Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
File: EekXH_gxPaZBvhPUkK1pjcFsNmo.mft (raw, json)
Hash identifier: 2ER9+Xt/glIGyECQ/MfQHPgYgbp2YZ04N79/6Hfgs4I=
Subject key identifier: EF:32:91:1B:68:86:FA:6F:94:89:1C:A0:6A:2E:CA:AC:BB:04:C2:AF
Authority key identifier: 11:E9:17:1F:F8:31:3D:A6:41:BE:13:D4:90:AD:69:8D:C1:6C:36:6A
Certificate issuer: /CN=11e9171ff8313da641be13d490ad698dc16c366a
Certificate serial: 019A71B84FCAA01CF73175A590E884EA912D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EekXH_gxPaZBvhPUkK1pjcFsNmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
Manifest number: 06A7
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: EekXH_gxPaZBvhPUkK1pjcFsNmo.crl (hash: pCOggkrxQJ6DvTL+XA6hYRwnCGZ/b/9cmEEHIKhL4YU=)
2: ZWzMusszmsy4UaWcCS9_rq-Knr8.roa (hash: VUrGGf9efoi6v3qnwdA+7nmE0j9PKTICArLKCLrSD9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EekXH_gxPaZBvhPUkK1pjcFsNmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4f:ca:a0:1c:f7:31:75:a5:90:e8:84:ea:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e9171ff8313da641be13d490ad698dc16c366a
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=ef32911b6886fa6f94891ca06a2ecaacbb04c2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:81:c6:f2:57:9c:00:c4:7f:e2:58:0d:19:
8d:b3:d5:89:00:0a:9b:33:b2:54:0d:54:45:01:f6:
c0:c7:77:c4:ce:0b:07:ef:13:69:7e:6f:08:98:17:
17:8a:8a:d3:0f:b7:d1:a0:99:cc:f1:27:38:33:1a:
4d:ce:dd:30:c3:dd:c3:24:7a:4d:a6:29:4c:cb:2a:
91:05:6a:d8:54:80:2d:11:cc:dc:e6:fd:73:f5:bb:
55:a9:d9:0c:0d:1e:d9:3d:51:62:84:68:7f:c7:86:
4c:a0:fb:15:75:23:bc:06:bc:9f:89:8a:ce:13:48:
2e:ee:6a:31:1f:fb:19:47:8c:a7:13:8a:91:42:2d:
1f:32:11:06:d3:df:a9:73:c0:56:91:72:0c:16:26:
4d:13:99:4f:cc:98:3c:d0:21:35:57:5c:b0:1a:c2:
cd:84:be:a5:2e:a3:b3:83:69:a5:d7:d3:07:52:6c:
f2:39:84:02:ce:c7:1c:c3:f8:6a:f0:60:a2:b4:a5:
84:10:70:eb:2c:09:23:f6:10:74:0d:cc:9e:f4:24:
9b:28:e8:b8:55:f7:6e:e2:f8:fa:0f:86:bb:d1:b0:
6f:20:22:0f:c6:7a:51:f2:94:b1:20:e0:28:ac:c8:
ec:cf:7e:24:a6:3c:bf:90:1d:1a:b8:09:6d:e2:d2:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:91:1B:68:86:FA:6F:94:89:1C:A0:6A:2E:CA:AC:BB:04:C2:AF
X509v3 Authority Key Identifier:
keyid:11:E9:17:1F:F8:31:3D:A6:41:BE:13:D4:90:AD:69:8D:C1:6C:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EekXH_gxPaZBvhPUkK1pjcFsNmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:14:77:16:bb:86:da:cc:b2:ba:df:2d:fb:81:dc:b3:42:11:
d1:94:f6:b4:8f:e2:76:65:3e:17:90:c5:ad:e0:f4:a0:0e:ab:
ea:0e:88:9e:1a:50:51:93:cd:20:60:3e:5b:75:5f:d0:b4:fa:
da:5b:3e:c2:e6:84:af:e4:2f:dc:d5:75:18:fa:4f:f6:f8:b0:
96:42:5f:18:9d:e8:33:88:9c:e8:e2:6f:78:60:82:e5:ae:cd:
f9:c6:2e:19:b5:0c:9b:50:d3:b7:2f:72:5a:d1:8f:2b:92:76:
3d:a9:e5:94:32:4c:33:cd:40:ad:64:b3:30:c1:f5:12:8f:71:
5f:f0:c8:e9:7d:e4:8f:4b:35:0d:ba:11:c0:ab:61:bd:18:24:
e7:a8:84:74:5b:53:65:ab:e4:b1:21:d9:a7:80:5e:3b:c9:01:
39:a8:3e:65:16:90:e2:66:43:ff:6a:ba:79:bb:65:76:8d:d7:
97:8b:1c:02:1b:d9:75:11:ab:9c:5d:38:b5:33:e2:58:da:b2:
98:5c:c7:8e:17:97:1c:68:87:67:4f:f3:a4:7b:3d:bc:fa:59:
e3:c4:25:6a:65:da:de:3c:c7:e3:b2:73:3b:cc:5d:51:3c:7d:
84:a8:ea:79:a2:92:26:58:22:ca:1d:95:29:92:b9:30:e5:6e:
81:6e:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:17 2025 by rpki-client