Key Identifier:
keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:6c:f5:b8:7e:2a:7e:e7:52:6e:f9:02:7f:8b:e3:ec:58:
a8:59:79:7b:d4:81:78:6c:2d:fa:84:18:ad:04:43:f4:da:3c:
b3:ab:18:9f:00:64:36:bd:05:29:43:a5:f3:b6:72:e6:6d:71:
58:12:54:e1:5b:1a:3d:27:71:a5:6a:20:a3:d6:eb:86:a2:41:
8f:79:eb:a2:04:00:ac:f6:b4:0c:eb:57:2b:9e:b3:63:5f:93:
a6:be:a3:bb:dc:ac:72:c6:98:93:e7:ec:4a:d0:5f:9d:28:04:
c7:9a:16:46:d1:34:74:e8:66:66:c5:bf:a9:bf:62:3f:a6:0b:
a6:15:17:86:49:d6:e4:6e:35:87:92:4e:74:bf:fe:41:f9:8a:
7f:7c:03:b6:49:95:df:c7:5c:82:6d:7c:f7:54:86:f0:25:12:
c7:88:d7:d0:ac:c4:c0:c9:29:b0:4a:3f:6e:c4:43:b3:a4:46:
0d:f5:ce:a9:84:5b:ab:f1:d6:2d:7c:7b:4e:db:64:7d:4a:ea:
ec:f6:be:31:2f:20:bc:6d:89:3e:aa:d3:7d:20:5a:ae:2b:95:
f0:25:62:32:59:13:4e:dc:8e:f5:8c:1b:0c:20:ba:1a:41:88:
14:7d:2a:60:0b:7b:96:d8:5c:21:10:21:d4:64:9e:2d:58:2f:
32:67:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:50 2025 by rpki-client