Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: Q6pXT0XzwkOnS02Ci+OBls2Gkrgrc0fOsdDrqMzRwAE=
Subject key identifier: F6:83:49:A5:FE:F4:76:16:84:78:C4:0D:40:81:FC:07:2F:28:DB:A3
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019A71EEA339858435C9B79F58C628C6A77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 1676
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: tP9TGBp1a120ITakkmBSHI6/poJgS428vsOOWFlsN0c=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a3:39:85:84:35:c9:b7:9f:58:c6:28:c6:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=f68349a5fef476168478c40d4081fc072f28dba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:a8:81:9b:bd:6a:99:e9:61:b1:a3:df:c5:
c4:71:ad:66:4c:f0:e0:e1:f9:45:bf:6c:3a:71:d1:
e0:43:94:b1:fb:01:ac:4e:f6:ad:81:71:74:04:03:
c8:6b:d5:3d:74:d0:c0:4b:14:11:85:c7:b3:e4:03:
35:42:fb:3e:cf:ed:68:09:df:95:f0:fd:79:fc:aa:
7f:df:58:4c:ed:d0:6b:89:21:98:ca:c0:d0:55:ff:
35:f4:41:94:ea:06:b8:40:ef:0c:76:ed:7f:64:47:
47:e3:f5:63:bc:15:0e:ab:15:02:e7:b3:8b:98:0f:
31:72:5d:a8:27:76:95:ab:74:72:a7:57:37:7b:24:
e6:b2:34:f2:2e:93:87:5a:f5:a9:2d:74:cc:31:a5:
c9:22:cc:83:79:03:16:a6:db:34:c9:12:8a:e5:64:
31:ef:23:c5:9f:3c:fa:b1:b7:27:ed:27:3d:20:47:
0d:85:8f:9a:c9:65:11:74:95:27:07:ce:6c:d5:b5:
24:d4:94:81:f4:e0:de:61:de:ad:83:83:04:d7:93:
29:03:72:b8:cf:3f:f5:ef:dc:1d:b1:58:4e:c9:73:
11:0b:af:8f:f8:3c:34:f6:66:3f:15:1a:3d:0c:e7:
ef:47:97:4d:ec:8d:63:7e:95:b9:12:e8:33:2c:0f:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:49:A5:FE:F4:76:16:84:78:C4:0D:40:81:FC:07:2F:28:DB:A3
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:3a:88:ef:74:9a:03:f2:55:0a:0a:44:35:70:f3:ad:17:
10:93:31:83:32:55:04:88:3e:d9:2c:31:58:71:74:bf:d2:69:
24:36:9f:be:eb:78:f8:a3:e2:91:3e:5a:fb:5f:80:68:70:22:
3e:c9:45:fa:9d:f2:b2:c2:d4:7b:26:dc:4a:74:03:69:02:4f:
f2:ac:03:b3:4d:b6:6d:eb:50:d1:b6:7e:a7:d9:a3:e3:75:9f:
4e:73:d1:77:43:2a:d6:06:98:ea:ce:b4:df:8f:a6:27:b8:db:
84:51:0c:76:cf:10:d5:d6:87:65:c4:85:4b:e9:4f:3a:fe:48:
9d:5b:a7:71:19:03:b1:ef:1d:c2:78:2b:c7:8c:40:1f:fe:4c:
4c:09:45:64:7e:b4:02:bc:6e:32:7e:15:02:21:f5:bc:dd:8a:
46:5c:70:cb:20:0b:0d:83:e6:c2:da:6e:cf:5c:5f:c4:14:a4:
48:d5:2a:8c:54:2b:25:90:de:de:fb:8b:e2:76:33:75:2c:34:
16:cd:6a:a9:0b:c0:69:b3:c2:40:a3:5f:b0:5e:57:0f:fd:eb:
e4:51:8c:bb:d8:0f:3a:1b:60:5e:23:74:23:9b:92:bf:e0:50:
27:16:d1:6a:e0:a5:91:ab:94:38:9a:a0:93:b6:7f:cd:7b:bb:
e1:e2:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:56 2025 by rpki-client