Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: CPLfFhvAWWhjdnUU/YGecMOt6keZX5AHFQcNilNCau0=
Subject key identifier: F6:AA:20:9D:E2:B0:3C:51:D7:9C:7E:B3:1C:43:D8:68:78:F6:E2:08
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019A725CA998492F0B30917F23D7AA2B3D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: vPS6RcbP95DH568hMzsl/7yciEWfEdoE7U34KewCKlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a9:98:49:2f:0b:30:91:7f:23:d7:aa:2b:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=f6aa209de2b03c51d79c7eb31c43d86878f6e208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:a2:9a:ea:7b:91:c4:ce:72:20:28:d6:71:
8f:42:d9:11:71:49:15:c1:58:48:df:a8:7d:92:73:
eb:43:cd:57:df:49:fe:eb:bb:d0:d9:68:13:93:ef:
5f:41:3d:8b:e7:b5:38:e1:38:0c:84:8a:47:2b:32:
3d:3d:7d:14:c7:cf:6f:6a:66:e8:17:eb:f5:d2:54:
63:74:44:62:a1:13:31:cf:97:6f:57:e3:6a:15:0e:
a6:76:8c:b0:e1:bd:c9:ab:81:09:cb:38:3f:e3:83:
51:d7:a3:c8:31:4a:e0:1d:26:a4:51:f7:45:fd:32:
3f:62:8c:50:b9:d7:0b:d6:c7:94:b4:59:f8:f3:1d:
d2:6a:f6:03:b2:93:0d:ff:0b:63:fb:e7:a5:be:26:
3c:d9:03:f1:22:7c:c4:36:18:62:d3:f2:42:6b:1c:
02:6c:cc:0b:c7:11:65:60:86:00:9d:c9:b7:4c:7e:
43:6f:36:76:cf:da:8b:4b:11:ae:09:a3:a8:ff:1f:
fa:9c:b1:67:33:21:01:99:54:91:70:7b:5d:22:5a:
69:fa:49:ac:12:0e:18:12:25:0f:5d:4f:3c:e9:34:
3f:a8:a5:2d:bc:60:2b:13:9e:e2:a8:b7:3d:54:ea:
7b:86:b5:85:65:01:de:16:ba:1c:f7:8a:7c:ae:ec:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:20:9D:E2:B0:3C:51:D7:9C:7E:B3:1C:43:D8:68:78:F6:E2:08
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:1a:5b:06:67:a3:94:c8:f2:fe:66:12:c7:e0:90:35:35:
73:38:e7:af:c3:28:32:4a:94:e2:e4:d4:d5:a1:f2:da:75:c1:
fa:88:71:6b:3c:a6:06:3c:b6:9c:8c:b5:52:1a:8e:84:37:1f:
b5:c7:21:bb:87:37:cc:63:6b:12:cb:2b:22:d2:35:5a:f4:35:
55:cb:a7:7b:f4:12:b2:ee:3b:8e:f2:0a:19:37:fe:ce:d5:3e:
8b:e9:db:78:70:fd:ac:74:66:64:2a:48:1c:9b:df:db:f6:ad:
50:77:58:62:a9:63:67:25:44:ba:c7:50:41:ed:4c:3d:d0:c6:
d6:ca:ab:c4:ff:cd:f9:6d:12:e9:ba:0a:f6:c4:6c:8f:83:9e:
ce:37:97:ab:ef:f1:8b:c5:3f:57:75:fc:29:d6:89:82:ab:e9:
f7:0b:53:e8:d6:e7:8e:a9:4c:65:ac:d0:8c:c4:34:95:c3:6b:
d2:b6:26:fb:07:9f:4c:60:e0:6d:ad:ac:54:ed:36:8b:c4:d6:
88:30:f7:6d:0c:23:ef:4d:aa:f1:54:cf:be:42:5a:5a:ab:d1:
a3:53:3f:ea:f3:db:fe:53:26:4f:98:89:ee:60:30:d1:22:ee:
6f:57:03:a8:85:eb:14:e9:e0:9e:9f:9d:9d:4e:32:c1:bb:07:
b2:15:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:54 2025 by rpki-client