Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: eGBZODnzVBD4rE6eC89u81X2+eCElA5Vl3yIKjwjHQo=
Subject key identifier: F0:72:B6:8E:D3:F2:2F:ED:3F:43:C9:58:02:B4:46:7D:CC:36:64:6F
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 019A70DC794B0E92AB4221FDA2A43D8C2781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0E07
Signing time: Tue 11 Nov 2025 03:01:28 +0000
Manifest this update: Tue 11 Nov 2025 03:01:28 +0000
Manifest next update: Wed 12 Nov 2025 03:01:28 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: CyzhqbUEuW8/ib/B6WHATht0ea9O26QlwepKFHD+Deo=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:79:4b:0e:92:ab:42:21:fd:a2:a4:3d:8c:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Nov 11 03:01:28 2025 GMT
Not After : Nov 12 03:01:28 2025 GMT
Subject: CN=f072b68ed3f22fed3f43c95802b4467dcc36646f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:fa:9a:aa:46:f0:92:a6:22:b2:71:a3:89:
fe:45:a3:9d:70:e4:c8:2d:ee:05:1b:8b:ce:78:71:
01:7b:9e:d3:c0:c4:55:65:be:b3:22:c9:8c:70:d0:
2b:12:ff:7a:b4:9f:c0:f2:3f:0c:fc:ac:5a:1e:11:
d0:9b:52:71:7d:df:e7:8f:cd:27:5a:4d:fc:39:53:
a6:06:84:9b:83:7e:21:da:d2:90:80:8e:1a:47:f8:
d7:45:84:22:3b:1b:c6:11:76:ce:3c:c9:d3:1f:45:
03:c3:de:25:16:b6:3e:e4:66:2b:58:87:22:eb:c9:
90:55:15:c6:70:5f:20:d9:5a:81:58:39:c0:ee:2e:
35:24:fc:fa:9a:2b:79:68:eb:20:b0:9d:8e:d9:75:
72:64:f1:9e:20:46:37:9c:86:fb:3d:da:b7:f8:ba:
cb:8f:d5:02:ff:da:0e:3e:2a:ba:60:04:1d:d5:5f:
91:b9:e9:43:96:07:76:0b:90:53:a7:bc:b2:f3:86:
02:59:e7:a8:19:f4:da:6c:df:86:55:ad:70:31:15:
5d:f3:e7:a2:a2:1b:88:05:df:6f:d6:87:24:a0:62:
1d:b5:60:c7:69:4a:f6:10:21:f1:e9:08:47:5a:83:
70:ef:f5:13:ff:51:8a:2d:cf:22:48:19:41:26:cc:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:B6:8E:D3:F2:2F:ED:3F:43:C9:58:02:B4:46:7D:CC:36:64:6F
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:47:e8:a1:e5:e9:47:58:0f:cb:dd:16:6e:2d:03:e0:9f:20:
fd:d0:bd:a7:96:d4:89:e9:8a:fd:28:a1:99:b4:f9:98:f8:25:
7c:9c:e2:7b:9f:d6:2e:4c:26:45:11:35:13:a6:61:1e:1a:44:
80:e6:88:7b:1e:ee:7a:89:5f:a6:98:63:3a:69:48:02:18:e9:
82:3b:48:26:0e:1e:e4:0a:b3:7a:6c:45:7a:f6:9a:03:e7:4c:
1f:53:2e:6d:f6:ee:af:e6:a2:00:3d:5b:03:05:d0:ad:2b:ba:
64:e5:b4:8c:d0:be:e5:b9:ab:49:85:ec:41:fd:a4:e0:35:a9:
09:d7:a4:d5:e7:e0:84:d4:2c:d5:f9:01:65:aa:58:06:0b:95:
01:ce:42:6d:bc:5e:5f:94:11:9f:f5:75:27:1c:f2:84:3d:f6:
bf:97:f8:66:c3:e0:3d:0e:25:d2:7e:61:32:d6:9c:ce:e9:f6:
c0:5e:bc:05:66:64:fe:65:1a:87:c7:0d:5a:97:ab:b4:bc:ba:
24:ed:73:42:e4:bc:b4:77:f1:63:d1:72:e8:19:ae:fa:83:06:
db:b8:18:66:7e:7f:63:57:be:7f:fa:c9:b7:f6:2f:e8:79:6a:
d3:ba:0b:10:f6:5b:45:fd:d9:6c:ac:e2:55:85:83:7a:ba:25:
c9:28:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client