Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier: /ZuQiSPlQT24ApEqSSaLpyh9X5xpHRN5H3IRwN9F438=
Subject key identifier: A0:B4:B2:6C:8D:EF:B2:5D:EE:3A:68:6A:62:5A:7A:1E:57:68:8B:E9
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial: 019A71EEDB3512A890613ECF18A77D6A8407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: gVlKLzKxkB7ukCa1XiuBVcrklDSsbPsaxFMFhL5Z9mA=)
2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:db:35:12:a8:90:61:3e:cf:18:a7:7d:6a:84:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=a0b4b26c8defb25dee3a686a625a7a1e57688be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:9f:ec:c1:a6:fb:5e:17:a6:cb:ed:5a:5c:
63:28:60:4d:a3:3f:e0:be:67:17:35:15:22:c6:c1:
e1:85:9f:f1:4c:48:8d:5e:b1:26:db:df:25:f6:31:
d0:8b:26:37:4d:8e:da:c3:3c:14:f2:41:77:cb:d6:
20:5a:e8:95:4f:34:c7:98:b3:ab:1f:5b:63:a2:c2:
e6:50:7a:f4:a3:05:e5:10:98:05:e0:f8:d5:c4:dd:
e2:85:2b:40:92:c0:9b:50:d4:88:8c:4c:9e:87:ef:
2f:3f:69:c5:6e:1b:9f:a3:af:a9:a4:7a:83:e0:d6:
e5:95:45:9f:ef:50:3a:2b:18:f5:17:67:cb:07:e3:
3c:40:72:52:92:40:f5:58:7e:84:24:86:77:58:8f:
ab:39:ea:b1:e8:48:68:8b:9e:76:12:c0:5f:34:fb:
84:22:77:43:c0:d3:ce:ae:3e:33:36:86:56:a1:5a:
64:cc:fd:74:ad:7b:df:7e:0e:bd:7f:4b:d7:00:7b:
ae:90:0c:a7:24:e0:5f:80:81:27:54:db:b8:1f:1e:
ae:3e:24:fe:03:33:e3:ab:3d:fd:d5:69:25:10:9f:
d4:24:dc:db:4a:10:61:80:8a:6c:84:a6:12:32:3c:
9e:16:44:22:8b:c3:23:64:7f:b3:4b:f4:24:f2:8b:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:B2:6C:8D:EF:B2:5D:EE:3A:68:6A:62:5A:7A:1E:57:68:8B:E9
X509v3 Authority Key Identifier:
keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:b7:f1:b7:eb:4e:69:f1:3c:eb:55:dc:5f:ed:7d:8b:ff:
d7:cc:5c:25:ba:fe:1b:ba:a5:cf:11:30:a3:b1:b8:d2:b2:3c:
fa:58:ff:f1:a1:04:40:c8:51:aa:64:04:d7:8c:b3:dc:7b:cb:
31:18:ef:83:bd:45:22:cc:67:cd:45:fc:f6:48:11:3e:b1:47:
1c:f1:a9:f0:30:53:4a:0a:3b:c4:5b:c0:d9:66:1e:1f:c0:7a:
d6:52:e2:5b:ef:1f:69:c7:a9:82:21:f1:0d:04:35:92:c2:92:
ac:5f:e2:90:32:95:ed:36:0f:8d:fc:b3:ed:b4:c9:28:da:76:
b9:b2:bb:9b:fc:65:c9:f2:95:87:8f:4b:3c:62:ef:e9:13:42:
b9:52:e8:e4:40:ef:5c:62:70:2e:17:90:2d:18:cb:c8:2b:3b:
f1:8b:c1:09:d6:f4:26:25:6d:c3:c5:a8:f4:40:15:e9:0f:d4:
ae:22:55:b8:a2:77:14:56:80:8f:fa:90:1b:d1:ba:05:fb:ea:
87:6e:87:22:a1:b8:34:87:b3:1c:ff:7a:85:04:dd:70:12:de:
82:f8:51:dd:19:1c:83:84:47:a3:ad:0c:9d:4d:87:ec:b5:18:
f8:be:52:4d:6d:b9:73:5d:4a:71:13:d8:e8:b7:09:63:68:46:
22:bf:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:42 2025 by rpki-client