Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File: eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier: S88xZDGM6hjsHpdo0EjX5WevBeqEEh6Z9Pclo59KzGg=
Subject key identifier: 22:F1:11:01:EA:94:76:6B:40:72:E8:DA:7E:AC:6B:CF:BD:E8:F3:14
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 019A70DBFBD3845DCE5ACCA967A55672C9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: I4IGt1BB7TjJZYAXGYocgMDl/Ml2ygnnRVFV6wq8aZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fb:d3:84:5d:ce:5a:cc:a9:67:a5:56:72:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=22f11101ea94766b4072e8da7eac6bcfbde8f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:75:73:65:56:91:9a:11:94:c2:c3:d3:8a:
b0:bc:be:53:6a:9a:5f:29:13:5b:94:89:f4:47:20:
03:1d:fd:3a:b8:67:3a:87:a0:97:bb:3a:f8:08:84:
b3:63:b4:23:3c:ae:f3:26:8f:5a:ae:3b:bd:bc:f6:
39:0f:a1:3f:61:c2:61:a7:84:f6:98:05:66:76:6c:
9b:da:72:b6:94:39:27:b6:c1:c5:c0:e0:6b:11:6e:
17:2f:9d:1a:a9:64:69:bf:b7:34:02:06:ee:48:88:
20:be:65:bf:a2:14:ba:fd:8d:5f:d9:c2:d2:95:e6:
1a:f9:70:61:51:f5:6f:f9:f7:50:61:e6:65:ca:bc:
aa:ea:f4:c8:5d:43:19:2b:d5:6d:aa:f1:c4:6c:06:
e9:17:5c:98:8e:07:49:0f:aa:4e:8b:27:f2:09:c0:
f9:7b:40:b6:fa:68:d4:8a:e0:91:a5:38:a8:73:49:
0a:83:de:ee:9d:d5:10:de:12:45:f0:1b:63:6f:98:
e1:4d:46:e7:b5:22:d2:d6:02:5b:a5:ef:ce:94:73:
69:37:f8:9f:6a:d0:b6:b6:14:0e:a1:80:f5:4d:e3:
f5:7b:10:f4:2a:f1:49:ef:12:7e:3c:49:d2:2c:67:
ac:c2:d6:53:ec:83:9f:8a:5b:6f:ce:e3:53:ac:be:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F1:11:01:EA:94:76:6B:40:72:E8:DA:7E:AC:6B:CF:BD:E8:F3:14
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:92:06:71:a5:02:1f:52:3d:88:aa:5b:d8:13:79:17:8a:
72:5c:4a:5b:e6:82:25:e0:09:b1:8c:e5:17:ed:b5:78:98:77:
eb:08:90:81:2f:e8:1b:ba:ef:54:f2:25:f0:6e:c0:ca:a8:67:
b2:12:7f:16:d4:b2:28:5e:8f:6b:46:4e:37:35:ee:50:35:2c:
9d:df:33:c4:1d:ee:00:90:58:bb:5f:b4:bf:a4:93:23:03:64:
ed:e0:8b:a8:c3:da:b5:ae:41:4a:7d:d7:e6:b3:40:0d:e2:46:
92:dc:37:44:ef:44:19:c2:ee:63:4f:3a:6c:15:8b:5a:84:6e:
97:d9:bd:ce:08:6a:cc:bc:d2:f1:49:b4:88:03:31:4b:9d:83:
ab:d9:e8:f9:4c:a7:42:0d:fb:43:8b:43:be:3f:44:94:a5:33:
bb:c6:05:a7:2e:30:f4:f4:88:b4:21:61:27:23:fa:a5:f9:7d:
3e:56:c3:6e:d7:17:0a:e7:26:96:45:af:18:8a:6d:09:a3:d1:
87:72:5d:f7:dc:a9:12:9e:61:0b:bf:1a:09:22:11:1e:ac:72:
f1:fb:19:83:b7:0e:15:02:9f:26:b9:cd:43:66:ee:cc:77:ca:
72:68:45:52:55:df:6a:00:e2:bb:b0:b6:bd:77:a9:06:ae:34:
76:42:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:11 2025 by rpki-client