
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File: 1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier: 0tNMfZIBgklmR/rVcWxxrJu5q+kMjmHf/fwWygn9CX8=
Subject key identifier: 89:A2:D5:54:81:93:9B:95:08:33:C2:14:71:5A:8B:5E:84:50:0B:92
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial: 019A729379C40712519785D7093F531E13DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number: 0E7F
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: /BDk2WmSL5+omocotbTBjulPkJzmEGTnnZiTxyerFmQ=)
2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:79:c4:07:12:51:97:85:d7:09:3f:53:1e:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=89a2d55481939b950833c214715a8b5e84500b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:69:68:bc:7a:f1:b3:42:2c:bb:a4:75:97:
e4:37:87:8c:64:6c:61:38:a8:9a:89:44:cd:e6:8c:
e8:66:1b:a6:22:7d:3b:d3:2d:91:f5:b6:56:a7:26:
69:d7:ae:8c:f9:c5:ae:1d:17:71:3f:04:86:1e:63:
82:1d:11:39:7e:e2:45:67:60:f7:29:cc:08:99:a3:
b1:90:40:67:d3:26:84:56:37:42:ce:14:11:02:d7:
fa:08:51:08:ad:9d:2d:44:33:2e:19:68:cc:22:3f:
9a:db:26:13:a8:87:60:af:7f:b9:1c:76:ae:68:2d:
75:e4:1f:52:59:11:21:fc:8f:4e:5f:f1:a3:d1:59:
71:35:d0:1e:54:5e:57:0e:cc:72:87:8f:78:4f:31:
6b:50:46:07:10:ba:c3:30:72:6e:47:1f:41:54:c9:
10:ff:dc:fc:9b:37:60:ad:a9:26:c0:34:4d:49:4a:
43:7d:8c:a9:b5:cf:c2:26:c6:d3:56:90:0e:3e:78:
56:fe:b5:f0:23:5a:da:cb:67:3b:1e:20:68:7d:2d:
41:82:f3:fc:d0:7b:a7:98:b7:37:ea:54:ed:1a:a3:
fe:67:6d:93:9a:04:e4:aa:39:3e:ef:e0:c8:b8:7c:
ca:64:b4:dc:72:2b:d3:d5:86:20:1d:64:24:b7:13:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:D5:54:81:93:9B:95:08:33:C2:14:71:5A:8B:5E:84:50:0B:92
X509v3 Authority Key Identifier:
keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:49:87:e0:36:88:46:36:1d:54:fe:66:ad:ac:bc:97:6f:22:
0d:e4:72:58:83:0e:ba:a4:50:8b:eb:75:27:3a:80:16:a0:6e:
85:af:aa:b8:21:4f:b5:bf:7d:53:7d:54:aa:84:99:18:af:bc:
9b:9c:96:c6:79:ec:70:63:10:a7:df:0b:76:6e:07:de:4a:22:
22:f9:78:6d:2c:f5:ba:09:0e:e3:9e:1a:87:8d:4f:39:ff:51:
11:87:17:5a:ee:39:c6:f7:01:40:c6:8e:cc:48:d1:57:69:28:
48:50:2c:a3:34:dd:6e:80:c3:02:59:4e:eb:40:e9:cb:01:51:
80:9f:48:ed:25:a2:4d:7e:bc:e2:bf:94:ea:8d:a4:0a:9d:39:
4d:42:6d:d2:ba:77:18:d7:7c:93:56:dc:9f:01:7d:2e:99:8b:
56:32:2d:b3:eb:39:9c:b4:bb:e7:b8:ea:e6:db:aa:95:5f:bb:
26:ce:a9:73:e3:e3:fd:b0:da:88:08:9e:11:86:01:1a:62:26:
51:40:87:ce:71:3d:12:31:44:6e:5b:cf:9f:f5:40:e8:6a:af:
02:85:22:b0:82:65:6a:d6:0f:c8:60:10:cc:3a:8a:20:cf:e3:
9a:5d:0e:51:72:16:d5:00:dc:e3:70:bd:dc:5c:f7:f9:c1:74:
7b:10:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:26 2025 by rpki-client