Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier: lXKzMUrwbcV2wD+8kUJGXYiI3jmxSIWBi8GN9D4me5k=
Subject key identifier: 1D:52:BB:53:53:18:20:4D:E7:57:20:91:FD:85:E3:46:56:50:C6:31
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 019A2666D380427688F044F7340902A50626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number: 0B05
Signing time: Mon 27 Oct 2025 16:01:04 +0000
Manifest this update: Mon 27 Oct 2025 16:01:04 +0000
Manifest next update: Tue 28 Oct 2025 16:01:04 +0000
Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: nf3//xWU5Fc//zlU4pZTRsHbApCpE6WCk5C50uoJ+g4=)
2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:d3:80:42:76:88:f0:44:f7:34:09:02:a5:06:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Oct 27 16:01:04 2025 GMT
Not After : Oct 28 16:01:04 2025 GMT
Subject: CN=1d52bb535318204de7572091fd85e3465650c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:03:75:7b:01:40:1d:fa:61:c4:35:e0:4b:
b7:02:34:c7:79:b0:ce:2d:13:7f:9e:4c:4c:83:6f:
f5:90:d0:91:1d:de:15:45:55:3e:5b:63:51:6c:8d:
ae:f3:02:ab:c2:41:d2:a7:0b:81:9f:de:55:4f:79:
bb:c0:f7:16:f5:b5:1c:23:bc:da:6e:e3:2f:c7:86:
a7:98:e3:1e:a2:c6:e2:75:fe:27:96:8e:5a:cb:5d:
e7:35:e5:ce:8d:2f:6e:cc:c3:f1:62:94:66:84:6e:
4b:dc:36:38:fe:e5:95:e4:d9:5b:1f:8e:31:0c:63:
84:6d:71:6b:49:4b:32:5e:bf:c3:04:63:3f:e2:2e:
f4:30:c9:ae:5c:d9:4f:ed:4f:7f:4f:d4:96:54:a4:
c5:a1:8a:11:52:31:7d:82:b8:b0:c4:1e:ce:95:be:
0b:28:3e:ab:70:9c:4b:30:4e:13:48:c2:57:af:05:
ee:36:64:7f:3a:51:13:07:61:1c:9e:94:b8:6b:b5:
ba:34:56:67:cc:b6:d7:b3:c8:84:bf:af:b3:92:17:
7c:80:52:b8:d0:74:ca:a7:8c:e9:5c:93:77:e7:c4:
cd:9b:44:a4:74:da:0e:2b:ba:17:41:61:15:dc:7a:
0f:08:36:6b:5b:6a:e8:81:68:ab:f2:b6:3a:b7:8c:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:BB:53:53:18:20:4D:E7:57:20:91:FD:85:E3:46:56:50:C6:31
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b1:28:45:5f:e3:ea:6f:82:7f:1b:ec:97:3d:02:b0:f2:b4:
93:79:ea:86:1c:62:2f:57:ba:76:8f:0a:05:8c:70:6e:01:ed:
6f:98:8b:c5:1b:4d:2b:c5:32:60:90:ea:3f:1a:41:35:d1:b5:
29:06:0a:5e:63:08:73:05:d6:30:7d:2c:b5:78:47:c6:81:90:
3f:e7:16:be:1f:78:06:e8:29:95:46:b4:5d:64:fc:a9:87:bb:
d0:28:64:72:48:b6:86:2f:54:17:6d:97:8f:fc:9e:91:3a:e3:
b2:d3:c8:00:1a:c7:9c:44:5d:2d:5a:b7:e5:a8:fc:b3:4f:cd:
ba:57:6b:6c:e5:ea:9a:7b:6c:36:d2:79:fd:82:13:22:93:62:
90:1a:c1:17:54:2b:9e:8b:f3:fd:ec:95:05:5e:32:69:1d:ed:
79:15:78:bc:b0:66:9e:4c:f5:e5:48:1b:37:ca:72:e8:57:58:
2e:42:ba:9a:9d:64:13:65:db:a2:df:fc:47:98:37:e8:cc:2e:
80:1d:76:1f:c4:5c:cc:ee:6e:92:6a:bf:bb:89:99:dd:4a:5f:
4e:1a:9b:5a:8e:b0:c6:8c:8b:5f:e1:6c:67:6b:ef:83:43:a2:
90:cc:8e:d4:54:09:cc:98:94:3e:b0:99:a1:e5:29:47:36:48:
6b:d6:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:28 2025 by rpki-client