Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
File: edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json)
Hash identifier: 66oiCTmVCWR2zNkolcs3SgE2HVvFeCMKDY7xiVH2fHA=
Subject key identifier: 93:C6:27:09:4E:30:A3:4F:DF:A6:92:6B:81:AA:39:91:6D:7A:DE:D2
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial: 019A71EEB50541483D62F6CA593A29CBAF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: nM7JaKLCgDw/Sq6+eH0ASk9AVbX7KZ00Y9h8Skj1zJg=)
2: hqnI55-BtuuM4vFpZ56v79LAU1E.roa (hash: de3zBJnkxcrGTCeqUEM+8xu6xpr3xr2UbYA58RD5CTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b5:05:41:48:3d:62:f6:ca:59:3a:29:cb:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=93c627094e30a34fdfa6926b81aa39916d7aded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:39:97:17:a4:51:a4:d0:d1:fc:3d:28:b1:
45:86:3a:ed:77:b7:98:8f:f8:66:73:a7:79:b7:af:
53:18:a4:4d:e2:1b:cd:6f:aa:cb:2d:ab:7f:b4:d9:
80:dc:09:ef:96:56:8a:a9:8f:a2:fc:6c:57:a2:7b:
0f:4f:2b:7f:5d:56:5c:a7:46:78:90:fd:e6:0e:9f:
05:ed:4a:9b:6a:be:65:e4:f6:39:b5:06:d9:9e:c2:
ba:7e:09:56:a1:64:e1:df:b6:99:8e:81:1b:c8:48:
f3:ce:d1:21:72:dc:93:16:15:09:87:c6:6b:de:57:
52:8e:16:6e:17:9c:2b:e9:5a:df:d3:55:18:93:f4:
e0:e4:ac:37:69:00:82:63:37:db:ea:c4:41:1d:7e:
f2:a3:bd:a9:e3:7c:44:d1:8e:8c:cb:b4:72:60:4b:
67:5f:c2:e2:9a:db:7e:f1:d8:af:3d:74:38:e2:fb:
2f:f7:7c:7f:9f:0a:57:2c:ac:9d:83:d9:8c:1b:6c:
15:a3:31:b2:60:99:fa:2c:63:27:62:03:0e:b5:42:
76:6b:f8:f4:05:cf:51:66:b1:25:3c:f8:3d:2a:fb:
22:4c:27:86:40:28:7d:f8:91:4c:4b:30:00:04:3e:
37:8e:9a:43:40:a3:93:21:20:dc:a2:4c:05:09:49:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:27:09:4E:30:A3:4F:DF:A6:92:6B:81:AA:39:91:6D:7A:DE:D2
X509v3 Authority Key Identifier:
keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:90:6e:68:78:9c:f4:c4:2f:5c:33:78:c1:ad:9d:95:f7:
6d:37:bc:89:73:67:74:1a:f6:38:e5:15:2c:77:8f:a4:c4:af:
f9:05:cd:e6:05:1b:02:9d:79:6f:c1:16:c4:ed:0e:98:98:a6:
f8:27:48:d4:ff:a3:7c:00:c6:74:df:bd:5b:b4:e4:ef:54:ce:
dc:34:fb:a0:c0:37:97:a4:32:2a:47:ae:75:a2:31:5b:d9:1d:
d3:cf:0e:ef:d2:69:ea:ea:64:03:c3:05:fc:b7:5a:d5:a9:b1:
4b:ca:13:26:f7:d0:09:15:98:2c:d3:ff:a9:13:a9:c9:e6:7b:
df:6c:dd:25:a5:c4:6f:bc:27:b9:fc:1c:d0:99:6f:a8:dd:55:
d2:76:35:6f:e1:ff:b2:8e:a5:ac:04:3b:9b:52:7b:d9:45:12:
29:3a:d9:9a:a6:29:43:41:8f:38:f0:bd:1e:81:c2:8d:a4:ff:
77:1a:98:59:8a:fc:88:0d:65:38:11:5c:7d:19:f6:03:58:97:
e6:a9:97:34:ab:07:f7:28:d1:63:1e:1e:17:8e:b1:f7:f0:fe:
1e:43:e7:54:fa:bf:14:2d:62:c8:e9:7f:ef:e8:e0:ac:a3:4d:
7d:e2:87:6e:a5:0b:71:7b:d3:66:cc:40:fa:d7:00:aa:6b:14:
f0:17:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:57 2025 by rpki-client