Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: jRdJtUSOK9YEC7g9o2eJiZtE0ZYZajOZcW2jjrAJb3g=
Subject key identifier: 1C:A8:74:51:08:EC:9E:25:7B:A8:72:F6:13:61:51:09:8A:55:84:B4
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019A5187DA9553BDDA007FB0280DA1B34E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 01:00:48 +0000
Manifest this update: Wed 05 Nov 2025 01:00:48 +0000
Manifest next update: Thu 06 Nov 2025 01:00:48 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: lekunS77ixWdYI1egicOaFc1m0HWZKzw3sRGWXQIzpE=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:da:95:53:bd:da:00:7f:b0:28:0d:a1:b3:4e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Nov 5 01:00:48 2025 GMT
Not After : Nov 6 01:00:48 2025 GMT
Subject: CN=1ca8745108ec9e257ba872f6136151098a5584b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:cc:a1:0a:0c:b6:09:72:0c:ac:e1:de:43:
01:e2:87:7e:ab:93:1b:29:f0:e2:1f:b6:76:52:5c:
88:bd:34:e7:02:cd:5d:dd:3a:7d:55:d9:45:b9:dc:
32:4a:a8:d3:c1:3d:c0:e0:b6:9f:d2:57:47:ef:85:
1d:56:18:bd:4f:ad:20:78:b1:cd:f0:44:18:63:c4:
21:5f:83:64:68:06:18:9c:3f:7a:60:86:7e:3a:4b:
67:cf:e1:80:1c:56:cf:99:9f:e5:3e:ce:c1:5e:9f:
99:e9:81:19:8f:49:18:05:f9:d2:f0:95:5b:0e:aa:
8c:2a:fc:2d:75:9c:27:a8:17:55:ad:bd:13:b3:f8:
5b:43:59:50:bb:2f:38:6b:59:7d:11:90:69:04:31:
71:0f:6c:8c:af:af:54:6b:d4:db:38:1a:b9:50:3b:
be:20:8d:73:e1:17:eb:76:c5:fc:d4:14:a7:2b:13:
7e:28:31:6a:9c:50:84:ee:99:59:2d:61:a9:f1:2d:
04:13:4c:51:c3:3d:99:54:d4:b6:0b:a1:e8:b7:64:
de:d0:e2:a6:3e:c3:d5:04:b9:7c:09:27:99:6a:31:
92:a7:99:31:88:27:43:87:f5:f8:e3:24:f2:15:1a:
85:74:3a:63:a5:fa:c6:58:35:41:62:37:a5:72:a5:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:74:51:08:EC:9E:25:7B:A8:72:F6:13:61:51:09:8A:55:84:B4
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:25:77:f1:04:f7:54:70:58:e0:54:e2:fe:20:14:d5:ae:
62:49:e1:02:28:10:9c:41:0f:98:58:b2:c4:51:4b:08:18:cd:
5d:de:23:d8:0b:35:3c:ec:80:12:66:45:d4:c8:fa:a7:70:23:
6d:59:70:c4:01:c5:e4:05:1f:cb:dc:c8:04:f2:7d:e2:df:3a:
68:af:24:1f:81:06:f8:ed:4a:a2:0c:fc:10:64:0b:6a:10:24:
92:fc:9e:68:c4:0e:7c:75:b1:b3:ff:65:9d:42:52:38:8a:c1:
5c:49:e2:d5:91:e2:b4:cd:51:4b:c2:95:c8:fd:0b:d6:8f:c2:
bc:99:04:6b:e2:9b:30:f4:c0:30:ec:08:bd:65:0d:f9:74:09:
a0:c7:70:e9:c6:87:6e:1a:c8:c7:0b:48:21:a1:03:aa:f2:88:
71:71:4d:f6:50:6f:77:31:49:b9:c0:0f:31:e8:bb:39:eb:a2:
2e:0a:da:d6:6d:54:1d:ae:73:34:37:ad:a3:69:f4:c7:c1:7a:
2d:13:d3:68:d4:68:63:ab:c4:46:9f:69:3b:5e:93:62:c1:74:
c8:76:ff:c8:59:f2:ed:e3:a3:c4:07:41:93:00:e3:84:7e:f3:
27:f2:ac:4d:a3:2b:ce:38:45:0c:d4:47:20:ad:1a:b7:5c:d1:
73:19:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:44 2025 by rpki-client