Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: NZrGbrGLkznNpZM/kv7LbnUtOaMv17rKxwgiY+p65gM=
Subject key identifier: 4F:64:4C:25:9D:B5:7F:C8:FD:B7:DB:FE:55:22:C3:DA:46:79:89:48
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 019A7149DD014626AB9882A8A5145BEBF977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: YabtllsBO8rQ/psJon90NQinjkb/k2Z+MIVQ2C5sSLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dd:01:46:26:ab:98:82:a8:a5:14:5b:eb:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=4f644c259db57fc8fdb7dbfe5522c3da46798948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:e1:ef:18:20:fa:fa:4a:46:03:f4:48:11:
e1:da:8f:dd:26:f9:c8:b9:56:c5:78:95:cf:9b:26:
3d:6e:fb:bd:97:ad:93:38:19:97:f7:22:1a:c8:02:
12:55:67:fb:3e:fe:37:7a:94:88:4a:49:22:cc:3c:
bd:9d:c7:fc:4b:29:b5:e8:bb:45:dc:61:76:ae:cb:
d9:2e:da:58:ea:d3:bc:cd:f2:1f:93:67:d0:c2:ed:
41:32:9b:3e:c5:8f:82:8a:e0:6c:af:67:04:33:e9:
60:8b:bf:94:f6:4b:b4:c7:78:cb:e7:67:6f:7c:d4:
b4:5b:69:f7:dd:6f:22:e8:c7:ee:0f:a2:24:8c:83:
df:e7:60:6a:9f:43:04:c1:6f:7c:4b:8f:c1:56:30:
63:9d:bc:84:11:28:c8:55:c0:4b:f5:cf:f5:58:53:
fb:64:3b:0f:9c:cb:42:af:a0:0b:8b:6d:29:69:fc:
ab:54:0b:fb:52:d8:8e:78:31:db:aa:15:57:de:90:
25:16:7e:97:28:15:b5:75:b9:25:53:b0:62:bc:3a:
d0:17:5c:3e:a3:33:e4:cb:d2:2b:47:77:6b:9d:60:
53:48:08:a8:08:68:fa:f3:11:bf:07:e5:03:f6:70:
a0:a8:79:c4:e3:ee:67:64:d9:9f:af:27:f1:d7:0f:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:4C:25:9D:B5:7F:C8:FD:B7:DB:FE:55:22:C3:DA:46:79:89:48
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d6:c9:83:9f:00:68:c9:19:4b:38:f6:18:81:1a:dd:d7:e4:
46:24:c9:0f:e3:a7:8f:e9:39:be:ef:e6:f0:7d:73:d3:0e:30:
dd:e2:fb:65:1f:52:05:21:87:ee:39:83:d2:17:f0:26:cf:a4:
f7:f0:8c:6d:29:4e:5d:ae:06:a7:10:04:b1:76:96:02:5e:21:
8d:84:75:dd:16:c0:86:75:67:36:1a:61:b4:9c:da:43:c5:a0:
02:7d:01:90:ab:fa:9e:47:1c:2b:45:2b:84:87:ca:86:7b:e1:
6b:b1:90:08:80:df:56:d6:05:72:e3:ed:17:05:0a:24:dc:37:
bd:80:5d:a3:20:b9:c7:e0:e9:ec:27:2b:c8:b5:c4:24:7d:3a:
af:f9:80:d8:a4:90:92:ee:86:b6:36:0d:f8:f9:e2:4b:3d:26:
79:de:fa:b1:be:ab:21:40:80:b5:60:9d:5c:2b:07:3c:9d:25:
23:b3:ba:9c:66:49:d9:4c:2a:08:bd:e1:d1:d4:51:b6:1d:91:
5c:74:9a:75:0f:eb:72:fb:2f:ea:4d:0f:34:72:18:7f:93:c7:
45:51:51:44:8d:b9:ea:48:6f:2f:30:75:f9:84:9c:fc:80:d9:
35:38:08:56:6b:c8:65:57:d8:05:8f:27:4e:10:7a:29:59:a1:
94:7f:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:23 2025 by rpki-client