Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: mAdvvO/8nmwhNoB8Fj/zE/EHsKdiyegfwu9kry2XMUk=
Subject key identifier: B9:1E:CE:73:42:33:E4:9A:F0:71:14:81:45:FD:1E:6F:A0:6E:B7:F0
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 0199FC214F846FE8C27578EB1AA7EE48D8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 11EC
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: re4xPxqBlL/iuSUJNcefPCsDu4wIYLrVWwcGqHItTYE=)
2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4f:84:6f:e8:c2:75:78:eb:1a:a7:ee:48:d8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=b91ece734233e49af071148145fd1e6fa06eb7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:9a:89:b8:e2:d8:64:d1:68:b2:6e:f5:22:
9d:13:66:23:32:53:45:6a:16:c6:5f:c8:39:b6:2b:
e6:67:67:57:ad:35:5f:00:82:d4:45:e4:10:5f:63:
63:03:5c:b1:24:77:6e:ff:be:b2:87:a7:b7:50:09:
5e:c1:18:53:99:68:b7:27:76:dd:4d:ed:66:c0:ca:
61:33:9f:55:6f:66:0a:c0:3c:36:2d:f9:0c:f7:72:
55:1f:ac:f3:eb:6f:4c:62:45:2b:07:43:14:52:cb:
b5:8b:35:51:9b:9b:ef:30:49:d2:6d:49:13:35:35:
1c:13:6c:a3:f2:62:0c:f4:4c:55:20:3b:f1:b6:00:
cc:82:62:db:da:9a:9d:b4:62:ef:9a:80:94:3b:46:
64:ea:be:ac:29:c6:48:35:20:77:9c:56:28:50:c5:
67:f1:2a:43:e1:65:8b:70:49:0d:ca:f2:26:af:9e:
dd:a8:0d:db:3e:a6:ff:1e:32:6c:d0:e0:3e:c3:59:
41:27:7f:23:da:75:96:0a:0b:97:d6:76:d1:80:7a:
70:9b:9c:0d:4b:58:a5:21:50:bc:fd:20:47:55:51:
86:f0:fa:bf:90:37:11:fe:38:77:ee:ad:32:50:35:
89:d6:e3:96:a5:5d:8c:79:8c:ea:df:31:24:7f:0c:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:CE:73:42:33:E4:9A:F0:71:14:81:45:FD:1E:6F:A0:6E:B7:F0
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:67:80:5a:ec:a0:1b:07:42:b7:7b:a4:e9:6d:7e:b5:b4:b6:
43:cd:89:c2:0f:65:e9:5e:74:c2:b6:a0:92:32:4e:83:0d:17:
e9:46:e1:8a:dd:41:f6:ee:88:2e:99:f2:a6:67:25:3c:2d:bf:
45:bf:f0:74:d5:bd:86:94:78:5b:3f:5d:a5:4b:1a:da:ac:f1:
73:35:87:84:bd:d2:9a:c6:d0:ed:4c:5b:2f:e8:b3:7c:56:56:
5c:e7:60:05:71:45:de:d5:f3:77:74:f7:a9:02:ab:71:14:03:
da:31:53:53:d4:0f:44:ce:95:f9:af:77:a1:40:06:04:fc:cf:
3e:16:cb:e1:f8:38:a6:26:5c:36:df:53:66:0f:6e:cf:fc:d5:
d6:bf:68:12:c0:62:06:d7:ab:3b:08:9d:97:03:9d:60:a5:c2:
7c:8a:ff:32:6b:fe:aa:d7:36:ea:0d:f4:48:1b:0f:46:37:79:
2d:53:18:5a:0d:9e:5c:df:b3:3f:10:a2:e5:b1:ba:2e:db:0e:
d6:0c:59:1e:c4:3a:19:a9:0b:b8:fb:c3:d1:05:d1:64:be:b4:
38:fa:a7:16:83:0b:27:57:1c:16:41:4a:e3:11:5b:3d:a9:c9:
9f:cf:fb:2b:31:8b:e5:6c:e4:6e:b3:49:8f:59:fe:f5:56:0f:
49:40:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:41 2025 by rpki-client