Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: 30VUHHFBl8xPL8K2M1C+HqPwrAZwE/vtdqD0EjBXUOQ=
Subject key identifier: 49:73:85:61:7C:1F:29:8A:E9:77:A5:41:7F:E6:41:C6:50:47:A9:12
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 0199FD6B4B36BC98D083D57EE19F90572777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 0629
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: pQOrB+Fs7whWdmYI/6owVBKT0msvpwxGCU8GbdHSJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4b:36:bc:98:d0:83:d5:7e:e1:9f:90:57:27:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=497385617c1f298ae977a5417fe641c65047a912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:49:93:d2:7f:e1:32:21:97:4a:fe:00:3f:
4e:01:5e:6b:16:f4:b2:fc:d1:51:87:37:40:c7:98:
ca:76:bb:1b:7f:ef:3d:bb:19:31:23:41:74:df:4b:
e7:17:5e:ea:27:24:4c:7e:c8:f2:a1:23:e3:02:3d:
0c:d7:7f:83:f5:d1:37:60:8c:86:d7:84:e0:fc:d2:
05:40:c4:5a:c3:c7:fb:84:51:f8:2f:a2:bf:7c:ac:
b0:2d:64:ca:58:ea:88:73:20:31:41:6c:6a:da:a5:
97:82:34:41:ab:68:3b:82:b0:e0:fe:06:de:9b:fd:
08:ba:f0:49:51:f5:d3:ee:f0:1c:4a:76:62:2c:db:
36:44:e2:b5:1f:12:95:b3:7a:cf:6c:32:d0:a9:4e:
2c:3c:23:aa:67:c7:b8:33:81:d4:ae:2b:e5:7a:16:
91:90:c2:ad:3a:95:1c:e8:ab:a1:b0:9f:f7:56:fc:
c3:8d:d4:64:67:5f:e7:0a:5e:15:db:53:f2:21:6b:
13:f3:0b:be:c6:0a:b3:ab:7a:c7:19:42:86:9f:ed:
60:c3:62:35:4c:29:c5:39:b9:c6:67:5f:0d:16:05:
0c:42:b0:f2:8b:ac:e5:bc:1a:df:05:5d:a7:b5:93:
7b:e5:09:40:6e:f1:c9:99:35:e4:47:e5:d4:f7:83:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:73:85:61:7C:1F:29:8A:E9:77:A5:41:7F:E6:41:C6:50:47:A9:12
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:31:06:62:59:ac:aa:ae:a9:fb:9f:b4:df:1e:7d:35:6b:a4:
91:5a:f6:90:f0:37:1c:7b:a1:68:b8:89:dd:42:94:aa:ac:21:
95:2f:f9:85:e0:7d:3b:e8:d6:3f:6d:81:a2:14:27:23:b4:71:
b8:2a:d2:4d:a2:40:a9:83:8d:5b:cc:3e:74:eb:81:70:96:08:
28:19:06:c7:17:a6:8e:a7:b3:67:de:0a:21:fe:3c:90:54:49:
77:89:c6:0a:f8:68:58:e4:7f:b4:dd:5d:f7:89:e7:ce:2f:bd:
5f:8a:e1:4d:bf:ef:fb:60:94:b0:53:52:dc:27:26:1d:5f:e9:
01:e7:50:1b:f1:b6:5f:1f:09:06:08:8c:91:ef:c8:bd:d8:d6:
9a:b0:50:16:d1:46:82:b7:4f:f2:a3:87:6a:db:33:b6:10:ef:
9b:74:68:1d:29:c2:4f:50:12:e8:c0:14:b8:7c:a7:16:ec:49:
f3:e1:53:51:52:e0:7d:a3:55:03:86:62:fa:ed:33:8a:3f:f8:
cc:d7:cd:a9:ce:5a:5c:0b:85:0e:fc:df:e2:eb:89:4e:3c:f0:
17:42:64:3f:bf:33:75:49:f8:a5:fa:10:3a:ad:37:a4:f8:ec:
01:a8:10:b9:b9:33:b4:24:e6:b6:70:a7:6f:b3:c7:21:68:c3:
fe:ff:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:19 2025 by rpki-client