Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File: EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier: FjtOYacbp4M7UkVXcseNkDBW4nIc7HzTkn3T5yUQ8Aw=
Subject key identifier: B6:C6:C6:01:8E:22:69:49:58:80:63:8F:BA:8A:7F:16:E0:37:EC:F6
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial: 019A4BF39A0A5D27D18837275B06EA7C54D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number: 1168
Signing time: Mon 03 Nov 2025 23:00:47 +0000
Manifest this update: Mon 03 Nov 2025 23:00:47 +0000
Manifest next update: Tue 04 Nov 2025 23:00:47 +0000
Files and hashes: 1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: klpJmC18c5pm8DwjAjPUiTSd1Iy3XjXnHRRVGQreMvw=)
2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:9a:0a:5d:27:d1:88:37:27:5b:06:ea:7c:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Validity
Not Before: Nov 3 23:00:47 2025 GMT
Not After : Nov 4 23:00:47 2025 GMT
Subject: CN=b6c6c6018e2269495880638fba8a7f16e037ecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:6b:05:69:ec:54:28:35:f3:cd:9f:e8:8d:
65:a9:f6:d3:63:54:56:32:9b:02:02:aa:b3:d3:60:
b5:8b:df:71:d9:fd:09:b7:9a:09:6d:de:38:80:ef:
17:6c:bf:bf:88:de:27:50:ba:74:8e:0a:36:bf:fd:
cd:b4:d2:ac:7c:a6:82:f3:e2:31:50:2a:23:2f:d4:
48:7c:2a:ff:9e:b4:16:f7:f0:1f:50:65:a3:16:92:
02:ad:a2:83:12:34:aa:c4:d5:17:ac:63:11:23:4c:
0b:fa:75:dc:c1:61:f7:8f:ca:14:d1:a9:dc:b3:46:
60:26:6e:2f:d3:31:df:62:47:db:44:bf:a9:0e:f3:
b6:b0:31:0e:42:5b:42:be:bb:b5:a3:e0:e7:35:69:
a7:40:3c:c0:7c:ac:86:59:e8:bf:96:02:f4:b2:36:
98:6c:d8:92:97:ab:5d:7b:1f:27:88:75:8a:0d:51:
9d:a8:22:88:6b:56:90:8a:1c:dd:42:ea:36:7a:1f:
89:61:d7:0b:e9:37:d7:99:b7:f6:41:82:2b:4d:db:
79:cc:06:eb:d0:f2:b4:ff:2c:69:a2:ec:f5:47:34:
a0:66:7a:16:6b:02:3c:81:b5:4f:d4:e0:3b:c8:d1:
e3:4f:4b:0c:1e:36:2c:3b:ac:d6:9e:85:35:8b:de:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:C6:01:8E:22:69:49:58:80:63:8F:BA:8A:7F:16:E0:37:EC:F6
X509v3 Authority Key Identifier:
keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c5:4b:f5:3d:59:ae:5f:76:3e:97:6d:f6:9c:63:ae:2b:18:
a3:af:db:b9:87:ea:19:59:9d:3d:42:d1:1d:3d:50:d8:7e:1c:
b3:f6:be:a8:43:fe:7a:c8:6b:8f:d9:34:a7:90:fc:bf:cd:97:
95:dd:62:92:c0:5c:f1:eb:4b:9c:b3:ea:6e:97:0c:8d:98:ed:
8e:9c:25:dc:7c:9c:7e:7f:eb:c3:08:ae:4d:c9:30:1c:4b:a3:
ed:96:76:65:89:1e:3d:da:b5:5d:f7:f3:29:69:59:ca:3b:13:
13:a3:54:4d:eb:89:1f:62:fe:8d:f6:ac:02:47:7f:e5:4d:88:
eb:03:95:05:87:89:85:99:f7:ea:d5:85:1a:aa:58:c0:8a:8b:
fc:05:4a:47:f1:1e:62:77:50:0b:75:db:32:89:e2:cd:03:0f:
f6:f0:fd:11:55:46:08:17:87:28:00:05:a3:8a:4b:71:a0:de:
1f:3d:83:83:fe:42:07:0a:96:64:fb:96:0c:a8:4e:f7:c3:f2:
ed:ac:86:6b:2f:3c:11:8a:dd:ab:28:fd:0f:47:cb:65:2d:50:
5e:37:21:e5:e7:b0:d4:3b:ed:ed:91:fe:ea:d7:4c:e2:d0:1d:
a4:b0:0f:1d:43:dd:2d:33:ae:06:61:81:32:76:8b:d1:bd:c6:
77:78:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:13 2025 by rpki-client