Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File: eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier: HKOFQQTY88V/QStYzgcjwt0DbU8/r69CSj16bVjvWKA=
Subject key identifier: C4:EB:A3:25:B5:74:A6:3C:E5:4D:0E:67:87:CD:95:88:E1:27:96:86
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial: 019A71B91F7B8B637E1020882CB35FD449E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: gwQZ7F6o9Mrx61uxylZUKqdXWzSZA2oBLjxNAC66ON8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1f:7b:8b:63:7e:10:20:88:2c:b3:5f:d4:49:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=c4eba325b574a63ce54d0e6787cd9588e1279686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:12:51:43:78:07:bb:97:8d:b7:3d:1d:14:
e1:87:a2:63:fc:84:c9:c0:80:6d:2c:da:a0:0e:55:
0e:e4:7e:2f:c6:37:a7:83:db:9d:2f:75:b6:e5:62:
83:5c:c1:32:85:55:17:29:89:47:d0:a0:e7:a4:78:
16:45:f7:6b:7a:43:ce:3a:8e:c6:8d:db:b5:10:65:
2e:fa:4b:20:35:54:8f:31:81:f8:30:00:b8:4a:69:
0e:e6:f3:6a:0a:2f:97:06:34:c5:d7:45:bc:b1:53:
be:0b:64:63:35:c4:5e:bf:c9:07:ce:db:25:83:25:
a3:d7:2c:74:f9:6f:3f:f3:a3:29:17:1d:d6:c2:f6:
ed:83:e2:40:2c:a4:8a:88:79:fa:7d:b9:51:75:9c:
d3:1f:03:a3:b4:a0:5d:7d:72:d3:7b:8c:20:d4:c9:
52:d1:37:cd:ce:e6:a3:03:ff:05:91:e9:e1:e2:41:
4d:ca:ab:60:78:52:7f:6b:ea:e6:e8:63:8f:b7:e1:
7c:8a:24:b5:72:0c:07:ea:50:01:09:75:91:02:df:
16:03:22:14:91:47:33:80:30:4b:7a:3d:23:bc:50:
2a:35:a1:1f:69:e4:f6:2d:74:1f:41:2c:52:f5:a1:
17:6b:10:75:0c:ad:70:da:24:36:d7:e8:22:84:90:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:A3:25:B5:74:A6:3C:E5:4D:0E:67:87:CD:95:88:E1:27:96:86
X509v3 Authority Key Identifier:
keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:1c:2a:0e:66:a2:8a:35:c6:b9:b7:70:77:fc:71:fa:ac:
33:2e:cc:9c:e1:60:2a:0e:f2:2a:d3:79:5f:21:49:9a:9c:dc:
65:c7:6a:c9:60:b4:93:12:f2:e6:44:2b:b6:9c:a2:26:9e:b0:
ce:38:ea:93:52:24:28:91:5c:54:3d:15:6b:2b:3f:3b:0b:e1:
23:b2:2a:ad:27:1c:bf:d2:08:e7:32:c2:10:ed:91:d9:dd:72:
26:3d:ca:e8:2e:68:a2:c8:a7:78:b6:62:82:84:ea:9e:b2:42:
b4:ae:28:68:19:5b:72:ce:62:d0:2e:21:3b:52:7b:6d:cf:b4:
67:c7:d2:52:f2:b2:18:1e:72:ae:c9:b3:e9:af:d6:3c:a6:c7:
5d:e2:dc:79:8b:fc:70:26:d9:e3:7a:d3:35:3f:03:34:39:ff:
c0:f9:9c:d1:59:17:76:2d:50:c7:f1:c3:0a:ad:45:71:23:9b:
4d:bb:57:2a:d8:6a:44:83:31:e4:f6:55:2b:ec:f3:1a:44:5f:
48:53:92:e3:80:fd:5a:18:f8:82:56:ce:0d:ca:2d:ba:af:95:
60:8f:79:0c:6f:c8:5b:67:ab:ec:f9:d0:0a:e5:41:81:d4:39:
ca:d6:31:6b:87:85:e4:f7:7d:b6:b9:87:54:f2:e5:8a:22:ba:
8d:2f:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:47 2025 by rpki-client