Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File: eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier: MpUvysbIYmwSxJhjFi8SA5wRUksl1oUQr4hQX1GP/B4=
Subject key identifier: 59:7E:3E:F7:15:BB:12:28:B1:AA:5D:81:6B:1C:67:9D:27:A8:99:46
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial: 019A71B78E87460BFA72CAB8C013448A617E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number: 1665
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: 9I8dngV1JT7KKjRI32gIyKSSyUk.roa (hash: mTvlNqWvha6TIOSslNPhqnseo6bfcEXwllcJxrieLVA=)
2: WIbpjNFgyL8FweUsKsihkm_PI28.roa (hash: VoeMP15IKS+YATCW5k8jloGWeOvqG6TTy+tPBwoxnfM=)
3: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: A4dLEOdPCySbgfopqSWLPaUNVH/rxwjnE5i8ETwSymU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8e:87:46:0b:fa:72:ca:b8:c0:13:44:8a:61:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=597e3ef715bb1228b1aa5d816b1c679d27a89946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:cc:ce:3a:3e:bc:f9:16:ea:8e:33:57:b4:
25:f0:fe:14:26:80:dd:48:66:74:30:7a:57:d1:48:
4f:a3:a0:38:cb:0b:44:4a:86:87:12:a2:4d:e2:f7:
14:b5:03:3e:80:cb:d5:d3:a4:80:c1:3c:76:79:57:
49:27:90:93:25:f4:ee:30:5b:05:67:3d:e0:88:b5:
c5:94:ea:d4:ab:df:5f:6e:6e:25:73:a1:ef:7a:9e:
8f:52:95:02:ac:f3:fa:1d:13:72:b3:6e:2a:4d:e9:
d5:5b:9e:ee:0f:3d:fd:39:2f:5b:9e:cf:3b:fc:66:
8b:17:3c:f2:62:4f:d0:a9:97:ad:ac:40:1d:d7:9c:
8e:f8:f2:af:8a:7d:b7:3d:4e:94:3d:a4:61:81:c8:
67:4a:92:7a:9b:19:ce:3d:fb:9e:da:5a:0c:84:78:
be:5f:c1:22:17:0c:0c:2e:46:fb:e9:c7:84:98:95:
0f:94:11:d1:81:60:9f:4c:6f:28:91:63:c3:61:f6:
c1:56:4f:bd:1e:8d:4a:38:0f:7c:8d:ea:b9:87:10:
93:10:82:73:02:3d:30:ed:8a:a1:01:13:0b:43:9b:
85:4e:69:79:93:c2:45:1a:13:ca:23:38:f2:91:95:
41:9d:a0:13:5e:9d:fe:ef:2d:f3:a8:da:56:68:c0:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:3E:F7:15:BB:12:28:B1:AA:5D:81:6B:1C:67:9D:27:A8:99:46
X509v3 Authority Key Identifier:
keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:7b:1a:53:a4:7c:4c:d3:3a:6a:67:25:ae:ae:ad:0e:c5:
0d:4d:1b:76:aa:57:18:28:86:59:a4:37:46:d4:c9:fc:5b:ff:
47:49:0c:16:f4:3a:6c:df:b6:52:ed:be:aa:1a:1c:7e:a5:8d:
77:0d:f3:37:43:61:72:09:b6:7e:2e:ad:aa:fc:7c:c7:ac:eb:
8b:3e:88:20:36:01:1c:9c:5c:68:51:17:20:8e:4c:8f:77:8d:
4d:45:31:49:92:4d:b2:14:5b:7c:3b:fb:3f:49:53:cd:91:b2:
4b:46:85:d6:d7:7a:f4:27:69:25:40:6a:61:6b:64:98:93:bf:
44:40:00:f9:69:0b:f8:59:7b:ca:5f:60:14:5b:8b:3c:54:b6:
35:e2:d6:c5:88:6e:c2:f6:bc:d9:14:2a:da:48:2a:a1:0b:f8:
b1:cd:0d:ec:57:20:e7:f2:49:e6:5a:08:38:af:2f:6d:bc:08:
7f:98:43:a7:83:84:9a:49:c5:68:54:95:b2:03:d7:cc:ce:30:
e4:79:f9:d0:7d:89:f9:96:80:40:c2:a1:cf:f4:c5:67:62:d2:
31:45:47:0d:b2:b3:1e:cf:9c:86:bc:77:73:f6:12:9d:86:7a:
c9:79:66:c0:e3:9a:21:dc:a1:a3:89:9e:3a:79:83:53:be:32:
83:00:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:38 2025 by rpki-client