Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier: 0EILOjA25HpDdDPTDxkLsuSWQnHEcQaCNPw3GyY45Js=
Subject key identifier: B1:10:04:CB:4F:98:D0:2A:57:59:27:F2:81:CC:6C:45:5A:67:73:15
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 019A01EC30E3E5E159FD835143D31C4553D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number: 11E3
Signing time: Mon 20 Oct 2025 14:00:47 +0000
Manifest this update: Mon 20 Oct 2025 14:00:47 +0000
Manifest next update: Tue 21 Oct 2025 14:00:47 +0000
Files and hashes: 1: UkvE1AtgzFaEZZjsZiVXyyLbs5o.roa (hash: y7S6KVTG3N2Xe5Mq5Th3G1Pm17a7WWjgGUAMC2Q3dUs=)
2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: Ta6blIsQWEFPLcZJB3otyWrGpOggNCjzW18I2MA8TC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:30:e3:e5:e1:59:fd:83:51:43:d3:1c:45:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Oct 20 14:00:47 2025 GMT
Not After : Oct 21 14:00:47 2025 GMT
Subject: CN=b11004cb4f98d02a575927f281cc6c455a677315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:d6:6a:13:82:d7:30:b8:14:6f:1d:5e:51:
7a:26:b3:91:0a:29:d9:89:db:0c:00:39:0b:7c:0c:
34:33:eb:ce:94:0f:49:42:3d:d7:05:08:ce:3c:b0:
1b:c5:2e:80:c3:83:37:7f:cd:06:05:a9:b8:6b:08:
ff:13:b9:18:19:a0:a4:e3:3b:c9:d1:06:6e:df:62:
77:7f:67:ff:15:a1:30:ac:9d:df:4d:12:83:01:c5:
26:74:16:f8:2f:5f:0a:cf:04:54:54:b3:c4:17:f0:
70:35:32:13:a8:72:b9:7f:41:9a:f3:5d:7a:c0:d0:
0a:b1:b5:75:2d:0c:6a:e8:6c:08:30:4c:a5:41:ff:
fc:9a:ab:74:30:b7:1a:01:d2:cc:b6:d6:2f:72:6a:
90:76:99:3a:20:e1:dc:64:60:b9:9f:90:79:c6:72:
15:d1:f9:44:1c:09:db:8c:19:a1:44:f4:43:ed:db:
18:bb:a9:91:95:90:e1:4f:67:f0:72:68:10:73:04:
ba:c1:3b:82:22:42:1d:8a:e9:3a:63:1e:42:6e:ef:
fd:49:54:d7:b6:0d:ee:56:29:b6:8c:e0:68:2c:c5:
33:6a:90:1e:d4:58:f2:df:59:de:2e:88:27:68:64:
69:e6:d0:0d:0e:5e:b4:42:8d:8d:5a:11:0d:21:b0:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:04:CB:4F:98:D0:2A:57:59:27:F2:81:CC:6C:45:5A:67:73:15
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:6d:f8:ca:8d:51:8f:2f:3d:16:1c:88:67:6d:bd:5d:da:
13:78:67:8e:83:f7:f9:b6:6f:e4:be:9b:2d:c4:45:b5:df:a8:
c6:3a:2f:41:d6:2a:ca:b6:1a:f5:97:d4:bb:97:eb:cd:a1:97:
14:50:67:91:e6:16:82:6e:46:f6:5c:ca:ef:28:bb:12:96:a5:
78:38:f5:ea:7a:58:3c:3e:06:6d:4b:a1:6b:53:70:93:51:b0:
ff:74:3c:35:5b:3d:bc:d3:a6:11:c9:9c:bd:f9:7f:4b:42:82:
56:af:14:57:e6:2f:f6:9d:55:ea:ec:b4:e6:b9:a7:a1:98:1e:
7a:2b:f6:11:f7:a7:28:1e:c3:56:05:d5:18:62:fd:74:6c:34:
84:2b:27:70:a1:df:e9:08:21:90:f9:4f:0b:32:cb:73:3a:05:
eb:36:30:f4:4b:5f:89:77:a5:8d:8f:67:f1:75:e3:56:ef:69:
15:b8:cc:bc:62:11:82:f3:7c:b4:4a:57:df:b7:c7:af:9e:14:
57:c5:0c:59:4a:17:52:17:b0:80:ee:b1:92:ce:ad:31:c1:e6:
11:27:18:b8:df:0d:93:d7:32:17:75:4a:bc:65:95:9d:e1:6b:
07:ef:0f:a7:8d:f7:f1:4c:6b:e5:d8:84:33:5c:e2:84:41:34:
75:ab:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:42 2025 by rpki-client