Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier: UWC4FzYCLHr1gAygcz8It3xqZdtBxxpyGyAWFQWtISo=
Subject key identifier: B3:EE:48:C0:83:08:41:CB:6F:E5:65:0B:A4:3A:EC:7A:60:C6:F3:55
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial: 019A4D73C19EF20B55B832D3C457A9BDE765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:23 +0000
Manifest this update: Tue 04 Nov 2025 06:00:23 +0000
Manifest next update: Wed 05 Nov 2025 06:00:23 +0000
Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=)
2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: hsrWQY65FL33EftzjrZzCNXKR2hKRHGGQJAEsbzsa6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c1:9e:f2:0b:55:b8:32:d3:c4:57:a9:bd:e7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Validity
Not Before: Nov 4 06:00:23 2025 GMT
Not After : Nov 5 06:00:23 2025 GMT
Subject: CN=b3ee48c0830841cb6fe5650ba43aec7a60c6f355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:bb:07:fc:79:1a:fa:e3:23:33:24:24:13:
72:2a:9d:e1:b1:4b:8c:74:bf:5f:11:df:5d:e9:92:
8c:0c:e3:bd:15:7c:c2:b4:67:f6:d0:0a:af:5a:1c:
ce:d1:e7:dd:e9:7a:5c:d5:e1:6e:01:0d:48:9b:8a:
97:a7:b1:e2:11:54:fe:e3:31:41:44:da:77:70:18:
f6:2a:d6:d2:f2:d6:8f:ea:24:2a:be:62:99:c0:17:
12:6b:47:39:1c:c5:ff:0c:1a:ae:b9:e6:e1:23:c2:
f5:16:52:e8:84:15:ec:28:1d:b8:0f:32:ab:4a:ef:
56:1d:74:16:60:6b:8d:22:7d:20:ca:52:2c:2f:b8:
3f:2c:7d:5d:6c:d0:21:04:0d:11:2b:9b:d1:52:6f:
ad:9d:f2:10:80:d9:d3:a5:08:96:46:f0:43:ee:a7:
2b:aa:45:9d:68:bd:e5:57:88:57:17:72:b3:e5:9f:
55:09:9e:d9:bf:fc:f5:fb:c0:bd:4d:7b:06:9a:8f:
87:9f:69:83:b2:12:de:f9:0f:a5:55:48:1d:6a:60:
4e:63:bb:8f:e8:9e:3f:6e:0d:4a:b3:10:88:fb:2a:
f5:24:86:99:a4:87:5b:be:bf:4e:5c:cc:42:02:c3:
7a:3e:6d:52:0f:a7:e9:fb:d2:b9:2c:53:29:ff:eb:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:48:C0:83:08:41:CB:6F:E5:65:0B:A4:3A:EC:7A:60:C6:F3:55
X509v3 Authority Key Identifier:
keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:31:58:78:63:69:bf:cd:af:bf:f9:2d:66:ae:a4:2f:a4:a9:
2c:bc:92:63:94:13:37:0a:3e:f8:c9:95:3e:26:f9:23:f1:c9:
75:2b:65:dd:c1:75:2e:1b:8b:cc:57:49:3e:09:05:24:fe:40:
4b:0b:41:7e:92:ae:da:02:09:b5:66:10:cb:0f:d2:4f:50:b2:
8a:e6:3c:f6:1c:49:5d:4c:50:e2:d2:2f:93:6e:a6:0d:d5:00:
c4:9e:f7:f1:97:da:19:9c:12:fe:b0:01:51:4d:32:51:5d:5c:
25:9f:f8:65:2d:26:8f:35:7c:00:b6:5f:6c:69:0b:de:a7:32:
e2:b2:53:08:a4:bb:60:16:6a:24:9f:e6:bb:73:40:d2:61:09:
ce:c2:b4:0d:5e:c3:9c:5e:68:47:0b:ce:92:de:16:5b:b6:47:
6d:b7:52:a6:64:ed:9e:87:87:a6:29:97:e8:9e:11:95:f3:9b:
b4:ae:a7:01:e7:0d:bf:9e:4e:f7:45:1c:d2:b1:a6:92:26:18:
7a:38:19:96:3e:f1:81:6a:9c:7d:c5:fc:05:7d:71:f2:35:51:
c0:30:96:e0:d9:42:09:49:15:06:35:43:0a:a6:a9:00:70:6f:
09:49:70:9f:b3:90:51:14:d7:d6:43:7d:92:26:55:29:fd:a0:
a1:4f:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:28:59 2025 by rpki-client