Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
File: eqYGEXu19-QWDvJo-fSqBFc4BEE.mft (raw, json)
Hash identifier: SXIG2pSiN/7mLWXMemYlExDmXOo4BOmWRBhVtgmteQc=
Subject key identifier: 87:2F:8A:3A:14:DA:4F:D2:BE:7F:18:B6:5E:4D:0E:54:4E:80:E9:AD
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Certificate issuer: /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial: 019A71B946D49F7AE61B231C0F86C2F948F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
Manifest number: 1466
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa (hash: vZb7fKK94eyPt6Z0PY3dDQip6IArUPuz51Ar7XUuuO8=)
2: eqYGEXu19-QWDvJo-fSqBFc4BEE.crl (hash: I4JSF2ju2xaJaVgDe42/VDMSiz/mUdHrwH0heBS//iw=)
3: xXuydbuhDhETgHIlcb9KUf9zG4Y.roa (hash: 9XrkxjJNUOJOKboyq6AJj8CALCh/rjZYztA11ZmADyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:46:d4:9f:7a:e6:1b:23:1c:0f:86:c2:f9:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=872f8a3a14da4fd2be7f18b65e4d0e544e80e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:f6:33:6d:91:c7:01:0c:54:a2:d6:33:b2:
43:34:51:da:b2:82:14:ce:2f:aa:52:47:0b:28:84:
d9:28:c1:32:37:68:81:73:b8:07:68:e3:a3:83:12:
42:f6:ed:72:86:dc:90:c8:e3:62:84:6e:0b:f4:a1:
4b:34:fe:35:b5:c7:10:a1:69:28:e4:84:b7:a4:90:
80:88:63:ea:23:e8:59:e7:6e:0e:f5:90:92:48:f0:
e1:91:7c:b0:74:53:44:85:4f:54:5f:02:d8:ea:c7:
98:42:bc:f2:39:f0:a5:bd:96:62:6f:82:21:de:c4:
4b:fd:88:0f:4e:8d:26:a9:83:2c:27:2f:40:fa:19:
f1:fe:86:d4:3c:09:a5:d7:81:8e:82:06:a9:91:8a:
ae:31:43:47:0b:96:57:39:fa:25:46:49:77:a0:a3:
7f:c2:b5:14:55:4b:24:71:6e:95:d3:7e:4e:fe:88:
ad:e7:c7:ef:37:26:15:13:48:eb:fe:71:cc:85:c5:
e4:dc:09:91:e6:23:22:e0:76:bc:30:17:95:aa:ef:
a5:60:17:c7:e1:fd:f6:d8:d1:70:31:7d:a3:42:52:
b6:4a:e3:d1:81:d7:b0:7e:6f:a1:57:4a:cf:8b:e3:
dc:2c:bc:df:59:c7:74:18:02:ab:6b:0f:d5:e2:f4:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:8A:3A:14:DA:4F:D2:BE:7F:18:B6:5E:4D:0E:54:4E:80:E9:AD
X509v3 Authority Key Identifier:
keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:d8:f3:9f:58:b5:1f:3c:49:48:d1:7b:87:fd:cb:a5:51:
43:e7:ff:0a:84:44:32:ef:03:c1:17:fe:63:5c:e9:8f:ce:d7:
da:fe:ee:bb:86:82:60:6d:d1:8a:3e:ba:62:12:a6:94:5b:80:
4c:17:0c:a8:81:6a:6f:8c:55:16:40:06:b6:e1:f0:a4:e1:19:
e6:fc:17:ca:19:ae:a9:6a:57:e2:26:b3:c1:cf:67:17:26:23:
6f:6b:c0:e8:b1:94:18:bc:71:11:e8:38:70:80:09:d4:1b:1f:
41:ea:3e:bf:e7:f7:cd:14:27:3b:b2:1e:a5:ed:32:30:f7:40:
ee:fc:af:c3:b7:e9:1e:e9:3f:fd:ca:fd:0a:33:67:19:b9:89:
99:87:fd:28:38:ee:e4:9d:8a:2f:64:da:5f:a4:5e:12:0d:37:
57:76:07:54:94:41:e0:86:32:7b:32:6c:62:d1:9b:0b:a3:2c:
65:ec:c3:0f:3b:db:80:4d:3c:5e:90:b9:ec:56:c2:0f:81:f3:
40:d9:be:14:2b:6c:ae:07:2d:60:ab:45:80:c9:c3:6c:47:75:
7f:0e:f4:10:b9:d9:c0:5c:88:e1:30:45:57:fd:be:d0:be:a1:
31:e4:cd:36:96:8e:b0:15:2a:0f:9b:c7:11:cf:ac:10:1d:23:
86:a5:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:54 2025 by rpki-client