Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: K3ZpBoC7d7W7yDDMVwrjeM1bVkxFsFoRmKncFV6+GgY=
Subject key identifier: 3A:CA:23:61:7E:8E:C5:64:01:6D:2B:63:D5:3B:DC:F0:B6:FD:26:80
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 019A5150D996D956A85016C00BFCB0EC6912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:44 +0000
Manifest this update: Wed 05 Nov 2025 00:00:44 +0000
Manifest next update: Thu 06 Nov 2025 00:00:44 +0000
Files and hashes: 1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: PKgG3/nk+MZHzYdxq/MVpCHRWxTubLX08RcfJd7qHcU=)
2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d9:96:d9:56:a8:50:16:c0:0b:fc:b0:ec:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Nov 5 00:00:44 2025 GMT
Not After : Nov 6 00:00:44 2025 GMT
Subject: CN=3aca23617e8ec564016d2b63d53bdcf0b6fd2680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:d2:20:e9:95:0c:30:70:87:48:a6:f8:97:
80:67:10:53:e4:2f:f6:90:7b:fe:82:e5:26:2e:20:
d4:9d:95:ed:96:36:fd:48:8d:40:a1:40:1f:a8:c2:
a4:c0:84:38:47:c3:02:07:85:23:06:a5:99:ee:64:
45:a2:64:4c:cd:bc:ab:8e:41:5a:8f:53:32:e4:bc:
1e:5b:37:1a:75:76:37:08:d4:c1:23:7e:d4:7a:4b:
20:d6:f3:38:d7:5e:b9:3b:dd:fc:3e:44:a3:a6:4a:
3a:a8:a4:52:aa:6e:b9:b4:4c:d2:cb:c8:49:49:33:
ac:b9:f5:39:76:54:30:4b:67:33:35:58:8b:6a:da:
71:bc:66:4d:8b:56:a5:63:65:9a:b9:11:ab:43:01:
e4:20:f6:1b:ab:19:95:ed:60:e4:40:3b:cc:94:e7:
52:d2:03:20:e1:99:b0:11:bd:86:9f:43:2b:a0:2d:
da:86:e9:94:00:0a:37:e0:4a:54:80:ae:d3:ef:78:
eb:6c:eb:6b:38:ed:8f:46:bc:40:4c:6b:be:ba:37:
e2:0a:f0:b7:f2:fa:bd:b9:67:22:98:da:bc:5f:36:
bb:f5:8e:be:01:38:6e:ca:18:d4:a2:69:95:db:69:
c2:ec:07:18:75:32:91:be:f3:15:1b:bd:30:a7:32:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:23:61:7E:8E:C5:64:01:6D:2B:63:D5:3B:DC:F0:B6:FD:26:80
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:de:95:fa:a1:96:27:ca:a7:87:3c:0a:4a:f8:1f:68:64:25:
45:7d:34:b1:8c:dc:74:c6:f0:5f:5f:93:59:40:ae:f0:6d:ea:
20:9a:f8:b1:21:63:da:9a:c7:c9:a6:2d:45:ce:c0:61:68:9b:
5f:67:ff:aa:cb:f8:3c:8c:d8:d4:c2:e6:36:ea:cf:1e:5d:5f:
96:7b:69:69:76:ed:ad:60:f3:d8:e5:74:c2:3c:0d:3f:70:86:
07:8b:62:da:0a:e5:47:bf:69:bb:a3:fa:a4:65:10:fc:9c:b9:
5e:f1:6b:6f:fe:9e:2d:0f:89:79:31:35:cc:88:80:cf:d7:db:
fa:33:e3:1b:90:be:85:02:18:71:fb:1d:1e:e4:0d:c3:b9:7e:
47:9d:1a:38:d5:c5:b7:6c:d9:e6:15:58:1d:b0:92:a3:10:a8:
2e:a4:f5:90:d1:f0:3f:a5:2e:0e:d9:4b:c9:ce:84:bd:14:d9:
06:00:e5:bc:50:61:a3:cc:38:35:18:d0:a8:f9:b9:44:5e:5e:
7c:d5:7e:b5:31:b9:da:f5:6f:07:81:0a:7c:36:07:3a:b5:74:
97:fd:97:13:5a:84:f9:89:2a:1b:89:a6:40:3a:f5:24:2e:bb:
b5:63:b5:51:8f:a1:b2:83:59:bc:a3:64:8f:8b:0c:cd:5b:c1:
b6:69:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:33 2025 by rpki-client