Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: iRVgqP8JUXMJUgFBPh+077lpxOYzV+Re6/phjDGSEoA=
Subject key identifier: FC:05:5C:8B:E3:7E:93:7E:F3:C0:BB:BE:2C:7C:7A:A1:11:2A:4B:0F
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019A71B8147AEDB40A04132E8CF0CFDB3B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: VNqh/d9sGqSChnzoxg/GOfN9Q24eKu3yDf0gCni5H/o=)
2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:14:7a:ed:b4:0a:04:13:2e:8c:f0:cf:db:3b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=fc055c8be37e937ef3c0bbbe2c7c7aa1112a4b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:db:db:cb:11:49:55:32:f3:00:83:3b:88:
f8:15:47:40:d4:42:b8:d6:9d:93:12:48:d7:4b:e3:
e5:9c:11:c2:37:af:3a:f6:4b:aa:47:16:51:83:32:
66:dd:dd:1f:e6:a3:41:02:cf:bc:5a:e7:40:7e:8e:
32:ca:0e:e4:58:14:9c:a8:1f:e8:dc:c0:e4:44:37:
ee:dd:95:a0:99:80:de:b2:9c:0e:83:a2:c4:3d:9e:
cd:45:e7:ff:3d:74:c6:16:34:d2:75:b3:e7:43:95:
57:b5:db:d3:ce:16:2e:09:df:21:71:d9:3a:00:69:
92:0a:b5:0f:e2:73:d0:2c:df:8f:1a:e8:3d:cc:35:
a6:f7:be:b9:2c:44:22:3b:ac:18:96:c1:6b:67:38:
6a:c9:6e:83:b4:7f:c6:90:0c:d7:db:b7:29:c1:cf:
89:23:62:7e:96:2e:ec:4b:c4:2b:5a:a1:91:f3:ad:
10:7b:45:6a:61:fa:7a:15:6e:84:fa:99:65:fc:4e:
c1:e8:39:16:09:a5:e2:bb:2f:be:6e:3a:c7:a5:29:
d2:95:05:1c:ac:f9:fe:ed:01:8f:a3:bd:43:a3:e2:
7b:79:32:2a:8d:82:73:12:56:f4:d9:3b:45:f0:7f:
e7:bd:29:67:e5:13:97:c8:95:e9:c9:e7:79:32:25:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:5C:8B:E3:7E:93:7E:F3:C0:BB:BE:2C:7C:7A:A1:11:2A:4B:0F
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6e:2c:19:6b:bf:f7:c5:23:86:ac:67:7e:2f:9b:50:1e:fc:
d7:65:ab:e8:a6:30:08:6e:30:82:19:e2:44:4b:45:4c:fc:51:
f4:81:cc:53:73:9a:8d:b3:31:dd:f6:48:72:89:90:ae:23:71:
16:b7:f3:4c:0a:cb:e4:ba:53:76:81:91:cf:cf:9f:ee:aa:ce:
7d:da:eb:c6:15:4e:33:94:ff:dc:f0:4c:13:f0:51:f7:b7:30:
39:be:0a:1e:33:24:5f:f3:26:37:66:e5:36:69:db:63:53:32:
2c:44:81:54:a3:b6:b6:5a:e3:6e:83:11:57:c5:01:7f:35:ee:
bb:6b:e2:bd:d5:17:8c:3a:09:c7:72:75:c5:1e:b9:41:33:5b:
d0:fc:89:82:69:c4:4b:f2:a4:20:31:77:8b:8d:ce:cb:c7:7f:
74:bd:0b:8b:7d:71:f2:b7:94:7f:81:da:00:62:c5:d9:0e:ff:
7a:7f:be:8e:51:e0:b8:cf:fa:f8:b6:62:b8:c6:67:d3:8f:d7:
63:34:6d:b4:13:48:02:72:38:f0:c2:99:98:27:34:59:45:68:
c3:c8:8e:b2:c2:cd:3f:a7:1c:32:57:35:e0:e9:1d:cd:79:25:
4c:a3:66:9b:81:f9:48:31:96:18:8c:b4:de:8b:26:c0:83:85:
7d:d9:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:58:56 2025 by rpki-client