Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier: c/Fg2qNFk2MJkyicwStw62UKEJxP4Bac23I67EJSc5w=
Subject key identifier: 35:F3:1A:27:25:6F:65:F4:47:69:B0:ED:8C:A4:CE:71:A7:68:B4:B3
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 019A70A52901ACD252EA698978BFA29E958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number: 07CC
Signing time: Tue 11 Nov 2025 02:01:03 +0000
Manifest this update: Tue 11 Nov 2025 02:01:03 +0000
Manifest next update: Wed 12 Nov 2025 02:01:03 +0000
Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: GwFSY1/DPgI8nFuJadFM2S/Lj9FXICv+iGMPVrli6tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:29:01:ac:d2:52:ea:69:89:78:bf:a2:9e:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Nov 11 02:01:03 2025 GMT
Not After : Nov 12 02:01:03 2025 GMT
Subject: CN=35f31a27256f65f44769b0ed8ca4ce71a768b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:0e:f9:3f:46:52:a6:bd:bc:b8:15:06:d6:
4d:3e:8a:83:26:b7:b5:e8:6f:ef:cd:4d:23:db:40:
c7:11:4a:5c:d1:26:6c:27:c5:b1:47:14:85:64:0e:
b7:ab:08:87:e6:d6:82:09:1f:5d:96:ef:37:35:af:
9b:75:5e:b0:12:0f:69:fe:cf:fd:19:30:93:40:2b:
e0:e7:f2:75:11:16:5d:84:8f:67:b2:08:32:9f:88:
44:c0:ac:c2:62:f7:30:6f:53:be:15:32:1d:0c:33:
2f:19:94:8b:17:e8:f7:0a:89:73:a1:0a:45:39:2c:
09:16:9a:89:8e:0a:10:8a:91:31:7b:bd:ae:1c:27:
02:99:eb:2e:5e:b7:8f:e1:5a:9f:26:66:c4:de:b2:
fc:7b:9a:74:3a:f1:8b:30:e9:41:af:54:b6:09:62:
46:d2:00:d5:cf:4a:79:58:9a:48:99:86:ba:47:f5:
d0:95:5f:48:57:e2:7f:1b:0d:19:47:2e:b1:4a:ae:
77:c4:6f:13:e0:ea:14:ab:2e:29:89:01:87:78:11:
4e:3c:bb:5b:1a:c9:aa:36:74:7f:3d:d5:ea:0a:cf:
bb:c0:e3:e8:e4:f6:80:79:08:6c:51:ed:c7:04:7f:
c0:c1:3d:4f:29:99:1e:fb:65:d1:82:ec:42:5b:43:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:1A:27:25:6F:65:F4:47:69:B0:ED:8C:A4:CE:71:A7:68:B4:B3
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:31:a1:52:fa:8e:a6:d1:d8:e3:54:a4:c3:b8:46:fa:92:
14:62:65:c4:c9:20:f2:ee:3e:8a:9d:78:dc:24:21:cf:ac:7f:
da:20:37:95:99:ca:a3:20:06:63:c7:9d:b2:f2:61:af:f5:66:
be:97:3f:10:4b:ff:00:64:94:5f:4b:f4:dc:44:9a:b1:c8:bf:
e7:2d:43:47:99:c7:43:87:2d:d2:ce:0e:6d:d1:22:f6:d2:2e:
2f:b4:e9:d0:49:fc:1d:d7:01:17:2e:83:62:35:18:09:22:a9:
2e:2e:3a:67:9c:a3:1a:f7:04:49:36:ce:0b:d0:53:a3:91:5e:
77:f7:36:b0:73:7b:12:79:e1:86:23:2a:bf:48:a5:96:8c:8e:
2f:dc:b9:89:29:27:b6:16:ab:12:45:63:01:e5:d2:8e:b7:3c:
2d:b6:af:31:e4:44:05:9a:92:94:78:3c:be:42:06:b5:22:26:
fc:e4:8a:82:4c:3d:98:25:61:f2:c7:b3:c5:1a:96:59:2f:d2:
37:23:87:24:27:cb:38:57:98:5d:36:50:21:d7:fa:e9:a4:7c:
ae:ce:ab:78:01:c0:08:02:fb:33:70:54:e1:a7:e1:49:ac:81:
2f:73:55:2d:7f:e7:0a:d6:f0:73:f0:4e:1c:89:af:a0:a8:d8:
9f:f2:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:56 2025 by rpki-client