Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: xvc6A+tF2NjaHwDibc9Q7XkANhaZ/LHwnVK3B7zqTwo=
Subject key identifier: 58:DF:5D:8E:A5:A2:BB:21:80:56:87:79:E2:B3:9D:47:6C:D2:AD:07
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019A5187D12875B7EDEF72C79C4E273AB42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 01:00:46 +0000
Manifest this update: Wed 05 Nov 2025 01:00:46 +0000
Manifest next update: Thu 06 Nov 2025 01:00:46 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 41cbBtlX+zjHzZP9umlpKwkBr5y3PmfQ5dh0ZTh9r/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:d1:28:75:b7:ed:ef:72:c7:9c:4e:27:3a:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Nov 5 01:00:46 2025 GMT
Not After : Nov 6 01:00:46 2025 GMT
Subject: CN=58df5d8ea5a2bb2180568779e2b39d476cd2ad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:51:3a:82:1b:f2:38:cf:04:11:79:5a:3b:
c5:d6:7a:f1:90:f3:b2:4f:c8:c1:64:16:5d:10:e8:
70:39:4f:9a:8b:c6:1c:cd:b2:d9:13:d6:ed:db:19:
16:0d:16:70:5f:0c:48:c4:3c:16:19:3b:f7:ee:3b:
e5:07:1a:64:d7:c3:20:0f:97:e8:ea:59:f9:43:78:
07:f9:40:a9:bf:ce:4f:6a:2e:e1:89:86:b0:e5:9d:
d6:f7:00:cf:55:3d:02:2c:c1:7e:b4:49:a0:8a:b7:
63:32:24:b5:8c:32:12:ea:95:5f:44:5e:81:7f:37:
d2:24:d2:ee:bc:92:63:0d:ba:ea:83:e7:4b:d6:cc:
0e:22:8a:7f:65:f7:5b:95:28:37:26:df:8c:5c:93:
c5:b9:26:03:f1:e6:29:61:ef:c0:f8:ca:df:14:2d:
3e:81:46:94:e0:f3:21:e0:5b:50:ab:66:c6:d8:2a:
e0:d2:eb:ed:d7:b5:7e:6d:7c:92:b9:bb:7b:36:22:
90:9c:e1:ea:ef:f3:76:c1:e9:c3:b6:3c:51:96:b6:
c7:07:98:14:ad:87:f6:ac:3c:b2:57:28:b1:25:ae:
e8:d0:47:c6:21:58:81:54:82:f3:48:ee:9c:6d:5d:
10:3a:e7:eb:14:c4:f7:2a:de:f6:b3:61:8d:f5:60:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:5D:8E:A5:A2:BB:21:80:56:87:79:E2:B3:9D:47:6C:D2:AD:07
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:13:a8:bb:1d:20:9e:7e:ec:34:b2:12:f3:ac:9f:3f:ad:85:
35:d7:9c:1a:ca:ae:d8:f3:da:2e:38:db:8e:05:85:18:7c:f6:
ff:48:a7:84:2e:a2:34:10:15:56:52:82:43:4c:35:2d:fe:ec:
f9:31:93:bf:ba:cd:dc:5f:3f:92:aa:09:1e:55:19:9b:cc:08:
6c:9c:95:bc:66:35:87:68:57:f0:e9:de:07:09:17:3c:28:ad:
f6:a0:33:84:b5:a0:f5:4b:5f:85:0f:3c:e7:9e:ac:3a:d5:a4:
48:4f:d2:6d:1d:f9:0d:2c:4c:6d:58:a8:2b:7c:2f:89:b0:58:
27:cf:30:ec:70:b1:a9:ef:62:ca:e0:63:09:b1:f5:5a:65:42:
ef:ee:1b:13:c6:77:5f:de:cf:9e:b0:4c:85:e8:ce:be:5d:de:
d4:db:cf:d1:b3:a8:f4:ad:32:a2:3c:74:36:bd:29:1f:03:65:
ba:e7:c5:37:7e:25:14:ff:a1:49:4b:59:7a:f5:c1:5c:90:32:
0c:c6:ff:72:3c:b9:d3:bc:c1:c2:77:59:55:f8:21:29:56:40:
49:5f:0f:0d:9f:1c:fd:71:44:8c:e0:13:0a:ca:52:e3:29:ca:
85:67:39:57:65:71:a2:95:71:df:cb:56:c9:f0:00:57:45:b6:
f9:4d:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:55:37 2025 by rpki-client