Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier: OW6IjBwJIbjBZsLdkOxYgQbtVcZWV4XqXgik6tw/hMY=
Subject key identifier: 7B:E7:9E:5A:67:07:99:AF:FD:EC:D1:C9:60:1E:24:5A:CC:DA:45:46
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 019A73382509E353C49C9A2ABC420FEAC061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number: 04F4
Signing time: Tue 11 Nov 2025 14:00:50 +0000
Manifest this update: Tue 11 Nov 2025 14:00:50 +0000
Manifest next update: Wed 12 Nov 2025 14:00:50 +0000
Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: mQmN6gy1K6EFU68B2XtQN6E7DiCU6yRv7wl5Dwqzwv0=)
2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:25:09:e3:53:c4:9c:9a:2a:bc:42:0f:ea:c0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Nov 11 14:00:50 2025 GMT
Not After : Nov 12 14:00:50 2025 GMT
Subject: CN=7be79e5a670799affdecd1c9601e245accda4546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:a5:a6:8e:87:2d:a1:6c:0e:84:dc:59:4b:
79:22:e4:ab:05:49:d8:26:4e:fb:ac:d2:be:d9:4e:
52:5f:70:51:cc:4b:c8:a5:b3:57:26:2f:4c:f0:ed:
89:c7:38:d8:4f:73:14:ca:6c:f4:78:79:47:bf:e9:
55:bb:69:26:9d:55:0e:73:fc:4f:58:ab:5e:37:2b:
6b:f4:bc:a8:f1:1e:23:3c:56:4d:59:85:35:81:d3:
a8:2f:f6:41:a6:c3:00:da:c9:43:f7:d2:1f:d9:e8:
da:18:01:46:95:01:a8:25:90:f9:ec:28:69:62:6e:
5a:f2:f3:8c:68:d5:72:1d:7c:7a:41:d4:bc:50:01:
ab:f4:ce:4a:75:4b:ca:f6:c6:b3:36:57:d0:4e:27:
23:ef:dd:f0:6c:19:92:f8:8e:ed:7d:4b:c1:ef:09:
1e:d4:bf:37:a5:5a:b3:e8:3a:c7:0b:81:65:33:a4:
91:ba:de:2a:d1:fb:1b:d3:37:9d:c8:06:93:9e:96:
84:74:5e:80:54:b8:24:e2:46:52:1e:84:2e:21:a0:
c4:a8:7b:3f:a6:4d:aa:aa:ef:50:02:0c:98:05:64:
72:45:52:14:d9:e9:62:71:3c:d9:ae:a2:f1:fc:51:
5f:2c:43:f2:2e:85:db:ac:38:bb:b3:d9:9d:8f:dc:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:9E:5A:67:07:99:AF:FD:EC:D1:C9:60:1E:24:5A:CC:DA:45:46
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:42:e8:36:23:77:df:61:48:cd:fa:2d:ee:5a:d3:c7:e3:eb:
03:12:5a:a9:dc:89:9a:a6:48:0c:53:41:4a:42:66:80:0f:e6:
f0:81:42:d8:83:71:f1:6c:59:bd:fa:08:72:52:ff:06:90:2a:
89:2d:47:e1:78:98:9e:e2:fe:39:92:f5:8e:64:f9:b7:7f:51:
a9:0c:a2:17:71:7d:70:47:09:d5:65:f0:3a:fd:0b:35:89:4d:
58:50:2b:ba:1d:da:76:c9:ee:49:2f:02:4d:41:86:57:a6:26:
51:f8:d6:46:f3:ae:c9:9d:03:19:c8:28:6c:3a:34:72:d9:a7:
9c:91:45:d4:4f:09:98:86:e3:77:df:f7:bc:88:22:6a:c8:bc:
d6:fd:f4:69:f9:cb:bc:c1:76:56:d3:2a:1e:b9:93:a6:c8:03:
31:fa:b5:9b:65:04:cc:11:c2:c7:f5:99:62:fb:c5:21:4c:37:
14:ff:fb:33:47:bc:07:a2:d1:5f:79:76:7b:60:1a:5a:af:9f:
79:57:c3:3f:52:c4:e1:20:52:b6:b7:64:d7:0d:4d:99:da:9e:
a7:91:8b:a0:90:b8:9c:0a:12:27:dd:38:05:a9:19:44:58:e4:
3d:b7:66:9a:44:a9:a6:11:45:bb:5b:d6:75:8f:6d:67:08:0b:
00:cd:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:27 2025 by rpki-client