Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: 2CEurK7aUOTGnYIIGLTE9qLirKfA/tubnur9Vi2BDM0=
Subject key identifier: 5E:CC:D2:49:CF:2B:60:F4:6B:9A:1B:E9:3B:DC:CC:42:3F:98:EF:6A
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019A706E1FA60381D22FDE49D69E9ADFF6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 142F
Signing time: Tue 11 Nov 2025 01:00:56 +0000
Manifest this update: Tue 11 Nov 2025 01:00:56 +0000
Manifest next update: Wed 12 Nov 2025 01:00:56 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: H1T0kNi6VzLFyed4NYTLLpF/9eP5v9F+xx9u7ikuebQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:1f:a6:03:81:d2:2f:de:49:d6:9e:9a:df:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Nov 11 01:00:56 2025 GMT
Not After : Nov 12 01:00:56 2025 GMT
Subject: CN=5eccd249cf2b60f46b9a1be93bdccc423f98ef6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:b4:d3:20:e5:e7:87:6f:e9:33:ff:be:a3:
18:f9:44:60:9c:f9:b5:40:85:ee:36:3a:90:92:63:
d9:1d:c4:c0:f4:a6:d5:fd:0f:53:22:21:5f:c7:07:
96:ed:4b:56:37:a0:3e:e7:71:f7:ce:64:15:7e:b3:
33:e7:5c:8b:5e:9a:8c:2a:00:9a:db:be:d5:0b:e4:
f1:b5:4c:c4:0a:5d:b2:b2:77:5a:31:b3:38:6c:c5:
05:72:fd:53:20:b0:36:d0:ce:ee:4b:ee:ef:83:38:
eb:9e:cc:bd:c6:2a:20:e5:36:21:e6:a1:54:02:a2:
1d:42:a7:9e:4a:f6:7a:89:8e:c1:2a:4c:54:10:d4:
f8:59:5d:77:e1:98:84:51:b0:80:d5:3a:71:01:3b:
e0:1c:78:a7:4f:a2:6f:c7:9f:05:a5:46:58:11:4f:
f8:15:ac:6a:22:a1:a8:61:31:a5:90:05:da:cd:54:
39:8c:06:8c:6b:71:49:2b:cc:96:91:9b:5f:5c:54:
fa:6b:d7:12:4d:40:58:db:9a:5f:e1:d6:d1:ad:0b:
45:22:12:e3:bc:46:1a:6d:38:ec:7d:b9:d9:9e:29:
8f:7d:61:5f:78:9e:01:7d:34:05:f6:f0:ee:2d:b1:
44:91:24:b0:8d:72:07:e5:02:73:ba:ed:18:df:ad:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:D2:49:CF:2B:60:F4:6B:9A:1B:E9:3B:DC:CC:42:3F:98:EF:6A
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e1:a0:61:57:25:37:14:28:c1:b6:b2:f0:c8:20:f9:6c:81:
68:76:de:89:61:7a:8a:90:a2:9c:68:de:ec:bf:4a:30:68:88:
ee:46:03:3b:f4:9d:2a:74:a1:eb:a2:e5:5f:28:a6:de:f9:e7:
6f:7d:cb:c6:cb:38:cc:4f:d5:9f:d3:c8:97:d6:97:7d:89:76:
19:45:3c:ce:1d:07:e6:64:7d:95:f7:e8:dc:71:b4:4d:64:72:
8b:3f:7b:2f:3f:18:33:0e:71:44:29:26:0f:1d:c8:03:cd:17:
c1:a0:cd:64:ba:86:37:29:b9:43:5e:f2:89:bc:b7:7b:86:13:
11:82:c1:77:d2:31:30:66:85:b0:a5:42:ca:bf:50:71:fe:f6:
97:82:bf:5b:c5:c2:0c:79:84:4c:13:1a:00:b3:cb:4b:62:fa:
89:f4:cc:95:e0:e0:93:c1:a6:e0:5a:16:ee:da:7f:f8:ea:80:
73:29:3d:95:7d:82:71:e0:1d:22:33:c2:d0:ee:c2:09:0d:ca:
d1:46:e3:bf:c4:b5:19:90:2c:28:6d:8d:85:74:fa:24:6d:12:
53:65:c5:b3:0f:7b:8b:71:43:59:df:34:42:e7:c5:21:01:50:
8a:c8:5a:8f:f7:c3:b9:2f:c8:6a:16:6c:ac:1a:13:2b:4f:34:
84:ff:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:21 2025 by rpki-client