Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: kA9NSx1dvLldDLGXwXQIkpOHe+waMxvXxh0VNdmNufo=
Subject key identifier: 01:84:AF:35:2F:01:DB:48:8F:B4:B3:7C:4B:31:D2:B9:23:49:EB:5E
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019A50E403527863F9E30FEAE8325D062D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 143D
Signing time: Tue 04 Nov 2025 22:01:51 +0000
Manifest this update: Tue 04 Nov 2025 22:01:51 +0000
Manifest next update: Wed 05 Nov 2025 22:01:51 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: wHf1jXtz/5Zsx2ql/jCHLEfHZO6iozdyf+SQjYj/SX0=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:03:52:78:63:f9:e3:0f:ea:e8:32:5d:06:2d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Nov 4 22:01:51 2025 GMT
Not After : Nov 5 22:01:51 2025 GMT
Subject: CN=0184af352f01db488fb4b37c4b31d2b92349eb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:4a:e0:36:24:36:87:dd:65:90:50:37:05:
34:58:9b:f1:ff:cc:9f:ca:1a:bc:b5:21:7e:01:67:
8c:6c:eb:7b:ef:52:cd:c0:30:48:e5:ab:bc:14:c4:
20:36:48:de:9d:3d:cf:cb:e2:5e:c4:b9:0e:07:8d:
24:d0:a6:3b:03:77:fa:74:d1:a0:32:5a:2e:df:ca:
8e:9a:76:be:8e:68:15:37:c3:6f:43:55:0a:73:87:
59:28:bc:c2:f2:22:54:61:f0:9f:98:6a:4e:b4:d8:
9a:c3:b5:a2:4c:ac:7d:6f:3c:7e:76:3b:28:20:62:
dc:c6:7d:ab:fc:ef:f1:56:41:7c:e5:f1:66:08:49:
05:4a:98:8b:ac:3b:2e:ee:66:23:75:c4:56:af:dc:
f5:46:b4:ee:a2:16:e2:3a:6d:f8:54:c8:bc:0a:5c:
2f:cd:a5:cc:5d:82:5a:bc:47:e7:fd:06:78:94:01:
c9:73:ec:c8:88:99:bb:8a:85:73:e4:c7:21:fa:f4:
f4:39:85:53:6f:58:39:a2:2e:45:88:9a:7f:5d:31:
44:8f:f2:4f:e0:e8:61:2d:fd:11:16:2f:62:36:52:
11:ea:85:f5:10:f5:ac:a4:ed:a9:24:50:35:e7:a5:
16:4b:08:37:c9:f6:66:8a:be:a1:3a:62:98:0e:c1:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:84:AF:35:2F:01:DB:48:8F:B4:B3:7C:4B:31:D2:B9:23:49:EB:5E
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:6b:d1:3f:e7:b8:16:32:40:b6:ac:d9:df:d0:3f:02:8c:
3d:db:5f:2b:cd:48:8d:b8:75:31:95:99:b7:c6:68:be:f9:1d:
b1:80:32:31:0a:50:92:ac:28:a6:14:8f:8e:2d:25:cb:2a:bd:
2f:5f:32:bd:94:94:21:97:52:87:ac:b8:dd:b7:ca:09:c0:03:
b7:8a:cc:37:68:fe:e0:10:96:a3:ff:71:f5:6a:de:37:ab:db:
19:00:45:73:30:83:ef:be:8d:6a:49:7c:ec:4f:68:6b:e5:1f:
2e:4f:6a:85:ef:b7:6d:bd:00:4a:24:e9:c3:39:cb:99:d8:72:
d4:06:0f:4a:95:4b:48:17:cc:22:b3:bd:fe:81:5c:db:79:16:
64:e3:e1:54:12:13:87:c2:a0:b4:42:16:17:14:bf:cb:32:ca:
a9:2e:b5:85:90:c1:42:5d:4a:22:be:4e:a7:1a:02:c1:60:e3:
b0:5b:7c:6a:42:5b:5f:c7:04:49:c1:22:76:50:e1:f8:27:c9:
bf:1d:d2:d6:7f:c5:9d:a9:14:3e:a8:68:c6:a0:3c:ac:bd:cc:
8e:c2:b6:d5:ba:6a:a7:70:8b:db:c8:4e:c6:8b:9c:21:98:56:
a6:33:9e:2a:36:cf:b5:9f:c5:26:8e:60:47:43:2e:c0:cb:7f:
a3:33:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:07:43 2025 by rpki-client