Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File: mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier: UJLlRxfIGplvJ4r7um/ZUVC9U3cOUAWUFiXqVn/CH/U=
Subject key identifier: 20:00:B1:E1:46:1F:9A:BC:42:F9:F2:84:B0:4C:2F:75:74:6B:18:41
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer: /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial: 019A7301BE0A3EBFE2F19FD23CFE013AD2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number: 117B
Signing time: Tue 11 Nov 2025 13:01:25 +0000
Manifest this update: Tue 11 Nov 2025 13:01:25 +0000
Manifest next update: Wed 12 Nov 2025 13:01:25 +0000
Files and hashes: 1: CtjT3jVnXWmD83KR_4TWffaI4JQ.roa (hash: flK9Ib6/h/dfOz32Mluz/WYLhTwywQZxRxjgsE0wek0=)
2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: Z8PNft+47N4dE6zdmtwyksKS3awIZ7GXcfOO2L4mElg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:be:0a:3e:bf:e2:f1:9f:d2:3c:fe:01:3a:d2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Validity
Not Before: Nov 11 13:01:25 2025 GMT
Not After : Nov 12 13:01:25 2025 GMT
Subject: CN=2000b1e1461f9abc42f9f284b04c2f75746b1841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:af:9e:b9:87:e9:8a:55:7e:43:7d:7b:2d:
2f:69:6a:01:1b:13:a1:fc:93:39:78:67:4d:39:50:
30:5d:85:b8:f7:89:97:19:7d:df:be:2b:a4:00:74:
49:2b:a8:57:6b:93:33:39:b9:20:7a:74:e3:d5:f9:
ea:84:0c:6b:68:68:f1:bd:5a:4a:0e:26:35:b6:ff:
48:22:73:5e:8c:e0:78:11:d8:25:d6:16:38:01:7d:
de:d5:4f:54:71:f3:59:91:46:29:e6:14:49:1d:c4:
c7:84:52:8c:7f:50:ff:17:dd:d4:0e:f3:0a:90:d2:
e2:45:01:ae:af:f1:3a:22:3e:f2:b5:d7:76:f5:e9:
2e:49:07:4f:28:2d:48:d5:52:09:67:b4:83:12:d0:
96:08:95:9a:f4:39:a1:3c:1b:e4:9d:e5:7c:87:50:
67:40:7f:b3:42:82:7d:b0:a9:4b:d1:c4:f7:15:4c:
1e:9f:12:74:fd:eb:f2:19:52:96:be:93:24:b1:b8:
6b:86:ed:1b:a8:c7:9a:88:b8:f6:c6:0e:c1:c8:35:
af:00:97:0b:15:79:0b:82:af:13:40:0d:f7:f1:e6:
66:39:1a:a0:2d:25:ba:9e:39:e6:62:d3:5c:2b:e3:
5a:5f:b7:1d:52:e2:7d:cc:0b:9a:ca:6e:3c:53:2e:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:B1:E1:46:1F:9A:BC:42:F9:F2:84:B0:4C:2F:75:74:6B:18:41
X509v3 Authority Key Identifier:
keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:16:18:4d:29:dd:1f:75:09:96:2c:25:6e:01:c5:03:db:f5:
e6:17:d4:af:d4:c0:35:ed:34:14:dc:54:c3:c9:fc:75:23:6e:
55:72:d8:75:66:c3:60:89:f5:8e:63:d1:e1:21:92:42:33:e7:
af:e1:d8:d2:f2:65:50:28:b3:2e:3e:e0:1b:c1:a6:b5:e6:91:
99:52:9e:dd:57:7f:f9:06:5d:00:d3:41:ec:9d:7c:12:29:7c:
b8:4d:d8:a8:ef:f6:63:6e:4e:d5:bc:a2:7e:09:5a:85:63:7e:
49:60:1d:ba:0b:25:37:2e:fa:c9:98:02:c1:6c:9a:6c:13:01:
03:b4:93:59:42:31:7d:f3:77:a8:8f:4c:fc:2f:00:1f:0c:bd:
ed:13:29:10:6e:8c:9f:e9:64:7e:67:6e:40:77:d8:b8:ff:89:
2a:f0:5a:47:77:45:d8:62:dd:12:14:83:69:a1:c7:f9:03:2d:
37:6e:91:c2:02:b4:de:83:ca:09:95:ff:c1:84:da:40:44:4d:
dc:b9:3b:c6:fc:d0:39:48:9f:7e:7d:d0:33:2f:5f:31:ef:ab:
07:c4:75:c5:4b:5b:ac:47:ee:b6:4d:b9:b4:c3:1d:1e:51:9d:
fa:78:7e:f8:a6:98:6a:70:bd:ce:ec:b9:4d:22:a0:a8:71:ea:
74:9d:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:56 2025 by rpki-client