Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: zhfVOPEWMMpVLiFWq0ibINXArjccxt3Trq+P0d8calg=
Subject key identifier: DA:4C:1C:AB:ED:E9:2F:E1:09:4E:80:69:BB:BD:DE:8E:99:5E:A4:C2
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 019A54C061375C4E7C6723FDB88EFE8B1DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 16:01:25 +0000
Manifest this update: Wed 05 Nov 2025 16:01:25 +0000
Manifest next update: Thu 06 Nov 2025 16:01:25 +0000
Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: UiwvcjBdBO69SK/vu44LOWzxTs1fLRs8ouT2P85EhIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:61:37:5c:4e:7c:67:23:fd:b8:8e:fe:8b:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Nov 5 16:01:25 2025 GMT
Not After : Nov 6 16:01:25 2025 GMT
Subject: CN=da4c1cabede92fe1094e8069bbbdde8e995ea4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:f6:96:21:b4:9b:55:2c:c8:5a:9e:cb:bd:
0a:c8:fd:4a:c3:63:d2:87:47:ee:1d:c7:b7:2e:24:
40:fa:77:67:a9:a1:7e:d5:f4:96:fc:c5:63:f0:21:
90:40:9f:7b:92:28:a2:90:79:7b:12:97:8c:e2:8f:
a0:94:9c:06:9c:79:65:e3:7f:c9:e4:21:9c:83:a4:
e5:2e:24:96:5b:72:6d:a9:a7:16:72:5c:61:ef:78:
44:20:31:3d:03:62:f6:89:ff:5b:c0:d1:d6:5c:34:
79:69:1d:bf:27:11:97:27:c0:d3:e6:2f:5a:09:d4:
4d:6c:37:93:ca:11:df:6d:10:98:c1:69:96:43:1c:
e5:72:0c:93:40:ae:33:d3:eb:f5:43:53:53:3b:7d:
bd:6b:a0:3e:e6:cc:73:2d:80:1c:dc:4d:00:5d:8c:
94:90:9d:17:9f:81:67:49:cf:75:d0:80:26:c7:aa:
7b:08:9f:d3:75:5e:8a:39:26:69:17:e4:b7:51:dd:
11:bd:70:6d:ba:30:39:0c:a4:57:3b:51:e4:5c:a6:
ad:15:15:b7:a9:ad:2c:75:90:21:ac:61:2b:a3:2b:
da:20:b8:b5:a8:8a:bd:ea:66:45:58:78:01:37:9b:
90:be:ba:59:81:bc:78:a8:7e:8b:e7:a6:ae:9d:72:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4C:1C:AB:ED:E9:2F:E1:09:4E:80:69:BB:BD:DE:8E:99:5E:A4:C2
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:e5:f6:42:f1:0e:f5:33:b7:c9:ee:5a:bf:60:bf:b6:f7:1a:
34:1a:f4:ed:eb:70:7c:ce:35:68:2e:f8:85:68:cc:e7:e7:62:
be:8c:f1:f8:28:bb:50:97:ab:85:a3:be:a5:71:a8:60:f1:3a:
97:a4:30:07:af:ba:f2:6a:7c:3e:6a:e6:17:ed:3b:15:f7:1a:
2a:9f:8a:a2:9a:ba:43:87:cd:20:a4:9f:55:05:8f:1d:31:30:
ab:44:a3:a2:22:24:6c:47:b1:ca:31:b0:48:1d:e0:8e:27:6f:
43:50:16:76:de:61:87:87:df:b6:dc:98:1d:6e:36:19:68:16:
d3:ff:b3:45:03:d8:43:03:f1:fa:7f:84:c7:3f:09:c2:b3:db:
78:fb:18:f3:8b:65:a4:83:d3:d9:38:28:6e:04:05:26:05:c7:
71:4e:bc:1d:db:7d:92:fc:7f:a7:b2:bc:9a:ce:23:bc:b0:c3:
92:68:0c:32:06:9f:ca:ff:13:d4:6c:16:c1:aa:36:c9:71:26:
5d:9c:e3:7c:13:c0:be:53:96:ac:23:d0:d1:16:4e:1b:95:c7:
b2:dc:5c:dd:89:73:4f:92:89:29:c7:b5:76:42:e2:d4:12:dd:
56:a5:40:f5:51:4a:6d:ac:aa:97:a8:9c:9b:88:1a:07:66:21:
ce:2c:4e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:40 2025 by rpki-client