Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File: EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier: 2pjB78G91oOKks6Tb2FNN+S+ygUYvc+JbA1ARApaBaQ=
Subject key identifier: 52:B7:99:2C:0C:02:DF:E5:78:AD:EC:A4:5F:DF:18:BC:6B:A1:88:34
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 019A71B866E03E37968C0AB9B42442E4C5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: Hb29rvNjsmOv2bxTtkN2NtyjNPPMKxeFpI0sn1nsung=)
3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:66:e0:3e:37:96:8c:0a:b9:b4:24:42:e4:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=52b7992c0c02dfe578adeca45fdf18bc6ba18834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:d5:47:f5:17:d3:8a:36:60:08:02:ac:36:
c4:75:ab:8c:0f:cc:df:2d:36:1c:6d:9c:fd:7d:4d:
a0:2a:93:f1:f9:7e:c6:38:7a:b3:72:fd:f1:60:af:
4d:0e:1e:a0:c2:b9:ad:3b:0c:f9:6d:45:e7:87:50:
03:e5:01:5a:ad:1a:86:31:2d:79:7e:42:7f:d0:11:
79:83:8c:c2:9c:88:e3:ea:87:44:30:66:68:6b:85:
4a:15:53:92:24:03:f5:a0:c9:24:07:ca:c7:65:43:
63:9f:9c:bc:9c:8a:8c:74:99:29:de:c5:cc:e4:0e:
3e:ca:a1:8b:48:4d:90:4f:27:bc:23:e4:6f:5b:8d:
9e:1c:57:9d:5b:bb:ed:eb:14:68:51:8e:b8:ce:8c:
a2:32:43:0a:4f:0d:60:43:d7:1e:76:d5:8e:bc:56:
b5:64:84:1d:d6:c8:c2:f0:8e:f2:41:4f:21:ec:b7:
f4:68:f4:bd:c9:d9:b1:59:f6:2b:79:56:b7:0f:79:
a6:98:f7:61:e2:0d:a6:f3:6f:69:7a:3e:72:93:b2:
25:51:7b:f0:f4:e9:a6:b9:bc:47:ae:1d:0a:63:24:
bc:12:43:97:45:b5:41:04:72:59:8c:de:53:52:d0:
14:12:9c:74:45:db:40:54:03:b2:d3:c7:14:de:9f:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:99:2C:0C:02:DF:E5:78:AD:EC:A4:5F:DF:18:BC:6B:A1:88:34
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ff:a5:cf:bd:48:d9:de:b4:84:24:28:26:64:3a:55:ea:39:
6e:ee:e4:51:7b:95:1b:ca:45:ae:fd:fc:3d:e0:04:22:52:e0:
50:d1:5d:a6:78:b1:6c:50:df:34:0b:c6:f8:44:df:44:20:5e:
d3:62:01:d5:74:d4:61:8b:07:a6:e7:34:a0:9c:61:da:58:2e:
a8:87:cd:1b:fa:d2:29:d4:f7:d0:5f:af:6a:48:3b:2b:a0:41:
d5:07:21:95:fa:74:70:69:a4:85:a7:d1:97:9e:3a:d3:c8:af:
06:9a:db:4f:8a:46:45:e9:1a:c0:a3:95:d6:1c:53:82:a6:7a:
4e:e6:92:ad:78:f1:01:74:8d:70:e7:56:45:6f:ca:1e:a5:ed:
31:ee:49:d0:53:76:e5:9e:15:0f:8f:b6:1d:c2:17:51:74:19:
ee:a1:dc:54:5d:23:43:10:1d:9c:7c:4e:8e:e3:86:be:f7:da:
98:dd:96:2c:35:f4:c0:f8:f1:42:19:76:9c:df:5e:79:83:f5:
19:09:dc:c0:1c:00:84:42:b6:f6:ab:6a:53:d0:48:d2:56:27:
10:86:59:6f:18:01:44:7b:36:84:40:dc:c9:d5:a4:e3:18:1e:
4a:10:ba:da:5e:11:66:8f:41:af:ce:6d:b3:95:d5:14:fa:04:
21:2b:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:29 2025 by rpki-client