Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File: 66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier: ta4E9Dc6WbHK42Hu+utaGG/2dIVKgAjVhN3O8kj1HM0=
Subject key identifier: C2:D9:A1:71:48:A5:84:B1:A8:EF:B8:18:43:31:8E:2A:CE:7D:AC:D0
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 019A7112ED4C396BBBF96E2B18CEF5F699C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number: 11FE
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: 1-mBckpLEw9UGTfJd1V4E5TNfyV8.roa (hash: M/XKBZLQ+3xBfpkOhilnQwbN0qvFhcpTK4PjZ6r6TmI=)
2: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: DmNHlLJ0DlYEyQw2EFBJhpHajjitXI+xcUVQe5Syy/k=)
3: X59ioMe9M1azoJ6cRzkgIdEAa8w.roa (hash: Ldadp9gWZoAj6JkNflGn39JNMaPrFhlEg4BvEteUS6k=)
4: bvd1QkEb9SyVP1-MG1wkMVZ-iKE.roa (hash: H7HXfAZbCHLAR5KhYd5VTNdDAtOCH60344oqrEfBcQ8=)
5: z9Yv58abFhPjrR8RFukcWH5etZM.roa (hash: liHiIFHDq5nMOD1zCG5Omq4zbgZPC8dhY7RR/YINHTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ed:4c:39:6b:bb:f9:6e:2b:18:ce:f5:f6:99:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=c2d9a17148a584b1a8efb81843318e2ace7dacd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:69:68:49:f0:16:15:6e:6c:37:6f:12:60:
01:85:44:2b:16:b0:5c:bb:24:2d:83:dd:39:5d:a2:
7b:c4:20:5f:ac:5f:1b:17:11:72:ab:52:55:ba:13:
e7:8c:82:f6:e6:77:d6:d2:a1:8f:53:32:49:68:b9:
48:04:b9:a3:c9:61:87:4b:7a:2b:9c:46:74:37:47:
8f:20:50:ab:9b:1c:aa:de:1b:d9:6a:4a:db:95:ff:
56:6b:89:ca:9e:ef:13:75:6d:31:fa:79:f2:67:c1:
d7:51:64:9b:c5:9e:77:58:3a:56:55:69:eb:4c:77:
58:99:8a:66:70:28:4b:ba:cd:54:c0:03:4a:e5:fa:
ac:05:67:5b:28:bb:26:78:70:03:dd:d8:1e:bd:bf:
c8:15:2b:3b:79:5e:49:72:55:fc:2a:3a:04:f2:a4:
db:58:36:d4:8c:13:33:2e:87:c2:ec:1b:37:18:97:
1c:a4:e7:c3:32:e6:46:88:56:e2:0a:43:e8:d8:db:
e9:87:59:e2:c8:0b:a7:35:f7:a5:60:3d:c8:4c:5f:
bf:82:bb:b4:b6:7c:cb:79:5b:cc:3d:b2:0e:21:43:
b0:58:6c:87:19:d3:0b:40:5d:94:af:10:fe:d7:a9:
a2:37:98:60:8d:1e:f3:36:ba:66:fc:5c:bf:e0:40:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:A1:71:48:A5:84:B1:A8:EF:B8:18:43:31:8E:2A:CE:7D:AC:D0
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:70:2b:d4:ed:be:6b:5d:3a:4b:42:63:8c:b7:d4:91:0d:
4a:b3:28:39:7e:32:d8:e9:4b:a4:4e:f3:51:61:c0:29:84:17:
18:44:04:65:0c:4f:59:c4:df:09:a0:7c:ba:e1:31:0f:2b:dc:
1c:ab:2e:34:bd:62:e2:fd:61:70:0c:fb:19:4a:9e:c8:2f:ae:
9a:81:48:1a:72:78:1b:81:f6:69:d1:0c:d2:ad:ab:bc:c0:cd:
87:0d:15:8a:75:a6:81:6c:b1:f8:52:10:95:13:03:1d:e4:19:
96:ee:1f:c5:99:f9:0f:53:e5:97:bc:98:ce:03:5a:1f:c1:d4:
8a:8f:05:3a:f8:65:8a:ec:16:71:29:6d:35:d3:84:43:67:4e:
e0:b6:ac:4b:e7:a1:92:0b:d1:4e:a3:22:34:f6:ec:43:7b:c0:
d9:92:d6:96:35:f4:ff:8c:ed:1d:c0:a5:93:64:ae:fd:43:24:
9c:af:50:57:09:69:b7:22:5d:32:5b:50:a2:30:46:b4:ab:d9:
23:a2:ab:15:77:45:fb:e8:83:79:d7:e9:07:64:1b:ea:8e:68:
25:b0:d9:ee:bc:a5:94:f3:20:0d:2b:c3:cf:c5:57:c9:64:96:
75:51:6c:88:21:d9:86:36:21:b2:dc:9b:cc:5e:84:ae:a0:26:
5a:2e:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:04 2025 by rpki-client