Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: Lv7zF14oQM5gBXhalTTqGlbbl672Dm4pyOlap439OhU=
Subject key identifier: E5:92:4E:71:B6:03:44:B7:C9:4A:8E:1C:B5:ED:58:01:0D:61:9E:14
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 019A4E4FB524F059F12887F4A89E03370C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 1726
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (hash: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=)
2: 6aH0GUkty0zRVM49hltz0E26o9g.roa (hash: B/btaQwmZwkS77oTf9pVbleylcjeDQp/znaQQHS+UkE=)
3: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: kcgcbn08IS3XH6xaHPiaDCEgdNxOuQMqsjH2YUNRb4o=)
4: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
5: Pti_2wHf4nDoTULmHuDpJnb60tw.roa (hash: 6vLb3cXdRGpIGB8yJspOGZTYqcFejvNzXH+8oL9C5OA=)
6: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
7: fCbpeuPkw7-WeltvV11giyI0D1c.roa (hash: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=)
8: yyk6Di2XbNlkRGc89Nu-_03BSyA.roa (hash: fjtXv9Ycls9ttlFxVrAfyjqDfoCq3GWEcLByl3LaF+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b5:24:f0:59:f1:28:87:f4:a8:9e:03:37:0c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=e5924e71b60344b7c94a8e1cb5ed58010d619e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:f1:b2:98:8c:7d:8b:d3:2a:0d:0a:63:b7:
e8:dc:5b:ef:c8:5f:12:5d:49:c6:c9:89:c8:e8:02:
8e:bf:08:7c:93:f0:06:a6:5c:25:ab:da:81:bb:da:
06:7a:0b:03:2e:ba:7b:bb:64:ea:8b:df:d9:19:c7:
6a:3a:e1:33:34:0e:c8:e4:d9:44:9f:87:de:67:47:
c0:20:a0:39:07:85:5e:e2:34:5c:81:c5:cf:ff:22:
88:d9:26:20:21:30:cb:76:0c:97:ee:b8:fc:c8:66:
db:2e:24:9c:7f:9b:8f:f6:a6:99:1a:05:b7:d3:40:
9d:a4:60:08:d8:92:0c:7b:8c:51:3e:9e:d5:98:c4:
81:17:14:87:16:82:c2:67:35:41:51:ae:99:84:84:
01:97:a6:14:87:57:64:f0:a6:d7:ad:bb:78:4b:55:
24:c8:ec:21:b6:a3:a4:0d:c8:be:56:58:51:6c:6c:
26:f7:6a:ba:2b:ea:9b:c0:ff:af:73:0c:c3:96:a3:
ee:2f:5b:ce:aa:85:d5:3c:8d:63:44:cc:bc:71:97:
08:e3:67:95:72:9e:69:e7:de:08:98:32:2b:2c:c7:
d3:8f:07:53:6d:24:67:bf:f1:37:e2:e2:ae:d2:b7:
76:f4:86:ae:f1:11:05:d7:34:b6:e4:3e:03:c4:1f:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:92:4E:71:B6:03:44:B7:C9:4A:8E:1C:B5:ED:58:01:0D:61:9E:14
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ff:b9:03:63:e9:65:31:a1:4d:38:8d:a4:57:37:34:cc:1b:
8b:31:39:10:fb:ce:fd:e2:ea:a8:6d:d1:72:e4:42:1d:e9:68:
da:70:c5:ff:85:9a:b8:5d:da:b2:07:b0:ea:51:0d:6d:49:1d:
1d:11:2b:bd:e7:3e:d7:1a:77:12:06:9b:ee:58:60:79:4f:f4:
b9:1d:20:b6:16:54:d2:33:d0:39:28:78:da:bb:d8:4a:15:b0:
eb:98:7f:55:29:b0:37:d9:5e:75:1f:a7:62:f1:7f:78:36:63:
97:d8:17:12:b3:ad:52:9f:3f:07:0d:7a:1d:32:8f:11:70:75:
26:fd:b8:46:95:35:3c:ff:7a:50:41:07:fd:99:c3:11:09:3e:
f2:c7:8f:45:e8:bb:08:e7:a0:49:d6:ad:6a:a5:3b:9e:72:de:
e1:8d:c6:8b:6e:27:04:60:d5:e5:48:74:0c:a0:54:fe:2c:d7:
82:b4:14:e2:66:88:d2:73:97:da:b0:e6:e4:8b:44:25:2a:f7:
40:d0:3e:62:4b:e4:74:d7:87:2f:34:f1:d8:a8:0f:54:f1:f2:
02:25:c6:d8:bc:a1:cd:b8:de:ba:51:de:60:99:25:cc:bd:64:
5e:4f:86:0c:b8:e8:83:b0:36:81:eb:00:99:ea:e3:74:f1:f1:
92:18:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:53 2025 by rpki-client