Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier: GNj/WJQgl7icxQK1PpG4o1RvuZ0bYsN5bMq0ntjkpYs=
Subject key identifier: A3:2D:11:A0:6B:D9:19:C7:D0:7C:58:06:15:6D:0E:AE:2C:93:A1:01
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 019A70DC257C6427222BA79428A1F5CBC840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 03:01:06 +0000
Manifest this update: Tue 11 Nov 2025 03:01:06 +0000
Manifest next update: Wed 12 Nov 2025 03:01:06 +0000
Files and hashes: 1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: 6MOWwaSmdyw4CXLgQoysmrnHSrlBuJSJ7ucVCjWMjAg=)
2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:25:7c:64:27:22:2b:a7:94:28:a1:f5:cb:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Nov 11 03:01:06 2025 GMT
Not After : Nov 12 03:01:06 2025 GMT
Subject: CN=a32d11a06bd919c7d07c5806156d0eae2c93a101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:ec:c3:25:44:8e:08:dd:19:fa:50:c4:dd:
3f:61:92:cc:a0:1a:77:5b:44:fd:a5:78:0b:f0:5e:
61:f9:10:df:b8:e9:1a:84:a9:7d:5f:1a:01:8c:23:
b2:70:a0:fa:c2:6a:23:b3:f6:02:7b:c5:bb:cf:e1:
0b:b1:85:02:2d:0e:90:ba:3d:15:c8:2b:72:d6:92:
83:83:07:38:c3:c4:04:0d:1d:14:a6:8b:ea:6f:c6:
00:ef:16:72:cd:36:fc:a1:e5:6e:75:38:2c:97:c8:
a1:d1:90:4d:08:e0:80:2d:07:c3:31:f6:1b:e8:a1:
96:d8:e2:41:39:55:40:73:1c:eb:9e:2c:9f:67:2b:
14:bd:ac:c6:c8:4d:99:b7:65:66:cb:51:41:95:ee:
cf:63:87:70:54:1b:53:ea:18:18:f9:c6:5c:17:4e:
b4:50:d1:75:c7:60:70:3e:76:fd:9c:f9:29:8b:00:
3f:1e:71:b9:5f:96:f2:dc:04:dd:3e:36:65:72:e5:
23:fd:44:a2:5e:a4:bb:3f:b5:2e:f2:20:16:3e:ad:
88:51:9b:de:85:49:dc:2f:27:cd:ef:88:43:1b:af:
18:b7:d4:8e:3e:80:b8:79:10:cb:da:d0:7b:72:eb:
e4:99:b0:27:85:11:ae:37:20:83:d5:39:88:e8:4f:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:11:A0:6B:D9:19:C7:D0:7C:58:06:15:6D:0E:AE:2C:93:A1:01
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:f1:32:fe:ad:90:fd:2f:d6:ba:c2:95:5b:71:30:89:ea:
3b:bc:ec:54:6d:cc:02:ad:25:62:4b:2d:91:35:84:29:b8:17:
42:56:14:6a:e4:b5:33:94:f9:46:ee:ca:53:33:e9:46:b7:53:
64:12:0b:54:1f:85:e7:5c:4d:74:fa:ad:d2:d9:d8:b3:8f:5b:
c0:02:7a:aa:90:f8:9d:e3:51:a0:7a:94:f8:0c:62:c1:47:60:
c5:d4:b8:41:35:48:2e:90:24:f1:46:44:37:95:80:9e:18:db:
1b:69:1d:b1:94:6a:f8:93:a2:f6:d5:e9:e3:94:3e:2b:dc:3e:
fa:75:bc:68:16:27:29:88:a5:9c:89:89:4b:10:55:99:e7:44:
09:4b:3f:b2:06:74:b3:34:67:1e:e2:9f:7f:bd:5a:91:e4:14:
e1:00:d2:e2:64:a3:59:0d:91:c9:d3:81:32:3f:1a:8a:91:bb:
5a:12:11:30:78:19:75:f4:21:f9:46:39:bb:32:94:b6:1f:be:
3a:70:ed:3f:6c:e8:3a:6f:bf:31:f8:bf:69:26:29:a6:3a:7e:
28:8e:62:17:94:01:a3:c3:66:50:49:7f:0f:45:76:e8:a0:20:
bc:a2:6a:c7:9a:ce:78:bd:18:c0:ad:44:4b:64:de:19:ac:74:
24:f3:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:57 2025 by rpki-client