Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier: o2btmLGPJj9pt+gv8lztjWJuE5ewwafQJqR1eN2liIA=
Subject key identifier: ED:25:23:C9:21:E1:2E:94:2B:C4:29:D8:99:2B:53:AC:4E:BC:DB:84
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 019A71EE8244F2BA4382E78ACDD63217C084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number: 121D
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: UkvE1AtgzFaEZZjsZiVXyyLbs5o.roa (hash: y7S6KVTG3N2Xe5Mq5Th3G1Pm17a7WWjgGUAMC2Q3dUs=)
2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: FhY9Tjl/AiA5lEh1j7gd1WRT/s54C0vy62WGl7f2jgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:82:44:f2:ba:43:82:e7:8a:cd:d6:32:17:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=ed2523c921e12e942bc429d8992b53ac4ebcdb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:17:f4:50:3a:32:82:ad:f9:2d:da:29:d2:
20:05:82:5b:f6:a3:29:1c:4d:9e:e9:6a:b4:30:34:
9a:19:60:76:f3:a2:57:0c:34:58:be:7b:98:75:17:
93:f3:e8:86:38:63:1a:26:5b:1c:67:00:fd:1d:db:
68:94:c1:bb:66:fc:b3:c8:a7:3a:66:c6:c7:26:a9:
1b:8f:b4:0b:26:32:fa:93:25:77:b7:0e:ce:c7:1d:
da:b0:81:58:91:61:a3:ff:8b:73:d7:9d:62:75:44:
5d:87:04:ca:6d:db:ce:69:1c:05:c2:4f:fe:0b:04:
12:19:7e:c3:b4:3a:c7:c8:4e:1b:d8:82:4c:63:5e:
f6:88:f5:e7:e3:bd:5f:22:ce:17:29:22:3d:2b:2f:
2e:7f:da:9c:bc:a4:16:c7:2a:01:3a:12:67:fd:56:
bc:5b:2d:e6:bd:97:74:df:c6:94:b0:11:8a:5e:27:
73:f8:6b:9e:9a:92:74:67:3d:7d:e8:e1:df:49:68:
a1:36:68:50:2a:37:29:96:54:9c:c8:8e:39:ab:98:
b3:28:1a:d7:39:77:0d:ee:e1:b8:2f:88:28:79:e7:
ae:cf:02:3a:55:b1:4b:e2:5d:90:16:18:2a:05:ac:
12:7e:b6:51:ad:19:3b:3b:14:1e:d4:2f:4e:15:dc:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:23:C9:21:E1:2E:94:2B:C4:29:D8:99:2B:53:AC:4E:BC:DB:84
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:60:ea:ca:31:4c:90:94:7c:f2:fc:f6:6f:f0:2b:38:c8:
65:70:da:e6:a0:f1:d2:2e:a6:39:dd:93:c5:30:8e:e1:65:68:
74:04:06:2e:f3:fe:ad:70:02:5f:3c:c2:2b:4f:13:83:10:c6:
ff:40:d3:ff:fa:e6:6c:dd:f2:ee:33:ac:5b:d8:ec:94:59:27:
54:0e:8e:64:9a:ae:16:0e:08:81:a2:43:64:a6:71:2a:b8:77:
8a:0a:7a:cf:03:d3:1a:a9:0a:59:a8:66:1e:54:b3:b7:8c:38:
c5:87:0f:7f:94:d3:71:1d:d8:3a:57:66:bf:48:00:91:51:5c:
88:aa:22:af:e3:fd:e5:d1:c6:72:6e:29:8f:28:82:6a:78:ad:
8a:5c:86:00:b2:bb:ea:db:5e:41:3a:4e:e0:c3:14:8b:18:fe:
08:06:a6:38:73:ee:41:e5:7d:4e:7d:e7:d5:d1:f8:03:1d:99:
c8:d8:32:f9:18:5a:7d:8a:20:51:ff:f0:4f:c9:19:7e:93:0e:
86:92:49:ad:a7:80:80:2d:c2:50:51:c3:68:d3:f5:c8:bc:c5:
be:5e:94:d4:93:0c:2c:71:35:d3:1f:aa:d9:68:64:d7:49:56:
79:68:4a:43:ed:d0:cb:35:3c:45:35:b3:4e:86:1d:a7:ef:79:
a7:d4:90:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client