Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier: r6cSRcu+wG1H2Y7vQQfE/q/+AzwBBNnfQ4rg5fXU0RA=
Subject key identifier: 42:9E:47:60:77:85:56:DD:18:8F:8C:74:A5:D3:8E:A3:AD:89:BD:45
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 019A4C97D3BA263A4B9F572A93B48F0C15DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number: F2
Signing time: Tue 04 Nov 2025 02:00:09 +0000
Manifest this update: Tue 04 Nov 2025 02:00:09 +0000
Manifest next update: Wed 05 Nov 2025 02:00:09 +0000
Files and hashes: 1: FY7QWCuQ2yFMrpW5CuJdxAmkzSw.roa (hash: AB9HFdZnng1zkUR8S06NGbzzkAsazP428CDB2YNMgMs=)
2: SkLbl8YMptduMoSvRhFLVbTWkfg.roa (hash: rZ8+bmgPCyg6PTvkE0HDGH20U6oeO7+aQZ45eviGwsI=)
3: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: R7gb1MzczMMrtoizuOj0T7TNLbAlbfhDor0sHm3RH7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:d3:ba:26:3a:4b:9f:57:2a:93:b4:8f:0c:15:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Nov 4 02:00:09 2025 GMT
Not After : Nov 5 02:00:09 2025 GMT
Subject: CN=429e4760778556dd188f8c74a5d38ea3ad89bd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:7b:d4:ca:e1:ec:49:26:22:f1:86:12:9a:
d9:67:2d:21:17:5a:64:20:f3:25:ba:fa:55:e9:b5:
8e:86:19:65:9e:55:9f:fd:90:17:b8:10:9b:5a:c6:
de:a5:e9:4e:34:32:97:f0:3a:b0:38:2a:08:47:56:
87:e1:7b:d2:3c:a9:27:50:91:ff:23:cf:1e:7d:de:
eb:a2:a0:e8:48:14:d5:3a:7e:f3:4f:09:45:ae:11:
0a:d0:b1:55:28:d4:a7:09:fc:f2:2f:b8:6e:a6:74:
df:f5:27:0d:34:dc:89:0c:69:04:81:4a:5c:53:cb:
a6:4d:ab:1b:05:0f:57:75:e1:30:0e:c1:02:9a:c8:
9a:5d:be:de:97:b8:ce:aa:77:e7:4e:ef:bb:d3:10:
10:68:b3:28:d8:db:67:db:99:9f:bb:b0:b6:86:2b:
e3:b0:f2:67:d6:c4:1c:cd:64:c4:4a:54:c0:b0:98:
d0:e7:cd:5c:82:d2:69:d5:a6:40:71:19:5f:da:cf:
30:61:61:81:0c:6b:42:a2:6f:92:05:a1:48:49:5f:
f1:83:2a:c4:d8:c2:b0:4e:88:5f:b8:95:c6:3b:a9:
be:20:3b:fa:88:15:1a:b2:35:b7:80:35:df:78:f9:
4d:30:c3:52:77:d7:de:4a:b8:07:b1:ba:77:51:15:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:47:60:77:85:56:DD:18:8F:8C:74:A5:D3:8E:A3:AD:89:BD:45
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:c1:dc:43:a1:67:9d:8b:d8:05:1a:e0:fd:23:72:92:2c:
4c:30:24:be:33:73:eb:c2:2b:99:02:43:a7:e9:82:d9:a1:e6:
e7:de:e9:2c:1b:5a:af:88:0f:44:a3:ac:b4:e8:0e:37:f5:07:
be:e5:5d:80:25:c3:b0:b7:e8:63:41:ef:48:e8:3c:80:80:f6:
2c:cf:4c:20:eb:24:fb:ea:28:fd:ae:aa:57:46:d1:04:e0:1b:
d9:b5:3f:7a:58:87:e2:e3:e0:ee:19:34:b1:9f:50:24:15:21:
44:51:54:bb:79:60:60:73:13:ec:82:fa:f1:36:af:74:fe:9f:
a9:e6:c6:27:b4:eb:4c:53:fb:52:92:48:3f:88:0e:94:8a:62:
17:88:d9:2e:2c:0d:48:65:99:93:dd:8f:99:7f:d7:eb:3f:20:
4a:25:c1:7b:7e:5e:31:8a:47:60:84:28:fb:7b:e7:74:90:06:
b9:e6:93:15:33:f9:5b:c4:17:d2:43:62:48:eb:53:cd:fc:c1:
35:83:01:2e:c8:6c:e1:73:60:a4:ca:7d:ad:74:e3:67:53:18:
af:77:04:17:09:25:20:50:67:9b:8d:99:14:14:6c:dc:53:83:
11:9c:60:7a:1e:f4:e4:a0:ff:9a:e9:d0:50:b1:4a:31:08:85:
17:09:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:18 2025 by rpki-client