Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: NwqxRkfBAjJyzXVWnpoIP1Fepm6ii4XKZCLXhoPMBbw=
Subject key identifier: E2:D2:CC:24:AF:C8:50:81:2C:94:DD:63:57:D2:40:64:B9:07:49:D3
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 019A714A2A911F33A0BCC5F649C907923CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 0665
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: UDlXfCfrvJgfedYESamcXwqlGklzJx7g4EsFQ8MRfAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2a:91:1f:33:a0:bc:c5:f6:49:c9:07:92:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=e2d2cc24afc850812c94dd6357d24064b90749d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:6b:fa:f2:44:fd:8d:2e:b2:83:2f:b5:b8:
66:fe:80:4e:a5:3a:4e:1a:d8:98:e3:11:ac:c0:97:
8c:3b:dd:04:ae:84:cd:c4:c7:96:d0:15:a0:66:5d:
39:0c:b7:14:06:50:87:1f:5e:64:c2:05:0b:31:80:
34:d6:42:0f:9d:8d:23:d0:f3:16:f0:c0:72:88:af:
8a:fe:2d:10:81:30:aa:a7:3f:cf:a8:14:a7:2f:4b:
eb:24:e7:ff:ee:ed:d3:3e:80:da:e8:93:86:03:38:
ad:09:cd:ff:2e:0b:18:13:2c:d2:92:a9:eb:8f:8b:
e1:53:08:b6:66:c6:88:8f:17:06:5c:36:e4:c8:2b:
74:44:a0:d7:70:2a:9e:6a:55:e0:03:22:04:1e:81:
a9:e5:27:9d:e6:20:4e:24:63:a6:0e:f8:5c:f3:48:
5a:e5:ee:f4:bb:1e:29:41:0a:37:70:af:99:ba:dc:
cb:f5:f9:bd:85:73:9a:20:17:1a:7b:af:bf:d9:87:
f0:e2:b0:d3:ed:c1:c8:6f:b8:4b:46:f5:f9:c1:16:
c1:87:98:63:ff:3f:8d:67:3b:94:90:79:4c:38:3e:
63:e5:3a:96:08:a7:09:10:de:96:e8:4b:fe:fe:0a:
43:3d:e1:18:b0:80:4c:1d:b4:31:d9:87:41:e8:81:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:CC:24:AF:C8:50:81:2C:94:DD:63:57:D2:40:64:B9:07:49:D3
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ab:f5:c2:7d:ce:c2:df:56:a9:92:92:f8:80:3a:f7:75:0e:
9a:30:01:d5:b7:d6:9a:47:42:40:da:07:7c:a8:91:42:f3:a0:
2d:b4:24:5c:9a:7c:75:59:eb:a5:af:61:c8:ad:98:b5:06:b8:
0a:b4:28:90:47:37:0e:26:55:d8:f8:31:1b:fe:b6:8f:66:da:
3d:d2:6f:30:79:c0:1f:ae:47:25:c0:35:3d:6b:01:e2:d6:41:
d7:b5:c3:92:62:59:99:34:57:2a:2f:06:e0:01:07:d9:5a:ae:
5b:7d:ff:91:b5:8a:a9:fd:9e:0f:f5:7d:28:ed:80:8e:d8:a8:
45:6f:a4:1b:5a:df:f0:60:52:25:cb:2e:a8:b7:14:62:23:d7:
25:05:10:ee:97:7d:6f:51:08:0a:11:e2:21:82:50:4e:98:a0:
3c:5d:68:1e:f3:00:70:df:fa:f9:d0:80:45:75:6e:73:48:1e:
f3:03:10:71:35:24:d2:48:b2:44:dc:c7:fe:3e:35:11:e1:90:
96:31:c8:24:07:81:13:57:24:08:1e:4c:1d:bb:43:e5:fb:4d:
8c:4e:14:99:c8:56:96:62:e3:45:37:e1:41:4e:92:a4:b5:ce:
7f:55:d7:d7:25:c9:61:71:94:d7:06:0e:07:7d:c7:a4:dd:a7:
3d:d3:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:21 2025 by rpki-client