Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
File: EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft (raw, json)
Hash identifier: yMeTxSYIuIH0pEkFv3kQHWjrnQd7lybPjd65SwAyu6o=
Subject key identifier: 63:D5:4D:A8:DC:82:EC:20:C9:F7:0A:70:72:1B:71:1C:31:6F:17:40
Authority key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
Certificate issuer: /CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Certificate serial: 019A72933CF60BD7579A5B5D9554657D9C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
Manifest number: 015C
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl (hash: 7a5b0ClmNcsnX43iF+Oguk49v/zwOyGgKNyWmPwFmc0=)
2: cJMqlk4t_npV762YA6G1Urn8YC8.roa (hash: +q/bgqa1jjCMji99qFxLyo61sIU915VzUhks1PlXN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3c:f6:0b:d7:57:9a:5b:5d:95:54:65:7d:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=63d54da8dc82ec20c9f70a70721b711c316f1740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:6d:96:12:ec:92:3f:05:48:52:45:c8:25:
23:16:86:5f:9e:cc:19:e0:62:13:cb:84:e0:5d:54:
c6:d5:b4:cf:b9:b6:8c:e8:33:9c:61:18:28:90:3c:
58:a4:c2:03:ad:ab:89:b2:bf:c2:77:90:f3:b3:09:
d9:4f:3c:0f:08:f4:2a:a1:10:c6:f8:22:4b:c1:a9:
93:8f:ce:a5:d6:05:c6:85:21:ed:37:8e:84:a1:b0:
70:65:be:0d:a4:38:5c:e5:c0:09:fc:44:d7:6e:c3:
1f:f1:6f:9a:e1:9c:ec:b3:49:f0:a3:d7:39:69:31:
a6:48:4f:fd:75:f1:ed:80:24:1b:76:a4:3a:4d:f6:
34:48:c0:89:06:21:90:08:14:f9:3c:33:2c:51:ae:
34:4f:be:35:49:80:4c:e8:8c:aa:08:63:2d:46:6a:
52:d2:76:c3:22:75:da:b9:7e:69:42:e2:88:d7:12:
38:d5:58:48:ae:52:f8:df:a2:05:4f:e8:11:9f:fe:
bc:ff:bd:12:bc:bb:ec:9c:25:71:7c:8a:15:b2:ce:
62:84:68:fa:ad:7a:2a:93:68:cf:fd:01:88:44:5b:
0e:64:81:da:59:9d:8f:0d:3f:0d:f1:ac:40:5c:44:
66:47:81:d3:d3:69:9a:6e:2c:b5:37:6d:3c:e4:89:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:4D:A8:DC:82:EC:20:C9:F7:0A:70:72:1B:71:1C:31:6F:17:40
X509v3 Authority Key Identifier:
keyid:12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:10:30:c7:e4:9a:0e:e6:37:77:da:1d:6a:58:d6:37:7a:98:
a5:1b:84:50:56:71:49:36:5a:ab:cf:d8:64:b4:c8:69:55:81:
1d:74:d5:81:0c:fc:09:15:83:53:5e:c6:3e:f1:43:14:38:ee:
fd:84:33:b6:f2:65:d5:e9:85:f8:48:99:7f:d8:af:61:14:12:
b6:2b:7a:36:2d:8e:0b:03:d9:97:06:e0:e4:00:75:d9:cb:cb:
c3:7f:61:b5:6e:63:34:92:2c:00:bc:11:70:0e:59:4f:85:6c:
f2:b6:6a:87:38:d8:a9:a6:0b:58:41:64:07:a1:cf:9f:d3:64:
59:10:3e:27:17:16:a7:ae:9a:e3:78:fb:eb:21:85:73:e3:19:
eb:4b:e1:8b:6a:d1:41:83:5f:f4:1e:4f:4b:36:82:c3:4e:74:
0e:6c:ce:2b:f8:4d:f6:f6:46:4c:35:6d:50:98:5a:ee:b1:19:
18:03:a5:63:5b:58:99:4c:af:8e:55:8b:40:72:8e:ad:bc:5b:
cb:ba:ef:9f:31:14:49:fe:3c:05:c6:8a:b1:db:06:91:6e:d9:
56:ee:d9:83:1e:45:d4:55:e0:9c:3d:26:0e:b5:fb:13:6b:c1:
c8:95:02:2c:16:0c:8d:35:ff:1d:28:1b:7a:e5:7b:3a:fa:ce:
79:da:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:49 2025 by rpki-client