Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: 21Qkuc0EtLROzuIRdP7OE4rBm0uYTTbdKla+eBVqtGI=
Subject key identifier: 6B:51:29:8A:EC:DE:AA:ED:08:63:6E:98:53:7A:46:03:51:6C:7A:DA
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019A4D3D1F8EF39626AAB5852AC7211AEBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:42 +0000
Manifest this update: Tue 04 Nov 2025 05:00:42 +0000
Manifest next update: Wed 05 Nov 2025 05:00:42 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: CCzNRSZDzv5GFN/YckC209fVpo/3lmTE9y+654cVGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1f:8e:f3:96:26:aa:b5:85:2a:c7:21:1a:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Nov 4 05:00:42 2025 GMT
Not After : Nov 5 05:00:42 2025 GMT
Subject: CN=6b51298aecdeaaed08636e98537a4603516c7ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:e1:58:75:7a:3b:11:8f:58:df:f3:84:19:
21:f1:ca:2e:24:2e:5c:ef:65:7b:f6:27:26:a9:70:
03:54:5f:75:18:9e:19:6e:17:d7:56:c5:58:48:9e:
29:61:6b:2e:60:07:5b:8b:fe:ee:d1:20:0c:04:85:
ee:fd:8c:73:38:32:7d:7f:3b:a1:3f:d6:87:40:4c:
36:bc:6c:26:d9:89:d5:2f:29:3e:e7:5c:9f:af:e5:
31:a8:16:94:27:2f:95:23:d8:ba:b2:b0:61:96:d4:
08:21:cd:b3:ba:47:ac:46:89:8d:5b:3c:26:49:1c:
87:ce:dd:cb:e3:65:5a:83:f9:58:d4:84:a8:46:ec:
f2:33:be:32:26:fe:85:ab:3a:71:f5:9c:bb:cc:9c:
ba:97:c5:ba:e2:e5:10:df:de:be:dc:79:68:4f:7b:
86:fd:bc:a5:69:d2:8c:64:76:23:e3:c8:8d:14:5a:
08:0e:d5:f3:eb:f0:39:a1:4b:27:6c:2b:c4:7a:0d:
67:54:55:74:b1:07:6a:d8:59:6f:70:0b:fa:41:86:
ae:d3:9c:0b:4c:bf:b7:61:2b:c6:88:1f:ab:1e:ee:
f4:90:6e:09:66:7d:cd:31:fb:55:4d:bd:07:49:13:
8c:b8:a8:64:e1:b4:c2:c7:0d:b7:0c:2b:25:19:25:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:51:29:8A:EC:DE:AA:ED:08:63:6E:98:53:7A:46:03:51:6C:7A:DA
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:93:7d:6e:9a:19:7c:53:62:8f:68:45:53:9a:e1:5e:49:43:
aa:69:cf:96:dc:b2:38:49:1a:2c:0f:21:d3:11:fc:f6:ea:38:
e0:1f:74:83:19:8c:fb:47:29:7a:22:48:53:f0:85:a7:69:94:
06:d6:ed:c7:1d:50:ce:a4:04:63:d5:f0:71:b6:32:6a:6a:11:
00:6d:ff:64:66:34:b2:9b:7e:80:d9:6e:05:2f:6c:7e:3d:aa:
cd:d8:7e:61:8e:69:57:96:de:2a:4a:81:81:99:ff:17:3d:f8:
87:33:f7:3b:04:8c:2e:19:e9:f3:43:7f:91:14:ae:9e:85:2a:
b6:e6:0b:cf:4b:99:ac:d6:e4:10:bc:8b:d1:fa:74:80:f2:79:
f5:4c:ac:37:59:3d:d4:7f:8d:69:93:ee:34:33:d1:30:48:5f:
44:df:fd:65:59:1f:c3:df:4a:e2:5c:e6:3a:b5:e9:60:17:0e:
57:98:82:6c:fa:db:2b:b1:ae:f0:60:c1:76:06:a3:fc:8e:43:
f5:c8:9a:3a:7a:d5:ac:a7:55:e8:eb:b1:cf:04:6f:45:ac:50:
bc:16:e0:6b:d2:9f:64:f0:7d:8f:d6:1b:b8:e1:d5:6b:9d:b7:
c3:1c:78:8b:67:ba:0c:0c:e5:b9:38:3b:4c:c2:fb:21:1d:f0:
91:ff:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:43 2025 by rpki-client