Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: AzZ146g/MOgooWJcd5HsJuAT68M27CZWEmNw7oF3I5M=
Subject key identifier: F8:32:A5:DC:40:38:79:43:D5:3A:E2:C9:9F:A8:88:00:B1:C1:69:09
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 019A4DE20CF1F00CD5800E62F86EC3CA62AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: 5bVDaElmzEOpqyWkoRkKKvK3C/SWcX7VxOw3fzJjycs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0c:f1:f0:0c:d5:80:0e:62:f8:6e:c3:ca:62:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=f832a5dc40387943d53ae2c99fa88800b1c16909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:ec:89:ad:21:47:9d:83:50:e4:02:47:11:
57:e7:13:b8:cd:5f:c7:de:84:7d:c8:36:c3:44:11:
8f:fb:b4:fc:0f:7b:00:aa:70:6a:e1:c2:d2:e9:7e:
e7:0f:d2:35:a4:90:ce:73:03:b5:43:e8:5d:cc:8a:
d1:b5:d2:53:7c:38:bd:43:69:be:bb:48:2d:5e:8e:
33:88:44:a6:ae:f3:aa:be:46:b5:e2:c7:bf:f2:2b:
57:29:6b:2a:e8:a5:3d:17:64:28:bf:34:a3:e9:74:
a0:74:06:50:d8:39:01:86:e0:6d:0b:cc:4a:09:cd:
9c:23:e3:19:6f:e1:72:f2:fc:ff:dc:0b:3f:ae:72:
e1:10:a5:bb:df:eb:c5:f5:27:67:0a:6a:7b:94:a4:
b6:3f:b4:6f:10:26:a7:62:93:05:3b:fe:2f:b4:b4:
c4:34:ff:fc:12:fb:a1:51:c2:e9:a0:99:46:11:dc:
49:e8:1f:c6:7d:7b:5c:87:a1:c0:de:76:66:f3:ca:
b0:ac:f7:72:d7:f3:27:5b:b9:db:fe:31:bd:ad:ad:
d8:9f:cf:1f:81:37:d1:6f:c0:46:eb:c7:4c:4d:e8:
f9:cc:b7:5c:ec:a0:30:e2:34:ca:38:0e:84:70:11:
0f:c2:54:15:18:4e:13:d2:e2:28:74:0e:09:fc:c9:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:A5:DC:40:38:79:43:D5:3A:E2:C9:9F:A8:88:00:B1:C1:69:09
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:a1:c7:6c:8e:44:7c:9a:92:27:04:e9:a0:65:b4:4e:ab:
54:47:0a:b7:8b:f7:c8:86:b0:01:f9:1f:6a:e7:0f:21:3b:4c:
50:88:4f:24:89:d4:91:40:4e:9d:b6:fd:a2:99:da:98:55:78:
19:df:1f:37:fa:c9:32:46:86:08:a0:6f:6f:f8:b1:23:db:f4:
fc:6a:83:1c:f7:15:33:15:5e:22:2f:cc:66:f4:ae:f0:43:91:
21:3e:1c:5e:0f:b6:8c:8a:6c:14:cd:2f:43:cf:e3:ed:d9:77:
e8:4e:51:70:6c:20:92:7d:aa:5c:4b:46:98:08:0f:fa:7a:28:
9d:e4:23:2b:7c:b5:1e:be:c5:1c:2d:d6:92:76:40:38:56:c7:
fb:0d:23:21:d9:88:97:f8:4e:81:63:3b:22:3f:d5:18:e9:50:
72:06:11:b1:3b:bc:e1:64:45:61:a8:36:95:f3:ac:e7:85:5e:
72:58:0a:20:f8:1f:21:30:1b:16:64:69:1d:b2:1e:cc:84:9d:
21:02:f6:29:69:99:0c:c6:16:4b:51:a0:e0:66:a6:60:97:3b:
26:aa:de:e4:f5:99:67:ec:27:96:8a:7a:53:af:c7:bc:ea:1a:
5e:5b:e4:3e:c9:46:5f:f4:e2:ea:05:23:9a:e7:85:89:15:39:
3c:02:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:38 2025 by rpki-client