Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: VOWVqooAn62UIndDCM4s+cvAX+L0vu3zwOTn6GzgcrE=
Subject key identifier: DD:C0:50:F4:E6:E5:24:1B:3E:A7:82:72:95:DF:B3:2C:B6:B9:C2:D2
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 019A443A35194E1626BBF44B9AA499F61601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0C3B
Signing time: Sun 02 Nov 2025 11:00:56 +0000
Manifest this update: Sun 02 Nov 2025 11:00:56 +0000
Manifest next update: Mon 03 Nov 2025 11:00:56 +0000
Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: 4AmKs8fwDac3YXhz6PSQcDqP4crCYDFiwSqrYpykJGM=)
2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:3a:35:19:4e:16:26:bb:f4:4b:9a:a4:99:f6:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Nov 2 11:00:56 2025 GMT
Not After : Nov 3 11:00:56 2025 GMT
Subject: CN=ddc050f4e6e5241b3ea7827295dfb32cb6b9c2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:a7:fc:60:4b:d3:5b:53:ba:80:b0:8d:ec:
9d:46:e1:d1:ec:26:a0:36:4b:bd:15:27:86:18:8d:
fa:d5:86:16:3b:34:17:67:54:ad:9d:5b:94:b2:63:
07:e6:92:18:c3:79:db:28:02:0e:97:dd:c9:64:c3:
04:af:e1:02:ad:1b:7c:ac:15:69:98:b2:f5:be:e3:
0e:48:3b:f9:9b:d5:80:b3:ef:f5:55:b1:9e:7e:ad:
47:e3:cc:21:cc:4d:f0:dd:af:96:94:80:b5:b8:a9:
15:c7:92:37:92:ba:37:c7:99:80:51:fe:5d:f4:d3:
e0:52:99:f7:8b:49:01:6c:bf:42:47:07:db:c0:5f:
6e:61:da:c6:51:57:30:16:d9:00:fd:74:ee:ad:a1:
17:ec:91:db:02:72:a6:97:ec:69:33:f9:11:67:fd:
f2:9b:ce:60:db:c1:51:d9:3a:44:3d:a0:86:12:34:
f6:2d:87:37:4e:e5:97:b5:8d:e6:01:c2:bc:8f:66:
8a:3d:14:eb:2d:82:ee:b9:1b:5e:0e:c8:3b:c8:43:
b0:de:f4:df:c7:53:7f:09:a4:3b:dd:b5:21:f2:b5:
48:fd:60:2d:d1:0c:85:68:41:7b:2b:68:dd:7b:b9:
f5:f9:5c:b8:78:70:6d:d2:21:c2:9f:aa:21:ff:a4:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C0:50:F4:E6:E5:24:1B:3E:A7:82:72:95:DF:B3:2C:B6:B9:C2:D2
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e0:3f:3d:49:d5:bd:79:eb:2d:89:e3:b9:6d:81:78:c3:83:
d5:59:b7:d1:dc:ac:91:e8:a1:96:0f:12:b3:7a:af:73:07:74:
0c:85:72:db:14:eb:a9:e3:8d:da:20:f0:26:2b:6a:be:39:6b:
cc:d3:2c:41:7d:fc:de:c5:d3:45:49:2d:6d:a4:db:6e:ca:77:
16:c7:a7:ea:33:8b:8e:2e:93:cc:c1:24:02:92:f1:45:67:8b:
dd:0d:09:fb:9f:c8:58:2a:9b:21:4d:d5:93:ef:28:99:35:10:
21:36:26:c4:06:84:77:2a:3b:c8:57:27:52:4b:c2:04:80:d7:
b3:07:af:84:3f:e6:19:aa:ac:c2:8c:c2:5b:b0:d1:6a:90:47:
3f:23:1b:56:18:75:de:26:98:11:f3:99:18:da:94:16:41:eb:
27:bf:ab:fe:1d:d3:14:3a:06:25:09:dd:11:4c:26:5b:17:14:
90:82:df:ae:3c:fe:f9:8a:cd:1a:90:00:4e:05:b9:25:4f:31:
28:8d:b0:46:7c:45:17:92:c9:1e:b8:ca:ba:37:58:c9:06:01:
14:5a:d7:08:7e:c8:4d:5c:c2:63:0f:bc:2d:6a:92:7b:42:ab:
12:b9:ba:c7:aa:6a:2a:38:58:81:a3:21:35:81:f1:87:8f:d1:
d9:5d:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 19:22:08 2025 by rpki-client