Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
File: mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft (raw, json)
Hash identifier: njjj0hInk77AQ4VZl+nBAH1z55qABwcFTBAYPfUY1Wg=
Subject key identifier: 7A:97:19:D3:47:3E:E7:6E:88:3F:C6:73:8A:63:EA:B2:18:20:DA:26
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Certificate issuer: /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial: 019A725CB79DF789FB4D1399B3926D1BCFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (hash: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=)
2: mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl (hash: kTpidUvLnAxraHkqoZeX6xUQexLj08lqG7tDGKi7EqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b7:9d:f7:89:fb:4d:13:99:b3:92:6d:1b:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=7a9719d3473ee76e883fc6738a63eab21820da26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:71:cc:7d:b4:1a:e7:c0:a3:50:e2:e2:1c:
71:a8:60:d8:dd:58:71:55:93:17:d6:80:b3:c3:16:
68:40:19:79:40:c1:5f:d9:b7:4a:81:4e:53:82:a4:
6c:12:bb:9f:52:31:cf:88:72:b3:92:54:43:eb:ce:
29:12:a7:2c:ad:05:45:50:d6:9a:f5:f1:71:bc:c3:
61:27:e0:61:f9:cd:6b:48:98:2e:cf:fd:81:47:72:
ad:ce:c2:56:81:72:5b:46:c6:d1:28:ff:dc:cb:b8:
20:fe:3b:0d:63:bd:84:6a:4a:0b:25:81:28:96:a0:
f0:6f:e8:c4:97:cc:fb:01:c6:68:cc:52:24:16:d4:
ca:94:dd:6c:e5:f6:7c:dd:66:1b:c7:36:49:19:03:
f0:06:cc:82:6e:5b:c1:6f:d5:c7:de:be:8c:5f:95:
0c:c5:63:a9:c8:f2:cf:e5:fd:a6:41:f6:6c:d1:fc:
58:c6:49:7a:dc:5f:62:02:fc:48:7b:de:9e:53:b8:
b8:b9:ed:73:a9:bd:9e:85:9f:22:d5:74:8f:a6:cb:
fa:16:2d:17:15:59:57:63:7c:49:9e:0a:e1:e0:f6:
f6:5f:98:e2:ea:98:55:7d:93:2d:37:85:68:e3:5c:
b5:a5:4a:64:18:56:67:fe:c6:39:1f:34:26:ed:72:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:19:D3:47:3E:E7:6E:88:3F:C6:73:8A:63:EA:B2:18:20:DA:26
X509v3 Authority Key Identifier:
keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:16:40:44:ba:4b:25:89:6f:24:9a:70:a9:ee:05:0f:bc:1a:
be:0b:77:0d:39:65:90:56:33:31:d2:5b:f4:f5:19:47:31:c6:
81:aa:fc:6b:d3:d2:00:59:d6:0d:36:b4:a3:1b:3b:9b:a2:10:
7e:bc:2d:cc:f6:36:44:f5:29:44:03:0c:ee:9e:84:5e:ee:48:
3d:d7:26:9b:fb:70:35:52:4e:78:c3:a1:34:fa:98:52:56:58:
23:f0:70:27:41:c0:6a:c9:07:04:b0:a0:74:ec:4c:9b:34:cb:
26:28:68:d2:e5:5a:ca:cf:19:a8:50:b4:22:07:ea:fe:40:4e:
b8:c4:f9:1c:fd:2a:1a:bc:a2:25:28:04:be:5d:a3:03:85:11:
85:6d:c4:44:52:4b:05:ab:cf:74:64:0f:95:b6:64:21:0f:01:
09:bd:04:22:26:3d:8c:36:89:a3:35:43:ed:5f:86:b7:79:6d:
c7:4c:91:c5:60:42:a1:85:47:9d:a2:11:ec:ff:a6:26:ea:8f:
72:20:6f:f7:6c:3f:64:92:f2:fe:13:dd:1b:d4:ef:2a:18:ba:
f8:4b:0b:65:8f:ae:4b:63:23:6a:ec:80:8d:ad:15:d4:a2:a7:
98:24:33:0a:89:a4:1c:89:f4:75:a6:ad:c2:1b:4c:46:a9:c3:
40:08:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client