Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: +Oe2lrqQ1H6/Ki8BxI1HyszO5hEzPOBr32tK97W6ul0=
Subject key identifier: 53:0D:AB:4F:7F:2B:9F:01:DD:D0:35:D7:FD:6C:E2:0E:C6:4A:B1:9F
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019A50E2993B4C49EC2DDCD98344CB7FE636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:00:18 +0000
Manifest this update: Tue 04 Nov 2025 22:00:18 +0000
Manifest next update: Wed 05 Nov 2025 22:00:18 +0000
Files and hashes: 1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=)
2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=)
3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=)
4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=)
5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=)
6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=)
7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: fzzeozze5w9p9tEW2EcwvdhgSg7DQGEdc1ARt6GrJH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:99:3b:4c:49:ec:2d:dc:d9:83:44:cb:7f:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Nov 4 22:00:18 2025 GMT
Not After : Nov 5 22:00:18 2025 GMT
Subject: CN=530dab4f7f2b9f01ddd035d7fd6ce20ec64ab19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:7f:90:07:bb:4f:13:ae:9d:e6:4c:57:76:
66:5e:81:fa:77:3b:50:f9:28:4e:55:7f:31:9b:81:
14:1a:da:df:9e:d2:ad:85:a1:b5:1a:82:af:23:c8:
51:cc:be:15:f4:14:3f:0f:5b:55:ad:ab:4d:2b:d9:
9d:cc:bc:ae:de:a5:31:4e:8f:ac:b6:03:31:98:ce:
20:51:fb:5b:49:fe:c0:73:e7:11:0c:80:4b:24:66:
28:c0:68:90:69:3f:52:0a:78:bc:0f:13:90:3c:33:
40:6d:8f:07:91:55:4a:d7:e7:d6:09:2f:2b:93:54:
2b:d9:52:a6:30:f1:85:34:e0:16:26:21:58:ef:ee:
c7:f6:02:db:d2:5a:b3:aa:e6:3c:b0:74:54:c0:a8:
b5:b5:84:7c:97:32:7f:72:93:81:d6:9a:20:a3:a2:
10:1b:75:63:81:a0:26:3e:34:0a:2f:f4:1f:a4:bf:
b2:40:22:bb:b6:37:35:3b:be:a0:2d:7a:bf:64:6f:
04:d3:b3:b8:7a:86:9c:d6:1c:c7:c5:d5:7d:cf:02:
c9:1f:3d:22:d3:a9:e7:5b:92:4f:70:35:d3:ac:13:
98:72:d3:e0:20:f7:8d:59:04:4e:63:5f:3a:81:6a:
74:77:26:a2:61:5a:a6:f7:26:61:5c:b4:d8:d5:f0:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0D:AB:4F:7F:2B:9F:01:DD:D0:35:D7:FD:6C:E2:0E:C6:4A:B1:9F
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:84:39:bd:32:5a:82:b7:4b:3e:69:e5:a7:14:65:90:b4:33:
d1:60:8e:b0:bd:f6:ea:be:e0:5c:72:8e:da:98:ed:9e:50:c2:
49:02:fc:74:70:be:1f:6a:d2:35:fe:8d:53:8a:8f:b0:11:85:
10:99:55:ae:a1:8d:f1:bb:b9:2a:05:33:2d:d8:13:ca:6b:76:
69:59:bf:48:a6:95:fe:c1:78:22:92:07:7c:0d:3c:0b:77:bf:
5f:71:44:17:da:15:c5:00:f7:77:08:2d:dd:56:ef:bd:78:1d:
1d:d4:de:db:97:e2:84:86:61:b5:31:d0:ff:2d:07:0e:e4:19:
0f:fe:33:b1:11:84:ca:4d:ab:20:1a:e2:04:30:5c:b3:fe:69:
ef:2c:ea:13:54:01:02:3f:c5:3f:cd:d9:cc:44:67:20:d2:b7:
95:11:81:c9:3e:38:46:0a:a9:7d:6f:01:63:4e:7c:b1:df:d0:
7b:a2:07:a4:d8:c7:e2:99:51:9d:e2:66:f6:69:ab:53:e4:03:
50:96:ab:0d:54:97:a4:5d:59:83:b6:1a:51:20:ca:9c:fa:d4:
ba:2b:97:a1:9c:20:8d:2c:e2:e7:06:b7:a1:4c:5b:93:26:38:
a8:66:79:6f:2f:f7:22:1f:5c:4b:cc:84:52:97:57:ec:bc:e8:
75:58:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:57 2025 by rpki-client