Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: IoLOE1v/so+4EliIxSHTu4Pisrt/lZ/tOBHFGVoZNYE=
Subject key identifier: 2A:20:0A:4D:F4:1C:2C:65:BF:30:00:74:9B:C8:8C:EE:4F:42:53:E9
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019A722680FBB03593D041C333599CD234EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 05C6
Signing time: Tue 11 Nov 2025 09:01:57 +0000
Manifest this update: Tue 11 Nov 2025 09:01:57 +0000
Manifest next update: Wed 12 Nov 2025 09:01:57 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: n4ofMnxb7ZtN4vUgr8oqLT+0USBux+efTxvBupIU/fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:80:fb:b0:35:93:d0:41:c3:33:59:9c:d2:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Nov 11 09:01:57 2025 GMT
Not After : Nov 12 09:01:57 2025 GMT
Subject: CN=2a200a4df41c2c65bf3000749bc88cee4f4253e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:9d:98:a4:2d:ff:fc:f3:c5:75:31:90:2c:
ee:3a:f4:59:85:12:1f:d0:4b:5b:73:99:cd:08:d2:
ff:be:d3:65:ee:08:2a:e4:8b:95:85:b2:fa:ad:8c:
bc:ad:a1:c3:04:ee:d7:22:d9:3a:d3:0d:d9:31:02:
d9:db:3c:e8:1e:dc:e3:1e:65:a9:6c:1e:76:c5:f4:
c2:38:1c:6b:a5:f5:b7:2f:1c:ba:89:fa:e5:2a:9a:
b4:58:b8:8a:40:9b:93:8e:7d:30:ee:88:53:e4:5d:
c5:17:51:4f:dc:8a:e4:92:36:45:83:26:d5:df:55:
40:6a:07:15:a4:f3:e5:29:21:f4:f6:3d:e2:bc:b5:
26:28:e9:9d:1c:dc:0d:a8:df:0b:36:42:0a:cc:2b:
e1:d7:6c:ac:d9:6d:36:37:b4:cc:39:a3:cc:c8:02:
9b:45:46:7d:a1:ea:68:06:9a:33:37:17:cc:7f:52:
bc:7c:d4:6f:0b:f5:6f:f9:49:45:47:1d:dd:8b:98:
12:69:4f:59:27:ff:72:21:d4:58:a2:9e:a1:76:ed:
83:bb:74:6e:c7:b8:79:6e:98:ad:ca:06:2f:89:79:
e1:4d:68:5c:71:90:3f:44:13:f5:c7:80:d6:c2:d8:
4d:92:58:14:32:37:10:a4:87:cf:c7:7a:85:3f:98:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:0A:4D:F4:1C:2C:65:BF:30:00:74:9B:C8:8C:EE:4F:42:53:E9
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:38:4f:03:f3:08:ad:07:26:a9:11:47:7c:ec:4e:11:ff:14:
d8:b8:2d:2a:ff:88:f3:f3:82:6c:e9:2d:27:d4:33:4a:88:df:
b2:e9:aa:c7:27:42:76:46:e9:2a:18:75:51:ac:d1:c6:25:67:
db:09:cd:ec:34:b7:8c:b4:a7:5e:95:42:c6:a4:24:1a:4c:0a:
e8:03:d7:3c:9c:16:e9:25:7f:83:d6:a1:d1:7f:74:25:53:65:
03:ff:b6:44:9f:ae:c3:d3:90:f4:9a:1f:0b:af:ec:57:b3:9f:
f2:e8:50:97:ae:fc:a1:8c:3a:6f:30:19:87:f5:13:a4:c3:ea:
22:51:1a:b9:bf:40:3a:b7:51:7e:8a:ef:bb:99:3e:fe:43:86:
c7:99:96:7c:ac:6c:4d:77:e7:82:92:e2:ea:24:7d:44:9c:aa:
01:10:47:7a:0a:df:1d:19:36:2a:e8:b5:7d:e5:e1:e2:7b:aa:
f6:41:72:8d:84:c1:b0:14:7f:e6:74:a2:6d:b0:e7:72:47:1f:
5f:73:a0:d0:4f:51:b0:92:f5:0f:33:9c:ba:d8:b3:32:bd:31:
5a:cb:95:ec:64:e8:37:42:52:c0:a3:09:cc:66:3b:87:56:62:
79:04:dc:bc:22:24:32:c6:19:52:ec:a0:b0:2f:7b:ea:10:7d:
d9:2e:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:39 2025 by rpki-client