Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: ChPNvxEV5SQ5EBXZnUiaI1x+y/f9cCi+/vxmcec6928=
Subject key identifier: 49:55:14:DF:06:FA:26:61:AC:6B:7E:98:FC:2B:72:55:6A:3A:74:95
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 019A71B78AF95BAEC5A377351551C0491C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 03EE
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: PqAlj8UZWva6pmYp3fRNAo9DJNkChGRHaGxd9flntbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8a:f9:5b:ae:c5:a3:77:35:15:51:c0:49:1c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=495514df06fa2661ac6b7e98fc2b72556a3a7495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:c2:5a:8d:3a:6f:f2:d9:83:93:fa:54:4e:
56:e8:c1:25:1d:05:c9:40:0a:8a:60:85:d1:e1:c0:
54:28:5e:15:78:55:47:df:fa:9a:ff:f9:32:d4:50:
eb:54:0b:d5:06:43:67:26:7b:05:e3:1d:e3:fa:9b:
d2:71:17:f4:e9:be:33:2f:f2:0d:76:60:99:54:d0:
99:10:0e:63:95:bf:0b:91:62:87:23:1b:a4:12:62:
34:91:a9:ce:47:32:bf:10:c4:b2:47:d7:9b:03:ac:
58:95:22:69:ae:b7:05:a0:15:27:e5:25:8b:93:9d:
15:21:cf:e8:fb:d7:71:57:9a:73:bd:2c:45:55:1a:
62:6e:58:ef:1b:d8:b0:d7:b3:55:05:7a:d3:3a:22:
5a:dd:ae:b7:30:66:65:86:36:56:e1:a3:52:f7:7e:
5e:ff:79:37:21:08:55:53:83:3b:61:3d:c1:1c:f1:
cd:a3:ea:d2:e8:18:72:35:82:af:c5:37:e1:b6:13:
83:1d:27:a2:11:04:1f:78:06:a3:4c:67:b5:a5:da:
de:ba:ec:98:33:fd:c1:1c:e3:4a:02:6a:33:de:44:
17:43:b9:16:a6:94:f5:1a:3b:2b:69:b6:e0:4e:c6:
ba:0f:b4:ff:b0:0d:e1:e2:be:b6:96:cd:9d:c6:c6:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:55:14:DF:06:FA:26:61:AC:6B:7E:98:FC:2B:72:55:6A:3A:74:95
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:2e:97:dd:d1:06:26:76:9d:49:6a:1b:b0:52:b9:c2:4d:
8a:3c:e4:d3:e7:51:ac:68:35:25:43:3d:48:6c:b3:2c:28:0d:
3c:38:53:b6:66:ce:55:dc:96:ff:ee:51:d5:b8:67:ae:85:65:
a4:8a:77:ea:2c:54:88:ad:be:be:a0:d1:3a:5d:e9:dc:f2:76:
60:ab:c1:20:d0:59:34:d3:53:27:49:ae:9b:a2:af:2c:34:fb:
50:fb:a2:00:43:cf:fb:3f:00:a0:41:c0:c9:ec:fd:27:96:67:
15:52:c1:03:40:06:c6:29:e3:7d:5d:dd:11:db:4c:ff:71:2a:
e7:cd:15:22:0e:7d:5a:d2:be:49:84:0f:60:54:e3:a7:f7:8a:
47:06:95:b7:16:91:99:81:27:4d:bf:c1:d1:8f:4e:c6:61:d0:
f1:73:e2:c0:6e:26:d5:30:4b:86:c2:e5:02:79:58:e7:35:d0:
e2:f2:fb:22:47:03:62:51:56:d7:b1:58:17:5c:e0:c3:fe:d4:
70:22:3f:b4:04:48:4f:f6:53:0b:3c:1d:ab:7e:15:26:4a:93:
d7:52:ec:8b:31:98:dd:9b:2b:b6:9d:16:29:b4:90:dc:41:12:
47:d6:1a:34:ac:2a:de:32:9f:f0:39:be:9e:93:fb:93:7e:f0:
7b:2f:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:16 2025 by rpki-client