Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: zm/K+xzPjuitZPMYA1qntJ3dhtpvl2WYjqtdOd0QW0o=
Subject key identifier: BD:E5:9C:C2:8F:29:A0:B9:84:9A:FD:14:6F:05:5B:91:9B:C1:9F:C3
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 019A71B90FEE88161A8D68168CC4596A11F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 0785
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: Ie/rDhYFzbekk/EVPw48OVHI0n5DOM2v0FCk5LGEdGU=)
2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0f:ee:88:16:1a:8d:68:16:8c:c4:59:6a:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=bde59cc28f29a0b9849afd146f055b919bc19fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:ec:9f:81:36:cd:f5:20:c4:c7:1d:90:31:
07:96:d7:96:5d:17:94:0a:36:b8:d6:06:ba:71:8c:
4c:e5:4c:4b:ef:6a:2e:28:d4:54:b0:58:8d:19:d5:
47:54:8d:cb:5d:29:9e:c4:54:ab:cc:e2:a4:20:37:
23:bb:76:33:0c:98:02:e4:1e:99:4a:07:fb:6a:b6:
f0:fd:ab:52:51:26:4f:91:a0:55:ce:59:e0:44:27:
f5:fd:73:51:7d:e0:92:12:cc:02:32:5c:45:72:62:
31:75:73:33:3e:1d:17:38:be:11:45:d6:e5:77:f1:
50:84:32:03:16:a5:ab:dc:dd:d2:e6:c1:c2:3b:b3:
7d:6c:84:8b:b2:b1:80:37:02:95:f7:bc:24:e5:b9:
bb:7d:92:7b:60:80:c3:5d:1c:e4:8b:a4:cc:35:05:
5a:f0:3f:a1:00:63:63:4a:ce:24:2e:84:e2:01:3e:
0b:68:37:39:e3:80:f6:8e:66:9c:47:f1:18:fc:9a:
4a:ac:50:7f:ef:36:5b:59:ab:44:ff:4c:c3:4a:4e:
4e:0c:61:dd:f0:49:74:83:61:50:3a:06:d2:23:0b:
01:b4:7e:b6:36:6b:8a:2d:a0:dc:d5:ba:b6:ce:06:
6a:a4:ee:b2:95:80:69:92:3d:c1:19:e3:f8:ec:89:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:9C:C2:8F:29:A0:B9:84:9A:FD:14:6F:05:5B:91:9B:C1:9F:C3
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e0:59:cd:27:d9:06:68:0d:ec:48:c1:88:db:a3:16:39:1e:
2b:f5:5c:e0:30:33:80:d4:a0:8e:56:1f:75:cb:80:cb:a6:8d:
21:bd:4c:a4:65:b6:4a:7f:27:ad:32:b7:ee:8d:00:9a:a4:94:
e4:fd:f9:b0:cf:9e:e9:f2:d1:09:a7:75:65:78:da:f3:2d:d6:
88:85:91:8e:4d:49:01:a5:6b:6e:3f:90:fa:27:c3:26:34:59:
0a:c4:34:19:4e:25:bc:30:91:90:04:fb:32:84:b5:26:fc:ba:
e3:cf:8a:24:79:b6:c8:93:70:b3:48:97:99:10:c5:45:e0:91:
77:6d:55:6b:8e:4a:5e:70:0e:6e:45:50:05:1b:ca:aa:8e:d6:
58:84:4a:ea:8a:b6:fd:de:b7:31:4f:1a:a0:8c:46:10:a9:d2:
3f:1e:1a:1d:98:50:70:5e:21:fa:71:66:10:fd:e4:ad:62:ed:
9e:35:46:04:dc:a2:26:68:36:15:42:2d:46:7c:ad:70:cd:83:
04:63:55:2c:8c:32:42:71:8d:a8:64:28:45:56:63:d8:02:82:
c2:15:fa:d0:5a:e7:f3:13:23:5a:5a:68:66:24:18:55:6f:33:
d9:d4:1a:59:b8:b1:ec:68:4c:68:df:83:7e:0a:e7:fe:07:47:
60:31:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:04 2025 by rpki-client