Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: 3yqOZVN/7aobY6xQsGkS+yHwj32G0fPuscDrVAHWJZw=
Subject key identifier: 10:7B:90:C0:B4:F8:85:4B:D5:14:C6:D6:EE:FE:45:43:5C:24:CB:99
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019A71B7F7090A9C5B8C447E4227ABD18C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 11FA
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: hZgGURnCOIYHZsCoWJEg72PsOWpKxIagK6HFqrm+09Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f7:09:0a:9c:5b:8c:44:7e:42:27:ab:d1:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=107b90c0b4f8854bd514c6d6eefe45435c24cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:36:6d:bf:54:f6:ee:28:7d:31:71:89:09:
8e:24:2f:e2:51:7d:42:e3:f6:e0:41:bb:90:06:f2:
74:e4:5e:37:38:5b:2a:92:b5:af:ce:66:f6:a8:77:
65:8b:bd:cb:3b:5b:06:e2:a2:b8:df:6b:a5:c6:77:
ca:69:1a:d0:af:d8:c8:41:fc:1b:7e:32:8e:64:a8:
b9:0b:a6:ca:c5:69:a7:57:a3:c3:89:62:78:2a:88:
b6:41:af:b4:d0:09:8b:b1:a1:e7:eb:27:5d:ed:b4:
b1:7e:fa:55:f3:5c:c5:2e:cc:04:a3:2c:ca:00:c1:
75:82:53:9a:63:0d:ac:54:ef:07:1c:07:74:74:24:
5d:e5:4c:d3:14:5f:77:9c:f8:5f:c9:28:43:f4:ae:
93:69:74:01:ed:5e:73:89:3c:35:75:11:bd:2b:b2:
9f:f8:bb:62:ff:37:e5:78:3a:6b:9b:f9:b1:32:93:
88:ef:94:59:94:89:fb:f7:0c:05:b2:d4:3e:79:67:
a1:3b:10:2d:a7:17:65:89:53:cb:f8:9b:82:9d:f9:
d9:ac:3f:e4:14:bf:cd:bd:fc:01:65:03:76:30:9b:
b7:3b:12:51:0c:64:c4:18:12:27:63:aa:7f:ce:af:
7d:be:fe:4b:b1:af:64:c4:97:0d:d0:21:9e:ab:1f:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:90:C0:B4:F8:85:4B:D5:14:C6:D6:EE:FE:45:43:5C:24:CB:99
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:88:87:5e:b1:f2:30:af:42:c9:c8:b8:3c:25:07:95:d6:f9:
7e:e9:c1:1f:47:d2:06:8b:0d:5f:de:f9:82:e2:bb:fb:f8:8b:
10:d6:da:b0:b9:bd:f0:93:fe:6f:47:70:00:8e:08:e2:15:c5:
bd:eb:76:f5:0c:7c:e4:78:45:37:e0:61:2e:11:d8:71:6f:e1:
44:f2:f2:52:2c:87:85:1b:15:4d:08:1b:75:df:34:39:b5:19:
bf:51:c6:6c:01:22:4d:3a:1c:ee:05:05:15:0d:48:a5:15:ff:
e2:28:7d:d0:6c:b7:03:2f:ad:23:74:54:76:df:90:25:06:fd:
f2:a0:7b:46:c2:ab:fb:56:be:d0:56:99:b1:ec:4d:f2:54:c8:
b9:06:66:c7:a8:3f:cc:dc:ce:7d:e9:cd:2c:c0:b9:ff:14:9b:
a2:31:1f:0e:b0:76:47:26:92:c7:30:a2:46:23:be:82:ab:0c:
d0:c9:29:f8:cf:87:54:ed:6f:c0:3c:09:7a:e8:f2:28:ca:61:
dd:16:cd:cf:cd:89:3b:ce:9a:af:55:29:94:58:cb:4b:98:c2:
de:d6:a1:ff:c6:e8:e2:29:88:5b:29:a7:ec:81:8d:4e:a4:73:
50:24:7c:9c:a2:37:b3:86:03:fe:95:d0:74:24:5d:a7:0d:fb:
d9:8c:55:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client