Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
File: egoGVk08cX0tbaoegzxJWXawuto.mft (raw, json)
Hash identifier: HgkRYS800xByWRQ7B0xVyq1LFE5A+xrlyn+zu/93UOY=
Subject key identifier: 2E:B7:FB:6E:47:BA:37:3A:74:97:7D:B2:DA:C2:16:58:6F:F6:67:04
Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Certificate serial: 019A73016B0921CED199695124954230E355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
Manifest number: 15BF
Signing time: Tue 11 Nov 2025 13:01:04 +0000
Manifest this update: Tue 11 Nov 2025 13:01:04 +0000
Manifest next update: Wed 12 Nov 2025 13:01:04 +0000
Files and hashes: 1: 2bWZH-siKv9yamXLxhMW4gBTBXs.roa (hash: xWCLh4hIiubp753R08bjE0GaWYotTbdn6hf3WZPct+A=)
2: 7IdkztL4D2rd1OWu-Fwdy4TrVLU.roa (hash: dbyo4ZfaUk/gfa7oD7KrfiLAvIhYyozL2QxpQuJXGrE=)
3: egoGVk08cX0tbaoegzxJWXawuto.crl (hash: PdMJDZoY5MA1HHOJTqY8pS3efxAp4zt1dzdYHf7xEqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:6b:09:21:ce:d1:99:69:51:24:95:42:30:e3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Validity
Not Before: Nov 11 13:01:04 2025 GMT
Not After : Nov 12 13:01:04 2025 GMT
Subject: CN=2eb7fb6e47ba373a74977db2dac216586ff66704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:9c:6f:21:f4:4c:ea:c6:29:e2:b1:b4:59:
94:b5:fe:5a:7c:6f:64:a5:39:e7:ab:53:53:d9:13:
ea:43:b8:08:a6:68:2b:96:90:45:b6:f5:5c:b3:eb:
17:fc:07:88:b6:23:ba:f3:3e:e9:27:da:5d:15:86:
8a:d6:d3:56:cf:cf:28:eb:90:ca:eb:78:4e:a3:0a:
a6:62:28:d4:84:c9:50:93:20:d5:9f:11:f8:6a:1f:
e5:a0:9e:4d:00:c8:b6:20:ad:53:08:3e:59:10:ce:
62:11:c7:c6:66:ef:f5:e8:58:90:4c:9d:3e:1f:f4:
75:05:21:2e:46:bb:93:1d:b4:dc:a5:a3:16:65:b3:
e7:3b:72:33:86:59:4b:44:f1:a8:37:d3:a7:69:27:
25:15:1d:3a:02:3b:22:f0:dd:70:e8:d9:f7:49:13:
36:1e:45:31:99:ec:3a:ec:5d:3a:ac:bb:4c:a9:24:
40:42:8f:83:dd:62:84:da:26:ad:dc:6e:64:f0:96:
bf:9c:c9:17:53:a8:77:9f:e3:a3:fa:3f:ba:e1:5a:
b0:65:62:e1:71:ce:57:45:8b:b8:8a:c7:53:50:2f:
69:d5:df:40:69:90:a0:02:dc:c6:2f:ab:b3:84:a5:
df:98:62:1c:94:53:9b:98:c4:01:7d:3e:29:32:6b:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:FB:6E:47:BA:37:3A:74:97:7D:B2:DA:C2:16:58:6F:F6:67:04
X509v3 Authority Key Identifier:
keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:d7:91:bc:83:1c:95:ae:02:4d:84:62:2f:f0:95:74:e6:
55:3e:35:b7:60:45:c7:cd:fa:97:fc:03:85:05:bc:02:bf:2d:
87:bd:a8:8a:28:d5:ae:64:e9:35:53:42:fd:04:09:54:79:4d:
17:8c:b4:cd:b3:7e:fd:31:84:44:bf:96:c5:ba:0f:cc:d7:04:
c3:41:80:0d:c8:de:8a:f5:b1:02:10:79:a7:42:c8:15:93:fd:
25:74:cc:db:31:ef:77:0a:57:88:c1:3c:95:5b:96:e6:e1:9c:
2e:24:71:ef:32:4a:32:96:14:cf:e3:cc:b1:6a:3a:87:72:b2:
91:6b:03:f4:ed:c0:62:fe:4e:0a:47:81:9f:70:3c:45:7e:28:
c3:39:d1:12:37:39:6a:3c:20:fe:c0:7e:bd:3a:5c:48:a6:16:
b6:53:60:1a:23:08:d5:e8:3e:b2:70:ee:e7:33:35:f3:b2:40:
39:99:fd:5e:72:4d:e2:88:74:0a:56:0f:dc:6b:a3:d6:dd:9c:
8c:88:8e:2a:6a:89:97:39:8d:b0:48:4a:c6:08:f2:df:62:e1:
68:54:2d:5d:10:e8:52:bc:ef:c7:0d:3a:e3:8a:ba:db:58:bd:
89:1d:67:46:8a:47:ea:82:c7:c4:d2:35:73:29:5e:ef:d6:9a:
dd:69:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:41 2025 by rpki-client