Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File: egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier: d+g0ky9B9rtD76LbNVJO5Cw5KdDg+q+7HXbz6G0yBbM=
Subject key identifier: FA:0D:EB:58:46:73:18:71:E1:F9:8C:1C:00:5B:0E:32:9F:8D:64:1A
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial: 0199FBEC353AD932B9ECEEBDFE724ED7A4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number: 11FA
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: DIviNnU73fnTrgCQ7MpXGoXGVgfhzKW7W1C8OgFQp40=)
2: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (hash: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:35:3a:d9:32:b9:ec:ee:bd:fe:72:4e:d7:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=fa0deb5846731871e1f98c1c005b0e329f8d641a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:16:4f:1e:7a:3f:f8:f0:77:5f:d7:3d:c4:
2d:62:86:26:af:12:03:c1:e3:c6:38:a5:ba:58:75:
ea:39:ce:06:5f:69:d9:64:f6:c0:95:ad:2d:85:64:
42:98:a2:4e:90:38:07:8d:37:34:bc:79:22:d7:8f:
7d:f2:ad:ad:b5:ff:17:f3:8d:81:a0:eb:81:a0:01:
e2:1c:c5:73:c1:ad:1e:50:53:64:d1:a8:c0:54:85:
97:c7:fd:26:49:96:c5:ef:66:48:39:95:33:57:fa:
f0:c7:53:3b:9c:bc:1a:be:b9:12:a9:3c:e5:9b:ec:
5f:5d:c2:d8:58:ad:88:aa:16:ad:1a:1a:b0:3c:9e:
f3:b5:4b:8f:4c:3c:b2:f1:3b:00:c9:6e:af:34:1a:
62:59:e0:b5:c7:fe:83:76:ef:5f:94:f4:b3:cd:df:
1b:cd:26:42:da:4f:8d:9a:a0:3c:e5:da:87:f4:59:
55:48:8d:92:a3:1d:a9:46:ae:5b:76:ca:6e:a6:1d:
c9:ba:cf:ab:5e:21:dd:ab:c8:cd:b7:07:8f:44:bb:
b1:77:4f:6a:c8:63:e1:3a:8e:c5:9a:ec:51:5d:a2:
9a:2a:a7:b0:0a:66:bd:4b:bc:61:c5:51:a0:ca:79:
d3:39:20:81:a4:8d:d2:f2:7f:7a:22:a2:02:b4:78:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:EB:58:46:73:18:71:E1:F9:8C:1C:00:5B:0E:32:9F:8D:64:1A
X509v3 Authority Key Identifier:
keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:df:ba:0d:ec:b5:a9:87:6e:e8:73:cc:4d:4b:4e:b6:e2:
e4:22:0a:c2:72:28:b5:b6:02:60:76:df:b4:f4:b9:39:7b:88:
19:0f:ef:f9:8b:36:d9:9f:c7:6a:bc:fe:e7:71:f8:3c:82:17:
c4:5c:bc:ae:21:77:27:23:35:2f:50:dc:7d:0c:01:e6:68:31:
da:f4:a9:6a:c3:51:d7:d4:56:86:e2:9e:31:3a:35:5f:70:6d:
0f:fb:8a:0c:86:a7:b6:17:11:c1:06:2e:b4:6e:a9:94:e4:04:
e6:3f:3d:6e:c6:bd:26:28:22:11:af:6d:4f:23:79:c2:0c:cc:
40:36:b1:35:18:07:e9:e1:a0:1b:1e:d5:cd:dd:c7:12:bd:75:
a5:5d:49:3c:4f:b1:e5:71:cb:47:7c:47:f5:38:e1:8c:ed:0f:
33:5c:6b:78:a5:d8:c1:36:8d:07:c8:ad:15:89:2b:ba:f1:13:
a5:d0:fe:ec:59:ab:5d:da:f3:46:fb:8c:0d:d3:35:12:a9:df:
81:f7:aa:f5:a8:cf:0e:b7:ac:6f:b7:ad:35:ee:bd:bd:c5:07:
42:64:d2:c1:60:ab:50:66:c6:89:a8:86:6b:7c:2c:0c:78:14:
39:81:20:d4:a5:16:fe:bc:da:de:ca:a3:81:73:1e:2a:05:33:
d6:35:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:09 2025 by rpki-client