Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier: A0nsNyj8ApRJNDvkkzhexnMOal/RedDRkPnLzRQbT4A=
Subject key identifier: EA:17:37:45:09:5D:18:EA:EE:7E:6A:69:2D:82:DD:EB:FB:94:1F:D4
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial: 019A4EF5C41B885E88774B97FF0A8DD32C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number: 0D28
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: 6To1uf5IkarVHfAhSIuN7emxQCz8mYxQ3oXuq9TrZM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c4:1b:88:5e:88:77:4b:97:ff:0a:8d:d3:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=ea173745095d18eaee7e6a692d82ddebfb941fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:52:a2:46:ae:66:af:97:41:fc:ed:b1:47:
06:4c:15:3a:e3:4b:e5:6a:79:bb:f4:96:db:78:a6:
a7:53:d7:c1:ce:ec:ee:8e:26:34:ea:bc:13:63:5d:
69:05:e7:6b:92:aa:3e:fb:b4:de:a0:98:94:a3:da:
f0:73:0f:94:68:d5:d2:90:6a:e1:8b:44:67:5a:a7:
64:78:eb:a6:21:54:b6:3b:c2:a5:4a:68:1b:cf:16:
5b:6f:9b:3a:e0:6c:98:91:d8:e3:ee:6c:5e:72:9a:
9b:dd:dd:2f:8a:07:ee:3d:c5:c5:f5:ab:28:78:c5:
7d:62:4f:16:ce:6e:46:a6:0f:1c:0b:78:da:41:a9:
79:43:d6:82:c2:0e:3f:a0:00:ac:3a:50:4c:80:25:
ad:10:c1:7f:88:85:e2:c9:04:ab:ae:b5:ff:07:41:
28:1c:ca:9e:fb:d5:e5:fa:cc:a3:25:24:8d:74:b6:
31:e7:98:ce:de:31:0c:ee:e6:ee:1a:b6:f1:ef:45:
fa:51:ab:9b:fd:2c:62:6d:4f:2d:fe:1c:b0:c0:2f:
e0:55:e9:e8:05:3f:78:d3:fc:9b:d3:c5:a6:0d:ae:
70:8c:91:aa:9f:ef:98:90:f8:71:fe:6a:9c:65:bb:
56:aa:49:52:dd:8c:85:00:5c:9a:8b:5b:e2:e2:05:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:37:45:09:5D:18:EA:EE:7E:6A:69:2D:82:DD:EB:FB:94:1F:D4
X509v3 Authority Key Identifier:
keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9b:2c:bd:66:6e:1f:45:39:82:78:b5:4f:ff:d9:67:1f:d4:
ff:f6:59:d6:c1:51:36:04:8e:45:23:81:d1:7b:d2:2e:05:a8:
bd:8f:cc:ff:37:0d:de:15:83:46:74:a3:7a:d5:e5:90:0a:47:
8e:3a:60:6d:67:b5:74:7c:7f:ef:11:68:5c:0b:57:14:4c:58:
2f:4d:0c:38:98:d5:24:83:9c:a6:84:a1:bc:9d:96:1f:53:82:
28:da:83:b0:b9:fb:fe:f3:cd:12:16:dd:e2:da:0d:fc:99:c5:
fb:4d:d1:88:fd:00:20:93:c4:44:68:95:95:b2:c8:29:96:5b:
25:db:ce:c9:61:48:40:c8:16:cb:14:86:7f:dc:22:7a:4d:b5:
8c:ec:cc:17:fd:5d:fc:14:9b:fd:04:73:40:54:0b:6c:3e:f1:
17:5d:12:11:41:a3:7e:3e:63:c5:ce:f0:36:72:c1:45:bd:a7:
75:36:cd:95:5b:ed:67:d0:9a:0e:2b:55:56:7c:47:f4:86:50:
4a:e4:c2:91:a1:84:7c:26:d1:cb:06:43:0f:96:03:43:4c:64:
8d:3b:8e:08:82:ae:8a:f8:0d:56:b6:a4:48:60:e6:50:70:4b:
1b:39:70:26:63:a9:6e:3a:34:c6:a7:2c:1a:cd:1c:08:65:62:
47:5d:c3:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9cQbiF6Id0uX/wqN0ywBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl
Mzk4MjAwHhcNMjUxMTA0MTMwMjAwWhcNMjUxMTA1MTMwMjAwWjAzMTEwLwYDVQQD
EyhlYTE3Mzc0NTA5NWQxOGVhZWU3ZTZhNjkyZDgyZGRlYmZiOTQxZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrJSokauZq+XQfztsUcGTBU640vl
anm79JbbeKanU9fBzuzujiY06rwTY11pBedrkqo++7TeoJiUo9rwcw+UaNXSkGrh
i0RnWqdkeOumIVS2O8KlSmgbzxZbb5s64GyYkdjj7mxecpqb3d0vigfuPcXF9aso
eMV9Yk8Wzm5Gpg8cC3jaQal5Q9aCwg4/oACsOlBMgCWtEMF/iIXiyQSrrrX/B0Eo
HMqe+9Xl+syjJSSNdLYx55jO3jEM7ubuGrbx70X6Uaub/SxibU8t/hywwC/gVeno
BT940/yb08WmDa5wjJGqn++YkPhx/mqcZbtWqklS3YyFAFyai1vi4gWT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoXN0UJXRjq7n5qaS2C3ev7lB/UMB8GA1UdIwQY
MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt
OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz
LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZssvWZu
H0U5gni1T//ZZx/U//ZZ1sFRNgSORSOB0XvSLgWovY/M/zcN3hWDRnSjetXlkApH
jjpgbWe1dHx/7xFoXAtXFExYL00MOJjVJIOcpoShvJ2WH1OCKNqDsLn7/vPNEhbd
4toN/JnF+03RiP0AIJPERGiVlbLIKZZbJdvOyWFIQMgWyxSGf9wiek21jOzMF/1d
/BSb/QRzQFQLbD7xF10SEUGjfj5jxc7wNnLBRb2ndTbNlVvtZ9CaDitVVnxH9IZQ
SuTCkaGEfCbRywZDD5YDQ0xkjTuOCIKuivgNVrakSGDmUHBLGzlwJmOpbjo0xqcs
Gs0cCGViR13D0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:16 2025 by rpki-client