Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: 2ZFhxgx7gG4xztTccMOJugaYbW00kpLmPpQqRM3xLW8=
Subject key identifier: EB:40:01:34:B9:10:92:5F:0B:5C:25:C2:C8:99:59:B2:2B:A3:84:C5
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 019A71B876F7044155EA9BBF050A896D8E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0D8A
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: weG1E8KINcL+++F7uqz91Nud3NExwLNgDme6fnD1xVU=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:76:f7:04:41:55:ea:9b:bf:05:0a:89:6d:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=eb400134b910925f0b5c25c2c89959b22ba384c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:e5:f6:71:c7:53:06:48:a0:a0:25:f8:56:
93:af:86:72:2a:79:38:82:6a:68:48:27:fc:88:f4:
c6:13:7e:93:c3:84:3b:09:cd:2a:de:ac:8c:c5:bb:
07:9d:74:4b:25:54:f6:d9:34:81:4e:15:9b:84:5f:
37:ee:a0:f8:62:14:11:81:f9:31:94:03:91:2a:31:
e8:cb:24:66:10:03:5a:f8:a9:d1:5d:f8:5d:2e:4d:
3a:b9:80:d6:4a:7c:ce:6b:3e:e0:38:d6:d2:7f:93:
66:61:8c:d6:ac:a3:0c:8d:94:4e:ce:45:e7:06:f8:
4f:f5:95:bb:a1:a1:9f:db:f7:85:f8:80:16:50:9e:
8b:97:48:d6:de:06:94:77:e7:3b:7c:9c:93:73:bf:
22:2b:17:0c:46:0e:a1:ed:86:eb:84:13:3b:a2:94:
26:b7:19:a7:2f:19:53:ce:c2:e0:9b:2e:f2:7a:d3:
29:47:59:f3:af:ab:83:44:29:1f:62:83:5d:66:f6:
52:55:31:9e:8c:ac:0c:50:e6:ac:32:ec:19:4a:30:
90:23:c4:11:3a:7a:9c:80:f2:15:7a:64:4c:23:65:
3c:3e:9e:41:b9:51:64:91:8d:49:0c:37:af:e7:b0:
6a:4c:27:2b:6a:6b:7e:19:6f:8e:e0:a7:5a:75:25:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:01:34:B9:10:92:5F:0B:5C:25:C2:C8:99:59:B2:2B:A3:84:C5
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2e:a5:dc:20:3a:f3:b9:c5:a2:b6:8d:c0:da:29:16:12:fa:
b3:fa:c8:6e:a8:07:fd:d1:b2:96:72:11:94:50:ea:a8:d2:5b:
92:6b:e3:09:aa:df:dd:9f:cb:ec:9a:cc:2f:60:e2:74:ec:bc:
0b:10:09:33:9c:f9:d2:80:e9:75:3d:b2:84:f5:c8:89:2b:8a:
d0:97:ce:71:e1:3d:c4:24:53:84:77:be:07:b3:ee:cd:8d:19:
91:b9:53:e1:44:20:1e:5b:46:05:90:3a:d2:dc:2d:2f:8f:09:
41:14:92:40:f3:61:ae:aa:7f:a8:7d:eb:8d:20:36:53:88:66:
60:7d:a7:66:a8:ee:36:9d:ab:ce:d9:d9:09:69:53:4a:c5:4f:
0f:c5:1d:d2:4a:c0:b9:48:b2:0f:ca:aa:0f:87:c9:f8:88:4e:
95:dd:db:7d:7b:29:55:36:94:69:aa:af:b2:93:3e:f9:0d:fc:
14:07:cd:0e:29:f2:42:0d:f5:8e:c3:d0:0c:cb:d5:9d:39:63:
9c:6d:16:8b:1f:56:0a:88:dc:b5:e0:1c:42:b8:94:d9:cf:f4:
f1:30:ae:eb:9e:45:0e:ce:dc:2f:0a:6e:30:81:a5:b4:95:17:
98:f7:c8:86:cd:9a:8d:01:9d:8b:f7:93:d4:1c:44:c9:e2:ed:
00:41:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:12 2025 by rpki-client