Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
File: eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft (raw, json)
Hash identifier: mL1YNMAnYuFWNqu2ZqpmBy54xVBQC3LICtcBzLmgZRE=
Subject key identifier: C4:F9:9D:46:63:6F:75:C0:C3:7D:3E:E4:F0:79:98:BE:34:B6:82:CC
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 019A706E70417DAB56EB5D6B880BFC121717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
Manifest number: 0476
Signing time: Tue 11 Nov 2025 01:01:17 +0000
Manifest this update: Tue 11 Nov 2025 01:01:17 +0000
Manifest next update: Wed 12 Nov 2025 01:01:17 +0000
Files and hashes: 1: K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa (hash: +rmjiYwXrF8JZPtQv5BcnXcfYd5CjncGCQcj1Z55VOk=)
2: eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl (hash: QUUI5wUmjKwqwxwHPF+aXPX7q0DZws1hDkaO/dCJTGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:70:41:7d:ab:56:eb:5d:6b:88:0b:fc:12:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Nov 11 01:01:17 2025 GMT
Not After : Nov 12 01:01:17 2025 GMT
Subject: CN=c4f99d46636f75c0c37d3ee4f07998be34b682cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:34:81:3d:44:34:95:8f:cd:68:42:70:19:
94:07:f5:ec:77:a7:d8:d5:54:66:a6:59:a4:92:79:
e9:79:c4:3c:88:00:55:7b:d1:74:39:f6:7e:e5:49:
4f:58:fd:8c:5c:5f:f5:53:67:6e:b5:57:15:9f:6a:
8f:a8:e3:65:85:89:5b:65:fd:47:bd:9b:68:ba:44:
89:0a:c5:c7:37:b9:9f:5e:c1:5f:e1:10:56:24:02:
0f:c2:c4:1c:92:fe:ee:33:a6:18:01:80:11:e6:7b:
91:96:bf:0e:95:62:46:61:25:25:7b:18:e8:d9:76:
c0:27:d2:ec:69:ba:3a:60:72:67:91:96:a9:97:90:
e5:f3:bc:0e:6b:ca:60:92:62:07:d0:d7:a9:93:9f:
61:4e:d9:a7:e8:03:7f:1b:f2:0e:ee:40:6e:9a:33:
f9:49:4d:2a:9f:05:60:57:7d:06:ae:8c:b9:fa:26:
cb:8f:42:9c:f8:98:44:72:a1:ab:50:5d:8d:0a:76:
1f:05:34:9c:d9:34:94:26:4b:c6:8b:cb:34:c4:d3:
46:ff:7f:c4:49:35:cc:13:a1:c2:4d:0b:98:22:b1:
e5:c7:b0:53:a8:d0:87:e2:c9:10:8c:d2:cb:44:ba:
58:dd:fb:f2:98:a9:18:5f:1f:e2:fc:d4:4c:49:a0:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:9D:46:63:6F:75:C0:C3:7D:3E:E4:F0:79:98:BE:34:B6:82:CC
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8d:85:5a:89:d0:9c:af:0b:6d:35:8c:55:81:6c:3c:d0:d0:
6d:8d:8c:72:06:24:97:bb:76:e3:df:95:6d:30:d3:2f:2f:8d:
44:d1:2f:04:67:30:26:fc:49:03:16:bd:24:6f:db:21:c3:7f:
dc:9f:1b:7f:a9:67:39:22:4e:f2:3a:e7:b7:a7:10:be:72:b7:
bf:c3:b1:bb:f6:a9:b0:f9:53:76:f6:2a:9e:a7:c1:1a:24:e4:
2f:5a:e9:71:4f:19:1a:8e:d7:b3:81:70:e3:f6:24:eb:d5:92:
b2:58:6b:77:6c:d5:6f:87:01:ad:40:bc:91:58:89:27:b4:70:
f8:c7:9b:aa:a7:32:e7:35:df:47:5b:94:8c:ff:95:8c:fe:7f:
97:0d:87:1c:13:1c:7e:a8:f3:fa:46:05:b9:c6:46:8b:5c:bd:
ef:31:f3:a6:1f:6e:bc:77:a7:09:9b:78:b7:c4:91:fe:53:2c:
14:8a:d6:f6:35:67:7f:9e:8b:dd:1b:f3:24:5e:bf:b7:41:8d:
5f:ba:99:ee:8c:85:b4:bd:c7:4c:e1:bd:08:2f:9e:dc:b2:eb:
01:dd:3f:05:9e:5a:f8:30:f2:04:1b:5c:e4:e2:02:3f:91:1b:
6d:30:f2:81:7e:c2:51:7e:9e:5c:60:26:67:c6:31:06:74:52:
79:b1:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client