Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: 9/llbRybCLGGsjMb/xWsU4E30hOlZgKKCkMr9d6F7qM=
Subject key identifier: FB:93:E6:FB:E7:EF:FD:10:3E:19:DB:1E:A8:5C:50:46:BD:80:55:DB
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019A7293D213BFD0ACD494485F7A26A63F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 16
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: A6miDIxB8Wdjtr_lFnVP3zc1yEU.roa (hash: u75fl3PpONlhzAXKJftyifbBGQ2cdDNjbrEViQz/gYc=)
2: Wi7lq0EepuoKE1ECDq4hgwqhTJ4.roa (hash: snR41jbhkVx99lA80we836PNmUV3pPf4+CmkKZ9ZfHs=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: C00KRsKLlOTQciGg8eXA72Ufa+jKNHsVQqir/x2l+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d2:13:bf:d0:ac:d4:94:48:5f:7a:26:a6:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=fb93e6fbe7effd103e19db1ea85c5046bd8055db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:9c:b5:37:89:9f:d3:db:83:53:45:b6:2f:
1f:b6:0c:90:f1:b0:a8:23:3b:94:bd:0e:e9:ed:a0:
9c:1b:62:3e:ce:12:7e:8f:07:75:77:35:19:f1:f4:
bb:a1:c3:3b:a7:96:9b:33:94:6e:00:b2:35:bb:46:
19:5d:77:41:cc:b4:c8:c4:75:64:e8:be:15:b2:d0:
7e:8e:43:72:5e:4d:b0:90:a4:e3:89:4a:b0:1f:2a:
e9:ac:e9:a0:cc:01:e2:5e:b4:c8:5c:d9:6d:82:41:
01:85:36:23:65:5e:2c:16:f5:39:4a:95:b6:87:d8:
d4:ad:95:c0:1c:dd:b2:2b:df:8f:14:89:13:08:df:
1c:3a:ab:7c:79:79:b5:5f:d2:b7:ed:3c:4f:c3:b9:
ca:4d:35:09:3c:bb:2c:2c:b7:ec:fe:d3:5b:9c:59:
07:6c:17:90:51:fd:5f:a3:1b:68:23:87:ee:7c:d8:
03:ab:ff:dd:60:66:8f:fd:f2:81:a0:33:49:a1:28:
33:40:a2:33:12:9f:5a:25:4e:5c:dc:47:30:7e:97:
7e:0a:0d:83:e7:89:c0:97:32:15:e5:31:c3:f3:d1:
26:ae:e8:c4:95:df:62:45:4a:15:4d:aa:6f:de:b2:
bb:e1:18:2a:29:ef:d6:6d:b1:05:59:e6:52:f6:b5:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:E6:FB:E7:EF:FD:10:3E:19:DB:1E:A8:5C:50:46:BD:80:55:DB
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:cf:cd:7b:79:e6:6e:ff:65:c6:bc:5e:06:19:2d:47:9e:
2e:f7:ac:31:91:b1:72:48:c1:5c:8a:e3:ca:80:05:dc:31:3c:
02:a8:aa:33:d2:45:05:2a:1c:17:72:02:5b:51:8b:9e:a2:d1:
b8:a0:fb:2a:14:0e:3e:59:6d:c3:72:be:d9:53:d8:03:af:c5:
8f:02:22:68:d9:bd:f2:9e:0b:48:99:9e:9b:21:a1:e7:22:72:
5d:0d:f4:f6:54:d9:c7:9c:91:7e:d4:aa:f0:3c:6b:ba:f5:c3:
68:cc:b5:43:fe:d5:01:3c:3e:63:8b:8e:bb:25:a8:ff:e4:57:
68:cc:6a:e2:7d:17:d3:33:74:be:81:5c:e0:c6:a9:c3:24:04:
f4:13:70:16:4a:85:a3:f2:e8:14:7f:30:e3:10:6f:c2:53:3e:
9e:13:43:f5:a4:7f:a2:9e:cb:2c:0d:da:28:ef:06:d1:2b:e1:
fa:0f:79:13:ec:be:a8:e8:f7:80:f2:fe:b5:78:0f:bf:22:0d:
dd:e8:30:9b:e7:1a:91:3c:f5:cc:bd:0c:c9:0f:b2:8c:6b:14:
ca:d3:8f:56:08:5b:87:58:a9:19:02:dd:ff:f5:98:5f:60:6a:
54:68:3d:55:0a:cb:46:45:37:ce:55:4e:4c:0d:d7:e5:8b:fd:
84:ed:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:24 2025 by rpki-client