Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier: CFVcytPt84PPl3prrRgX3WrgT/2mR1eVWqBcSlgilbo=
Subject key identifier: 5A:D0:10:68:D8:AC:FF:12:F3:AE:78:38:BF:CE:13:3F:C4:9E:19:96
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial: 019A50E2A07F551880D507A3ED58D6FF1364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number: 03D2
Signing time: Tue 04 Nov 2025 22:00:20 +0000
Manifest this update: Tue 04 Nov 2025 22:00:20 +0000
Manifest next update: Wed 05 Nov 2025 22:00:20 +0000
Files and hashes: 1: 6ribQUEUmAxt2wHXJd-U7f6yaRI.roa (hash: qhkI5RwGajokhxyxbM332dvPvFl03D+O4/wx5DmaCUo=)
2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: 8E6yD00BsE+1ntc/JFMFAyiKw8VNBYkMehuS3lC3doQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a0:7f:55:18:80:d5:07:a3:ed:58:d6:ff:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Validity
Not Before: Nov 4 22:00:20 2025 GMT
Not After : Nov 5 22:00:20 2025 GMT
Subject: CN=5ad01068d8acff12f3ae7838bfce133fc49e1996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:fa:3b:f2:86:f6:3a:f9:d0:59:db:9f:2a:
be:a5:bc:5e:83:84:c5:0b:80:83:6f:7e:19:cf:f8:
1b:38:90:af:42:4a:e4:7d:88:f4:ae:d5:e1:b4:ac:
27:78:22:08:2f:d7:32:fd:f1:3f:b0:7e:69:03:97:
54:23:e0:0d:57:70:e5:e0:21:e2:32:8b:f5:35:49:
30:32:a2:a4:17:0c:2f:eb:40:6d:86:66:e0:e7:35:
68:39:e7:6d:ed:e1:6b:da:de:e2:40:21:28:31:57:
9f:08:76:c9:96:80:28:b7:78:e9:ce:c2:d4:5e:7f:
c0:b0:d1:14:c6:fc:76:42:76:80:2c:47:fd:98:72:
16:85:00:a8:30:c3:d2:21:b6:ba:22:eb:dc:f4:c3:
a2:c9:ef:6a:e2:94:03:4d:9e:6c:cf:49:f9:3f:fe:
d4:37:26:fb:b0:16:4b:45:f6:24:1e:96:44:68:5a:
6c:53:23:49:bb:2e:15:64:de:27:cf:b2:e3:a2:35:
ca:9e:18:be:f5:15:a1:a3:24:c7:37:83:8c:28:24:
45:69:62:b8:0d:dc:54:4f:fb:09:f0:73:97:b0:f1:
16:3f:13:8d:4b:8a:0f:87:5e:64:80:a8:01:5e:e0:
70:7f:27:f7:08:2f:2e:4d:d3:74:2f:3c:af:3f:31:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:10:68:D8:AC:FF:12:F3:AE:78:38:BF:CE:13:3F:C4:9E:19:96
X509v3 Authority Key Identifier:
keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:4d:49:d4:55:74:f6:e0:5c:72:05:86:71:4b:e0:28:a7:
72:75:77:62:64:8d:71:0a:10:92:54:86:c2:cf:12:b7:24:34:
2b:a8:27:b0:16:19:ca:db:0c:26:3b:83:9b:51:4e:65:8b:44:
67:8d:8e:1f:dc:62:c2:79:48:ef:dc:f8:83:c7:13:00:60:99:
82:c8:26:2a:c4:a0:b0:1a:08:74:ba:a6:68:c1:ea:c2:dd:58:
64:1a:53:7e:e5:b2:5f:91:1a:43:0a:2a:1c:fe:8a:9e:3e:53:
e6:bf:9f:fc:f8:c1:af:dd:7c:38:71:16:d6:a9:29:d6:65:ff:
22:6e:01:13:17:ee:13:9e:80:1a:7b:f3:f0:93:45:51:9f:fa:
11:2a:c1:92:97:c0:ce:7d:65:72:8a:95:80:2a:ec:c3:92:de:
f7:22:f1:9e:c1:12:c3:d9:fd:6f:8b:aa:6d:ef:b5:54:53:3e:
9a:df:cf:67:a1:59:15:ea:93:a5:1a:01:4d:89:63:84:4d:b8:
16:81:82:73:9e:bf:38:04:56:b2:de:76:ff:b8:07:0e:2f:ad:
d2:cb:b6:2d:4a:35:05:1d:43:dd:75:a5:9b:af:19:fa:71:2f:
dc:19:a2:c8:f2:f0:60:d1:35:65:48:63:ec:71:5d:cf:dd:da:
d8:a2:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:15 2025 by rpki-client