Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: aGqm9x1FI7k4WL/tUxf1K8tpT/dMFJacX0BJ+fq1Utk=
Subject key identifier: 21:26:99:0A:C7:14:6E:6E:45:A0:D6:D7:34:11:25:F1:F6:52:58:91
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 019A4F2B705107299F687E65412BEB56E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: FIqfL6DeMGmU8Yrz+WlENj9afVLOHObaUlw6JmVg6NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:70:51:07:29:9f:68:7e:65:41:2b:eb:56:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=2126990ac7146e6e45a0d6d7341125f1f6525891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:64:51:c7:17:f3:b0:0b:80:bb:a3:22:d0:
de:f2:e4:74:07:48:3a:f4:22:cd:87:c4:4a:6d:45:
f4:e2:12:6c:f4:b9:3a:2b:5e:01:14:00:4b:2b:6e:
e8:3e:94:f7:f2:c6:4f:88:dd:15:1f:50:30:5c:5b:
19:98:38:23:44:dc:a0:97:fb:e8:57:84:18:4c:fd:
1c:e7:e6:4b:55:e5:03:e7:e0:fb:d4:6d:2f:17:0a:
bc:0d:80:42:f0:14:45:9c:75:ad:fa:98:07:ce:32:
b4:30:a3:20:00:e7:96:8c:b9:a8:fb:9d:e4:7c:09:
f1:9e:6f:62:d1:31:60:5e:19:f5:a3:c7:cf:d9:cd:
b9:9e:05:94:9e:d0:be:f1:3a:6e:fb:d7:63:70:57:
5e:a8:fe:05:6c:01:1c:55:e0:ac:d1:f0:55:78:65:
ae:6a:4e:5d:ec:d3:ef:99:9d:65:1f:f5:48:31:e3:
eb:b4:b6:79:fa:8b:16:93:88:f3:be:c7:40:e9:f1:
39:fc:be:67:f1:2e:e7:7d:18:38:7c:fe:68:23:aa:
a0:b4:36:89:1f:48:b5:41:ea:89:1c:c0:31:39:e6:
85:45:2d:9b:2a:32:fe:d9:bf:29:e2:a9:a2:3e:01:
14:9d:c7:30:66:92:18:08:72:7c:ba:d7:00:43:cd:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:99:0A:C7:14:6E:6E:45:A0:D6:D7:34:11:25:F1:F6:52:58:91
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:1e:ab:dd:01:61:ed:5b:05:86:3c:3c:0c:cf:1b:92:08:
8d:06:91:4b:81:e1:d4:e4:75:75:ec:4e:6c:da:64:06:c0:0e:
75:c8:01:4d:d9:65:7c:48:f5:fa:e8:fb:0e:a6:8e:e2:ae:9c:
7b:e6:b3:62:06:18:25:54:ac:ec:05:1a:c1:bd:a9:33:9b:d1:
bc:34:35:7d:64:b7:52:29:7c:23:e1:86:77:0b:cb:64:5a:eb:
19:05:8c:8e:56:b2:cd:1b:84:e4:5a:44:41:27:68:76:98:4e:
8c:c5:54:c5:73:a3:ff:b6:e6:88:06:1b:d9:ee:a7:59:2b:fb:
45:2d:75:1b:f2:8c:b1:7d:f2:ac:30:8e:54:05:12:15:61:d3:
1b:08:e6:de:ca:70:67:e5:3c:b0:f5:d4:77:37:22:16:2b:e5:
b1:c2:dc:1e:90:e8:af:cf:41:0e:a2:f1:a2:a1:bc:97:4c:39:
41:c7:f5:b5:18:05:bc:e0:03:e0:b6:8f:ad:8f:cc:b0:1a:a8:
e5:97:df:c1:8c:9f:91:56:98:7f:23:63:e7:0f:7d:51:95:22:
4a:39:29:bf:63:8f:69:7d:6e:51:9a:76:f9:e3:cc:99:fb:b0:
a9:3c:1d:20:d0:43:f4:ff:45:3e:ba:15:86:1e:3d:04:46:6c:
9c:57:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:56 2025 by rpki-client