Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
File: EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json)
Hash identifier: ktIqY9NeXs8kqvdmTFbvm1h3UytRUyPo2knmSjGev5w=
Subject key identifier: ED:0C:19:85:6C:58:51:04:94:E5:1A:38:C0:28:0F:4F:A3:C9:AA:5C
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Certificate issuer: /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial: 019A72933E72086E7623DBBF4AF5D2B098B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
Manifest number: 0A40
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: 1eXto-EsRD2_BRDc9smA9RA0iPI.roa (hash: g1hRvTrzsnVFScKTJJdFlUgNjwgiZOniAlwWxxAKEuA=)
2: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: BF8VsX6PXD83XFzV7of3MhIwgaZCSwEW0p2sAmvQ4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3e:72:08:6e:76:23:db:bf:4a:f5:d2:b0:98:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=ed0c19856c58510494e51a38c0280f4fa3c9aa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:20:8e:bd:1d:8b:0e:ea:fe:59:bd:73:59:
31:e3:8e:8d:8a:ce:85:4c:47:b9:e2:ad:56:7f:c7:
c4:ad:1f:8f:a7:50:78:98:de:48:bd:8e:0b:95:91:
22:60:af:ca:6a:13:2b:2a:6b:6f:47:20:68:2b:80:
0b:a0:b9:b4:0e:6a:c2:68:e3:44:10:d3:c5:ac:dc:
f7:9b:10:e9:c5:89:16:cc:a4:43:88:d1:28:df:e9:
16:ff:a3:e7:ba:af:ce:f7:f6:90:a9:cc:7e:e5:31:
b6:4d:3e:ac:22:8d:49:3b:83:90:97:d1:ca:19:20:
85:35:95:8b:3f:50:d9:f8:89:57:a3:08:2f:16:09:
ca:68:80:b3:4e:b6:a1:9c:92:c4:40:86:9b:3e:c4:
19:9a:d6:59:02:69:a9:b2:47:ce:39:cb:0c:ef:be:
35:07:fe:1b:e2:89:5a:ae:56:a4:e9:98:18:b8:49:
82:4e:07:46:e0:36:8c:10:f2:4a:ab:a8:32:1e:81:
71:27:90:51:11:33:bf:5e:ad:8f:47:e9:d0:e6:7f:
6a:f0:7a:22:c1:95:0e:59:3d:2f:5d:47:4e:d6:7a:
45:cc:e8:14:f6:97:ac:67:f3:56:ae:86:7f:e1:01:
2d:27:74:a9:08:96:18:e7:04:1f:62:b3:3b:24:97:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:19:85:6C:58:51:04:94:E5:1A:38:C0:28:0F:4F:A3:C9:AA:5C
X509v3 Authority Key Identifier:
keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:91:62:44:6b:fc:e5:00:79:a6:77:e1:02:3a:3f:3c:49:
16:5e:db:30:6c:d0:10:5b:c6:97:08:83:19:61:91:4b:5d:fa:
eb:b8:ac:39:f0:6a:b3:0e:76:bd:3c:07:78:06:f0:4c:1a:23:
bc:71:5b:36:58:54:7f:5b:a6:3f:2d:f2:f3:6b:c7:d2:9d:df:
dd:1a:dd:03:11:92:25:0f:34:9f:77:0f:2d:28:1b:19:c8:8a:
b2:2d:4c:30:ac:d8:72:df:de:28:48:e5:ba:db:df:c1:ee:73:
89:f0:fd:55:f3:13:0c:e0:a9:29:e1:a5:d9:4e:7c:9e:3c:6e:
82:2b:86:0d:36:8c:00:84:c3:ff:5b:20:d1:97:e9:49:89:31:
66:65:d1:48:58:67:8b:00:f5:d8:6a:0e:7e:dc:e4:2c:6a:85:
ec:51:01:86:87:f7:aa:f3:df:0e:9d:99:54:4e:e1:7b:e1:42:
21:36:7a:59:5a:1f:75:93:cf:37:65:81:29:2c:83:be:60:0e:
48:bb:63:c6:6e:fc:ba:d0:e7:af:65:1f:b5:3a:fd:ac:0c:eb:
73:75:8e:68:0d:16:59:6e:ff:83:94:bf:90:59:d4:23:02:e0:
82:af:61:61:82:e7:3c:f6:09:1d:00:7e:18:27:c4:dc:94:7d:
d8:7f:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:22 2025 by rpki-client