Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: BbFbr+1WdObGJ+cYyVhfXlbCM9Xd8BZkD4yMUP8bOQY=
Subject key identifier: 84:33:F2:6B:AF:CF:87:E6:53:43:E7:EA:16:2C:BB:0B:CC:10:1A:29
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 019A733893689D22ED489153A78C66707FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0D4E
Signing time: Tue 11 Nov 2025 14:01:18 +0000
Manifest this update: Tue 11 Nov 2025 14:01:18 +0000
Manifest next update: Wed 12 Nov 2025 14:01:18 +0000
Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: MitTbIgh0IYDo/UmxL3oj0gx5JnfNkkVLVGv23MMe5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:93:68:9d:22:ed:48:91:53:a7:8c:66:70:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Nov 11 14:01:18 2025 GMT
Not After : Nov 12 14:01:18 2025 GMT
Subject: CN=8433f26bafcf87e65343e7ea162cbb0bcc101a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:a9:97:ce:ea:9f:47:61:ec:48:9c:f5:58:
ff:b2:b0:63:59:84:18:a4:fe:b2:d8:96:5f:a5:6e:
29:36:04:71:16:c3:8d:8d:6e:6f:fa:b9:ac:4d:39:
ac:65:e2:06:b0:92:fd:10:8d:93:58:4d:0c:4b:16:
2e:05:9a:f2:6c:40:9d:1c:23:4f:17:d6:fa:cb:90:
62:8f:bc:12:74:12:a6:1d:54:86:f9:89:b5:03:c7:
13:85:d6:d5:c7:52:c3:a8:60:68:05:0b:48:58:8a:
72:11:81:f9:b9:65:f2:17:ff:60:fe:1b:88:5b:75:
e8:1f:85:d6:0c:9c:8e:21:e3:82:c0:77:be:bb:3c:
78:64:51:0c:27:75:e3:a5:73:c3:8a:c5:9a:12:a7:
d5:16:4f:df:3e:a6:55:07:76:07:1a:be:8a:ee:66:
be:7d:86:75:f1:fc:65:e9:1c:64:78:b6:fc:42:02:
29:42:30:91:f2:c0:3a:d6:cb:50:26:4c:80:98:34:
3e:83:88:93:59:41:82:8f:f3:0d:cc:f4:0d:1a:ec:
90:19:8d:ab:73:58:eb:ac:a4:02:f3:e8:02:9e:f5:
93:65:77:bd:5b:36:f9:07:df:6e:08:65:21:e3:02:
80:93:f0:3f:25:6d:4f:91:a3:23:99:0e:72:4c:45:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:F2:6B:AF:CF:87:E6:53:43:E7:EA:16:2C:BB:0B:CC:10:1A:29
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f8:2a:fa:d9:8a:e4:98:f6:55:c1:1f:30:a8:51:f2:3c:f5:
a7:94:56:a2:ee:77:a8:6f:28:53:50:30:6f:11:74:6d:18:dd:
bc:54:36:21:fe:ad:86:6b:75:bc:ee:1f:b7:93:84:40:77:eb:
87:0b:8b:d5:04:21:82:dc:58:a2:0f:62:6d:9c:4c:a0:3e:1e:
1c:b2:ee:76:96:24:65:3e:91:22:6f:2e:45:73:cb:62:8d:f1:
e8:4e:15:89:40:9b:51:66:ec:a2:71:f3:3d:35:38:2d:5c:be:
aa:e6:9c:89:e6:43:db:a4:1b:ac:d4:73:d9:1f:70:c5:28:5a:
d0:11:e8:83:2c:b2:bb:6b:51:3c:65:c7:1e:fa:52:fb:af:94:
60:b5:d7:a7:d5:de:84:bb:25:a6:51:a6:41:a8:96:8c:88:27:
d4:6d:35:11:62:b5:03:0f:4b:8d:92:8c:c0:7a:ac:ed:0a:b2:
66:3a:ac:be:b0:67:37:dc:87:8a:f9:cb:b6:6f:bc:3a:0c:3a:
31:87:3c:0f:02:be:7e:d9:1f:7b:9a:f0:dc:ef:8d:da:03:8b:
cb:3b:61:e6:55:8e:37:2f:03:bb:f1:49:c2:d3:fe:14:93:51:
a6:6c:b2:cf:a5:04:a4:8e:e1:f4:0e:a4:74:47:72:34:9e:a6:
99:7f:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:55 2025 by rpki-client