Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: B7D3WVOOyjuLITLRvHlpJcHOSw7uqD+36yZFXinnx+Y=
Subject key identifier: E0:1F:30:85:30:EE:C5:05:B4:EE:E3:FA:8A:B8:90:5A:42:26:81:BB
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 019A71B77AA36188E30A9D3FCB0AFF22F4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: +uOk5mkBOdEzfpA1SKbBoC1hKVWyACx0qjqB8Wz06yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7a:a3:61:88:e3:0a:9d:3f:cb:0a:ff:22:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=e01f308530eec505b4eee3fa8ab8905a422681bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:86:d8:87:79:2f:d0:5b:f9:4b:78:62:2e:
3a:42:37:e9:84:c4:41:e5:ce:cb:8a:34:e7:33:2e:
25:03:5d:63:b0:63:84:e2:2c:ca:6c:ff:6c:6f:d6:
21:de:4d:f4:9a:55:aa:90:85:62:41:3e:73:5a:83:
a6:5f:34:91:65:d3:28:56:1c:18:75:9d:d8:20:7a:
28:c3:05:a9:65:60:ba:6b:a2:d4:3e:04:68:a5:51:
90:44:5a:2c:ac:e1:6f:bf:26:d9:5d:25:b9:ed:71:
5f:46:ac:1e:8b:a8:75:49:0e:22:7c:73:cf:d4:dd:
d5:2b:76:50:c0:7f:40:df:e3:43:fd:66:ce:a1:89:
db:64:4f:81:5c:f0:56:1a:43:d4:1d:d7:c4:c3:1a:
34:95:93:b3:e1:5a:74:dc:b9:8a:82:66:d1:54:2c:
e4:e6:d6:2b:c3:25:03:bd:be:cc:bb:63:ac:52:1f:
69:f2:e4:cc:67:76:44:0b:1a:56:95:02:fe:16:cc:
55:b3:86:46:05:2d:81:c2:31:fe:6f:e3:b3:ad:b6:
72:b1:b3:1d:e0:21:5e:7a:9f:8a:fd:d8:08:77:1e:
69:4f:86:e9:41:dd:c0:36:a3:f1:0d:94:aa:92:9c:
d0:82:cb:0d:4b:f2:cf:fb:28:79:7c:02:9a:67:df:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:30:85:30:EE:C5:05:B4:EE:E3:FA:8A:B8:90:5A:42:26:81:BB
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a3:8b:ca:f8:35:69:a6:17:a0:22:a1:1a:ef:f2:3a:44:8f:
26:b3:2c:f2:34:e3:aa:8d:d3:77:92:27:34:7e:9b:2c:65:8d:
87:46:f2:22:fd:25:43:7e:f5:be:5a:10:14:5c:7f:b4:02:2b:
44:2c:06:a0:27:6c:f4:07:91:93:01:5b:d8:89:33:45:15:b6:
d3:a5:7c:b0:32:db:0c:6c:7e:3b:99:7e:91:4c:31:0e:7c:be:
9d:b1:ef:f2:4b:da:28:e4:ef:58:15:21:fe:bb:29:f3:ba:e3:
88:fd:29:f9:69:6d:80:f7:8c:f3:2b:ef:f2:a2:e9:33:1a:8c:
56:5e:b9:b3:5c:ec:62:19:3c:45:0e:2f:e6:f2:16:b6:ab:a8:
8b:cd:03:b5:50:da:30:5a:4d:a4:8a:10:17:80:71:94:c2:b9:
ef:88:fc:2a:21:80:38:97:bf:bd:6d:f8:1d:d8:6c:c3:06:f5:
01:5e:1c:d2:19:cd:78:2c:5e:f9:1e:e6:8d:ec:a6:db:f7:f5:
5f:a2:9d:4c:50:4e:d6:16:f1:c9:20:d2:e8:17:8e:0d:54:f3:
16:00:03:69:3c:36:e7:b4:45:b8:73:46:32:f6:88:19:cd:2b:
a2:66:0d:dc:32:e9:64:68:c1:89:67:58:ce:ff:7a:f9:72:61:
98:47:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:13 2025 by rpki-client