Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: n9780am36n4MDVulx+UBPpx8xZjFso9FskKvBnpeZP8=
Subject key identifier: 08:46:A0:39:55:F0:E0:A7:3E:0A:67:B7:6C:E0:C3:64:DD:1B:50:6E
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 019A5307C3FB139847D890B80B3B8EBD9014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 1239
Signing time: Wed 05 Nov 2025 08:00:09 +0000
Manifest this update: Wed 05 Nov 2025 08:00:09 +0000
Manifest next update: Thu 06 Nov 2025 08:00:09 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: XCtapAeBvnyEu9X7I0XY//o4fG4mSPKkXpw/c0morgU=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c3:fb:13:98:47:d8:90:b8:0b:3b:8e:bd:90:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Nov 5 08:00:09 2025 GMT
Not After : Nov 6 08:00:09 2025 GMT
Subject: CN=0846a03955f0e0a73e0a67b76ce0c364dd1b506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:2d:c5:38:01:a0:db:6d:47:95:83:f2:e9:
12:9f:4b:da:f7:de:e3:91:22:d0:01:04:f8:f6:c0:
97:1a:a9:53:ce:79:dd:89:2f:d8:14:b3:2d:c6:e0:
d9:18:34:b3:b5:39:61:ac:29:26:85:5a:d4:79:ab:
e7:fb:a7:66:54:16:b3:b1:dc:79:06:e6:74:5e:17:
4d:80:dd:53:3a:29:6f:9d:09:3d:86:7a:fc:17:63:
1d:b9:fd:ba:1a:51:f1:f5:52:5b:bc:5e:66:ce:52:
7a:0a:13:b0:39:94:99:31:0e:2c:a2:46:12:b9:5c:
19:63:68:c1:44:4d:ae:d3:86:62:35:09:59:c8:cc:
b2:f6:db:a3:c5:de:a7:b2:a1:e9:1a:af:7a:a1:4c:
fb:d0:c0:08:aa:f8:71:da:ec:11:43:19:2b:43:03:
80:f8:ee:56:33:cd:d2:d5:e1:44:c0:c7:4d:8c:3f:
26:ac:82:1c:7c:30:93:bc:e5:f5:af:dc:a1:96:47:
b2:6f:bc:74:c2:43:05:b5:69:0d:12:72:8f:03:1a:
a0:ff:ea:a5:e2:e8:e1:15:d1:67:91:72:f9:3b:66:
e4:40:b7:ca:5f:c7:ee:b4:13:ea:21:6b:43:15:75:
85:f8:6d:57:ab:75:b5:01:03:d1:41:fa:bc:b5:e4:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:A0:39:55:F0:E0:A7:3E:0A:67:B7:6C:E0:C3:64:DD:1B:50:6E
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:35:f2:8d:db:c5:20:89:eb:d2:06:d9:52:ba:90:a2:81:
09:3f:81:cd:ff:64:03:5a:01:e5:e1:eb:fc:45:f7:89:6a:8a:
58:4e:67:8e:c7:4c:3b:17:75:ab:8a:0e:0a:26:04:01:aa:db:
d4:5f:17:f3:d9:08:12:df:4c:0a:87:14:b4:df:e3:b6:c7:0c:
ef:ad:15:d3:b2:26:ff:74:88:1f:04:32:43:63:8e:40:d4:1a:
bd:c5:ba:94:ef:5e:55:6e:29:5a:61:d4:dc:06:fe:fa:89:16:
75:3c:60:ba:fa:7d:87:71:01:a4:6c:34:00:32:e3:dd:21:95:
50:72:00:9e:12:c6:3e:85:7b:60:5e:d7:81:5d:92:06:c0:24:
33:55:a7:9a:cb:b0:e0:ef:24:69:92:e0:2d:2d:bd:31:e7:0f:
c8:af:ac:b9:95:bf:87:c8:1c:a4:fb:33:10:35:1b:3a:24:94:
5f:9a:7f:af:46:b8:81:7e:ee:a4:63:81:92:7d:c8:d7:04:c6:
2e:6a:86:95:7c:85:ee:39:17:eb:37:2e:b9:d2:36:fb:ab:a4:
d3:9b:45:53:d6:20:ee:dc:71:2b:c7:13:57:9b:5f:32:9e:ed:
04:e6:c8:64:6e:ca:51:f7:8e:66:e8:5e:9b:3c:0a:0b:9c:d2:
15:5b:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:10 2025 by rpki-client