Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: ogZwXhPrzXTRg61aXKvyiwtX4eqUNOL5oBfJwai9Wqc=
Subject key identifier: CE:5A:DF:66:02:A2:A8:03:C7:27:CB:FC:2C:FF:C1:E7:B4:C6:0C:67
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 0199FD6B1F0C32B4E1D2F722CAB787056484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0D11
Signing time: Sun 19 Oct 2025 17:01:19 +0000
Manifest this update: Sun 19 Oct 2025 17:01:19 +0000
Manifest next update: Mon 20 Oct 2025 17:01:19 +0000
Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: jCK3Y+5TkT0/0gMitpv+QYQP4ryJoqTJLhDzUhEgs8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1f:0c:32:b4:e1:d2:f7:22:ca:b7:87:05:64:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Oct 19 17:01:19 2025 GMT
Not After : Oct 20 17:01:19 2025 GMT
Subject: CN=ce5adf6602a2a803c727cbfc2cffc1e7b4c60c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:f3:85:bf:6d:b8:89:89:be:8d:21:8b:01:
9c:4a:e3:f6:c9:9e:20:6a:30:13:46:b7:b4:8d:3d:
dc:89:3d:1d:25:d8:80:b0:c5:5e:db:ba:8c:62:12:
50:bf:ad:17:7d:94:64:c3:63:3b:b2:e9:3c:64:1f:
fb:bb:a8:7a:59:17:ac:ed:76:9b:72:d5:b1:42:8d:
f9:59:4b:c5:4b:ab:e8:5f:ba:f6:dd:c2:fb:79:f5:
01:f8:28:e7:57:d7:67:d7:d7:0e:fa:20:b0:91:7c:
e2:79:69:44:5e:9e:3e:95:cf:7d:d3:55:03:67:02:
88:aa:ba:24:bf:b4:73:e7:54:2e:e9:52:c0:49:12:
29:29:40:a2:59:11:b2:ab:3e:51:37:ba:e3:64:c5:
0d:36:e9:43:aa:5a:9d:e5:78:e5:af:23:90:31:aa:
d7:7c:27:6b:f7:29:12:1e:ba:7c:6f:9a:90:51:95:
8e:93:9c:23:32:11:17:3f:ef:46:b3:21:00:cc:de:
34:e8:d8:a5:01:2c:ec:2f:3d:fb:a4:e9:ac:2e:70:
35:4d:1e:d4:72:79:41:3c:5a:d6:85:75:5f:fb:f6:
45:85:f0:94:3c:b4:fe:b5:17:ca:ac:31:66:58:e7:
e7:a9:1e:cc:69:8f:27:59:01:6e:94:c0:c3:a4:e2:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:DF:66:02:A2:A8:03:C7:27:CB:FC:2C:FF:C1:E7:B4:C6:0C:67
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:58:3c:45:cc:9a:67:42:84:48:b1:fd:0a:3a:4d:d4:3b:fd:
c1:1e:f2:c0:84:65:a4:71:83:08:b2:b2:2d:be:0e:ab:71:42:
df:e2:1c:43:51:3d:27:d4:b2:23:95:4b:39:e3:b2:3f:60:b0:
ea:96:ff:ae:d5:33:c1:a3:8b:e8:71:16:58:1f:95:7f:47:2a:
07:c1:7c:76:7c:eb:c3:7f:3d:97:c1:b2:bb:e6:d2:c3:8a:7d:
66:84:62:1e:76:7b:65:08:bd:2a:f8:c6:dd:a2:06:44:9c:7f:
ab:29:8b:09:63:7a:07:57:af:87:2e:68:c2:75:7c:38:ad:09:
e3:a6:8b:43:c4:8a:7d:52:5c:41:00:c7:14:1f:ab:aa:15:d3:
71:6f:a7:d4:30:bf:ff:c4:05:f3:bd:6d:af:df:88:50:70:6c:
d4:12:e7:7f:b8:d8:85:e7:99:c9:ee:c3:ad:7b:67:94:63:d5:
0b:6c:63:ad:71:98:68:c3:15:64:24:da:87:8b:91:3e:64:69:
f1:c8:3e:f4:cf:2e:b2:f8:2e:3e:8e:0e:f0:16:95:8c:2f:01:
71:0d:5f:5e:bf:e3:e1:d9:41:9c:34:c3:dc:dd:90:56:ea:e5:
8d:7e:79:f3:7d:39:f4:59:50:7c:a6:bb:e5:2f:0a:26:01:0f:
92:0a:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:04 2025 by rpki-client