Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
File: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json)
Hash identifier: sWEIGNl4/KJk+2JvDnSigdFUvYCJCs9DLR3B4/4iWFI=
Subject key identifier: 44:22:E5:19:13:37:05:B7:63:59:91:47:23:5A:18:18:DB:9A:20:5B
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019A71EEB0469F56E1D859C04A1BDD2824A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
Manifest number: 1467
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: JeCQetXZva47Xg8vQF2E4SG7TLGCJsKVw7w2k48Cx2Q=)
2: 1f2tT71vV1MiLQenFigoQuxRwqM.roa (hash: wpjdNTt4b7V2ll6KY5o5hcvRIp5mFl1TvHli6R2tBq8=)
3: Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa (hash: zKd/skTxKlvTPvFh0ifMkaguOQnO05Ys88KWivYuLNY=)
4: CmmKhdciV_F_mra-YOcbKmrYhbY.roa (hash: VT8xbl1Jji+4wsCUPpHnl/UFnhMgpu5zo/k26EaRMFM=)
5: Nc9h3qvLuJI4WP6YkQa2jYc6rJI.roa (hash: 5Bmg9YYyOOpJwhqaN3H4Zio8XFaxyte8HHt0oAAzH5g=)
6: RSsMaCl57szGFCkhCpSEu-SYKeY.roa (hash: oRvnshX7DCElI5ZaHCvWWYGxI4E7w9fzHzlAFCyFjaQ=)
7: g21ix9lsPN1aDIX0bqCC1gdAPmM.roa (hash: W8EV6Gvgx+m/11ynvueehGaUvQkCO2v1KpATl4K+wEo=)
8: geP9toPWAOd-61VI__Y1Av416ac.roa (hash: 1O2o1nFJwlxv6rt2UEY74JBc/AG0NZbX/IF9C2wOTds=)
9: tyq7k6T4xEqQgbGkJ2fusYhPOJQ.roa (hash: IGWJpPuzQqbP565czDocwJaMa5FKL3JQeJDF/Y2DnIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b0:46:9f:56:e1:d8:59:c0:4a:1b:dd:28:24:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=4422e519133705b763599147235a1818db9a205b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:d4:fd:69:c3:55:e5:a3:4d:53:3e:5d:19:
d2:ab:cd:12:6b:59:67:1b:5b:2b:85:00:13:1c:7b:
2a:67:6b:54:12:fb:73:15:9c:1f:eb:0e:d6:7e:7f:
be:e8:9f:a8:e3:86:ee:c2:6a:eb:6e:b2:e8:0e:57:
40:5b:a9:12:a3:d3:8e:24:1c:70:f0:05:08:7d:39:
1e:8b:73:70:1e:7b:f7:81:41:31:74:84:ce:07:07:
3a:f6:cc:8c:de:7b:60:ca:de:f7:c6:2c:f1:06:f2:
a0:ed:36:e3:48:a8:84:60:ea:7c:b5:fa:6f:49:28:
d5:a5:e4:a8:2e:dc:ca:25:66:60:ad:9e:e4:83:90:
2a:4d:af:8e:42:fa:30:59:3e:31:34:43:97:4f:8d:
57:98:aa:48:01:df:ff:f6:31:d3:f0:1f:0c:07:6b:
f5:01:5b:e9:34:da:60:c9:76:08:89:ca:50:34:1a:
13:d5:a4:cd:a1:48:5f:89:9c:6b:9b:bb:cd:c1:78:
0c:3d:ae:e2:c5:42:e9:31:94:74:c8:e5:60:6f:f4:
9d:3f:3a:db:e0:df:b7:7b:5f:d8:00:d6:31:24:ff:
ca:82:25:e2:44:b8:39:2d:cc:3c:a4:7b:82:8e:ab:
88:ee:fa:bc:b4:2d:71:eb:43:e1:09:bb:38:de:73:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:E5:19:13:37:05:B7:63:59:91:47:23:5A:18:18:DB:9A:20:5B
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:46:6d:f0:d4:d0:14:a1:9a:43:5c:74:d0:b5:b1:23:3a:57:
77:85:b2:3a:44:33:68:92:5c:95:d7:7d:e3:04:1a:3b:55:89:
ea:9f:8f:00:b1:6f:9c:84:84:7a:47:08:12:7c:05:3e:60:83:
8b:9a:ce:cb:18:63:21:a9:88:60:88:06:67:de:fe:cf:65:48:
19:30:43:51:cc:6e:f3:60:a0:9f:5a:8d:9e:87:63:9b:5b:d6:
eb:db:b8:4a:8b:5f:08:08:bc:24:85:2b:b5:05:80:51:34:91:
90:63:aa:df:c0:76:e6:83:3e:bb:02:49:ac:c3:f2:aa:cd:c6:
25:c8:1f:a4:e8:df:96:73:c2:c7:30:ee:84:16:d7:d9:63:35:
76:56:8a:ba:4b:f4:6f:a0:4f:79:31:a0:a2:4c:af:93:18:7c:
5c:49:65:fa:40:41:ba:62:63:8b:22:82:bd:3b:c2:ed:85:0d:
5f:1b:e3:2c:92:6b:3c:c8:22:2e:92:a8:83:8e:98:d6:e1:78:
53:37:d2:ed:b4:e9:8d:66:51:ef:da:25:c2:26:b9:0d:25:f0:
36:12:69:f7:7e:4e:2b:d9:13:1c:a6:4e:f2:09:0a:d1:b2:c6:
25:e9:00:8d:34:ea:24:6b:e6:ad:c9:90:d2:29:02:f4:55:88:
8d:0d:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client