Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
File: EG_IeHSRKxgTrEKSRXq93AGOm0U.mft (raw, json)
Hash identifier: t9OZWB1yIDvxH9Sf/oNPT2qSKAYCTfH+VtDTFGj8A2M=
Subject key identifier: 1F:91:BC:C7:F4:17:20:67:DC:F1:EF:9D:32:8C:7B:CB:24:06:83:D6
Authority key identifier: 10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
Certificate issuer: /CN=106fc87874912b1813ac4292457abddc018e9b45
Certificate serial: 019A4EF4AC1BBCEFC71E256BA1521FA0A84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:48 +0000
Manifest this update: Tue 04 Nov 2025 13:00:48 +0000
Manifest next update: Wed 05 Nov 2025 13:00:48 +0000
Files and hashes: 1: EG_IeHSRKxgTrEKSRXq93AGOm0U.crl (hash: PrrPGqHoaet3k2IG6flIR42n9J8bVAFS8KOnSDHuut4=)
2: nIYQEeYqHsjGk1HnsHfkMxRcQRo.roa (hash: ycX0NPtdV2a4EnLGQ1o3vCMrwecsVp9vTud4zqdQmCQ=)
3: tnPdIYZ_Xg1jlbA7OOLVE5eeCec.roa (hash: Mz8v6+YcC5LwNUyg6BoLOLhL5ks8b6FyVn29SuKol3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ac:1b:bc:ef:c7:1e:25:6b:a1:52:1f:a0:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106fc87874912b1813ac4292457abddc018e9b45
Validity
Not Before: Nov 4 13:00:48 2025 GMT
Not After : Nov 5 13:00:48 2025 GMT
Subject: CN=1f91bcc7f4172067dcf1ef9d328c7bcb240683d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:6a:72:be:3b:98:2f:b3:e3:67:5f:4e:6a:
99:1a:51:38:e9:53:7b:25:3b:64:82:96:57:9f:cb:
3f:5d:24:38:73:54:15:c0:04:d4:a7:8e:f3:2c:70:
37:94:dd:4b:8b:d0:50:f0:64:c7:39:72:4a:cb:88:
79:40:32:63:fd:a7:2e:ac:97:00:a5:e2:27:6b:0f:
85:63:d8:75:b3:5d:a9:1b:96:00:5a:65:ba:40:e3:
26:1b:92:44:3d:bc:94:25:82:63:72:20:69:77:90:
25:6a:23:fc:56:9b:30:0c:88:b8:13:6d:e5:99:41:
3d:ed:a2:8d:dd:3b:57:b8:4d:5c:4c:23:c0:7e:b1:
8d:d1:87:0e:53:ea:1f:20:9c:0a:78:2f:42:e7:37:
cb:0d:8c:a2:9a:28:e2:da:4a:8d:0a:95:32:91:6e:
e0:9b:f1:27:19:f6:ca:f3:7f:fa:f7:44:45:0c:ef:
c2:37:88:3c:a1:2a:50:c9:3b:e2:ea:86:1e:25:96:
b7:10:2e:72:2b:40:cd:1e:b5:ca:8e:42:99:06:04:
69:cb:ef:ea:f4:37:ca:16:b7:e9:85:b4:f3:77:c2:
67:d4:37:d6:b5:c9:07:db:f5:85:74:4e:17:f1:6e:
f0:f8:b4:3e:4a:ab:c7:a3:45:62:5a:ab:af:4a:67:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:BC:C7:F4:17:20:67:DC:F1:EF:9D:32:8C:7B:CB:24:06:83:D6
X509v3 Authority Key Identifier:
keyid:10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:30:25:e0:99:c8:7c:54:85:f2:0e:97:33:90:19:1a:86:
78:a0:6b:d0:cc:c0:3d:d6:25:28:3a:e3:63:cc:15:63:8e:9b:
39:bc:b9:84:83:be:1d:36:01:6f:59:52:6e:7b:73:57:23:84:
51:09:03:28:8d:ab:f1:b3:5d:1e:9d:f6:7a:17:68:ad:82:e1:
72:85:57:0a:96:c5:9d:4c:85:22:02:3d:da:80:04:ba:6f:35:
9c:dc:a0:4a:bb:eb:ac:bd:36:a9:7b:2a:73:cc:e2:72:15:4f:
45:95:3b:bd:6e:fb:f6:d9:9b:e7:dd:6c:35:42:c8:d0:83:69:
87:ea:ec:4b:7c:16:27:4d:cc:db:5d:49:b6:7a:1c:aa:76:f7:
02:d3:b7:60:a1:b9:0b:8c:b0:3d:8d:1a:1d:e5:09:10:79:26:
79:a1:9c:b8:ee:fd:13:b7:6f:73:7b:c9:2c:37:f5:d6:20:62:
63:1a:40:bb:93:3d:9d:85:24:54:f4:d5:83:cc:9f:0a:00:c3:
e7:0d:d0:c6:eb:d8:64:f0:73:a6:d3:d9:5b:6c:0c:af:fc:f5:
cd:4f:53:5b:0e:1a:f3:c5:cb:b6:9d:8a:e6:d2:68:b9:f5:75:
a2:a0:88:a5:d9:af:f4:fe:7e:ef:0f:d0:4c:a7:7f:77:14:6e:
60:61:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:20:47 2025 by rpki-client