Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
File: eIGF2YREhCtpfiv97jlgqT8nru0.mft (raw, json)
Hash identifier: L2I/antDc/e3gatuxdXAo1z3a5rJ9OuC9jK2jKLXwRg=
Subject key identifier: AD:43:1D:B4:6B:9D:A5:06:3C:79:4A:62:B7:69:F2:D0:FB:16:D2:BB
Authority key identifier: 78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED
Certificate issuer: /CN=788185d98444842b697e2bfdee3960a93f27aeed
Certificate serial: 019A73382E294195E340CA067B4961D9C26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
Manifest number: 0178
Signing time: Tue 11 Nov 2025 14:00:52 +0000
Manifest this update: Tue 11 Nov 2025 14:00:52 +0000
Manifest next update: Wed 12 Nov 2025 14:00:52 +0000
Files and hashes: 1: eIGF2YREhCtpfiv97jlgqT8nru0.crl (hash: ZNoy6+svv5lKOm/02gMrDc5OW2xPEv2N78X/9oCijnc=)
2: vs1dOMKwDJJ5uaYkiRvlWR6leYM.roa (hash: Qar6zUY49SmNjrFs4ROqa7Zsokz8zuJ+RB9gpxiLG9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2e:29:41:95:e3:40:ca:06:7b:49:61:d9:c2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788185d98444842b697e2bfdee3960a93f27aeed
Validity
Not Before: Nov 11 14:00:52 2025 GMT
Not After : Nov 12 14:00:52 2025 GMT
Subject: CN=ad431db46b9da5063c794a62b769f2d0fb16d2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:1b:a0:4d:f1:86:1f:cf:3e:8b:41:dd:79:
1c:9f:29:ec:da:51:b0:98:3f:01:d1:8f:2d:40:35:
01:9a:95:3e:49:de:60:97:c4:c3:21:d4:f1:32:d8:
88:b6:ef:76:de:b1:19:8f:d3:38:37:41:64:2d:d7:
1e:41:60:ed:53:3f:5e:b7:db:2e:d0:fe:30:7f:d5:
be:cc:17:61:27:1f:e3:36:f9:46:36:8e:b0:93:14:
75:29:21:ff:0c:14:70:0a:28:79:c0:71:f8:1b:59:
40:37:4e:33:79:1b:b9:07:5b:04:e1:06:2d:8a:e3:
61:ad:52:22:c9:3a:19:ba:73:1b:a5:0b:5a:fc:60:
ab:d1:18:0a:76:fc:8c:5b:9f:7a:1f:c9:ca:70:53:
7f:2d:74:77:b5:4c:32:ae:73:5c:0f:63:2d:13:91:
a3:d0:df:07:5b:d0:43:d9:f5:d9:ea:a3:92:82:59:
98:75:ed:88:b6:7f:a6:72:d3:bb:19:d9:df:cb:b6:
ea:d8:d5:f6:74:86:55:a3:c2:2e:84:d2:6e:68:85:
67:82:15:17:34:28:b2:91:55:06:ea:50:6e:ae:53:
fd:c4:a2:ea:18:6a:81:ef:5f:40:07:d6:75:4f:63:
81:93:87:e2:77:f7:98:b4:77:c4:b7:f1:9b:1b:31:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:1D:B4:6B:9D:A5:06:3C:79:4A:62:B7:69:F2:D0:FB:16:D2:BB
X509v3 Authority Key Identifier:
keyid:78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:6f:f8:4b:ef:97:a6:64:41:9f:83:aa:63:24:67:c7:68:
a5:6e:c8:86:cf:1c:f8:df:7c:ab:7e:cc:88:81:9a:35:55:b4:
79:e7:87:a9:a1:a8:92:47:66:df:0f:41:8b:75:96:3d:cd:cb:
0e:45:d2:18:b7:87:bd:ea:9b:c3:de:c7:47:09:f7:68:19:d0:
14:a2:f5:9d:e1:ba:c3:42:75:ef:f6:fd:cc:82:88:40:2f:c7:
d4:d8:ce:34:f1:7d:b1:64:c8:82:30:df:3a:60:8a:2b:01:11:
14:cb:1c:5e:be:d7:27:40:ed:59:fd:86:ae:46:73:83:5a:ec:
46:f5:8a:3c:d1:41:c9:1c:1e:d8:a8:92:0f:fa:8b:17:ef:b0:
f8:b7:58:0b:d2:7e:9a:ee:04:ca:cd:96:c1:7c:21:e1:62:2d:
b0:63:0c:c2:ce:1f:be:5e:61:6c:1e:e5:70:4f:63:74:9c:a6:
e2:a5:31:2a:f2:ba:dc:80:ff:28:f6:ff:5c:fe:77:f8:23:5f:
fc:99:6d:76:b1:c9:50:a9:46:75:f6:c1:92:ce:7b:49:1d:2a:
06:b7:e3:78:7a:85:40:1a:cd:ec:1a:41:8c:0e:51:aa:82:9b:
a6:e8:e6:49:d9:71:91:16:9a:fc:7f:41:92:d4:5f:93:73:28:
e4:cd:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:29 2025 by rpki-client