Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File: eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier: Gt1wsSNpA1ean51i9qtPwhnaXNRLnyufJNhql7LZ9aM=
Subject key identifier: 31:34:98:8C:63:0E:33:F3:72:77:63:EB:70:A8:1D:F0:DF:64:FB:F4
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 019A4C612B931E1567F18658A915A41B5F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 01:00:27 +0000
Manifest this update: Tue 04 Nov 2025 01:00:27 +0000
Manifest next update: Wed 05 Nov 2025 01:00:27 +0000
Files and hashes: 1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: SuyYLGk9sWBfTnh/vPh6hxqWVX3seg3Uwu+vsHj7dfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2b:93:1e:15:67:f1:86:58:a9:15:a4:1b:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Nov 4 01:00:27 2025 GMT
Not After : Nov 5 01:00:27 2025 GMT
Subject: CN=3134988c630e33f3727763eb70a81df0df64fbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:46:54:8f:81:96:2a:70:39:61:81:f3:0a:
8b:70:96:18:34:78:4a:69:41:72:7c:08:00:82:53:
17:9b:ab:14:fe:07:2c:cc:48:f4:ae:31:9c:80:3b:
71:6e:95:94:ad:62:cc:7b:f0:d5:14:2b:33:0d:0e:
5a:74:04:94:44:3c:ad:1b:13:53:ab:eb:86:e2:14:
49:53:44:f1:0c:f1:7d:e3:35:68:a2:b3:d7:5f:94:
32:a6:46:df:93:e4:93:d6:03:fa:0b:33:a9:64:ad:
9c:c9:f0:22:b7:aa:f5:e0:35:94:88:91:5b:bb:f0:
c1:12:22:e2:c6:66:9f:f7:ac:4a:32:2d:4c:a7:69:
82:5a:ce:ac:09:9e:8c:f9:c9:5e:a0:ea:4b:bd:e9:
96:d1:3d:7e:7d:9d:d1:f8:bf:9c:b7:b6:dc:75:9c:
e9:7c:d0:19:9e:4d:2d:b8:6a:1b:1c:26:e6:50:45:
0f:d7:d7:61:a9:02:34:f9:b7:3e:29:4e:9c:35:46:
3e:c9:5a:9a:6b:db:d7:6b:4f:f9:4f:b2:f3:1d:42:
53:e7:5a:22:21:d8:eb:3e:72:86:fd:f0:3d:05:d2:
4f:ff:2f:1e:a6:31:ec:a2:9a:cc:a9:de:29:b0:ae:
3e:a9:aa:af:e8:0d:dc:86:ce:01:77:61:c2:50:1e:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:98:8C:63:0E:33:F3:72:77:63:EB:70:A8:1D:F0:DF:64:FB:F4
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:15:a4:28:b8:f1:15:79:70:58:99:7e:d6:9f:76:95:53:44:
b9:6d:cb:cb:38:b4:f5:95:f1:21:2c:b8:50:4f:b8:3a:b5:d2:
23:f6:d7:b7:bc:92:92:74:90:e5:e3:86:5b:52:f0:ea:16:17:
51:01:9f:c9:fc:fb:a4:1d:6e:20:a9:05:cd:62:71:4d:fd:81:
66:11:7a:f7:f4:f6:c5:25:68:05:cb:bc:73:e1:84:25:09:dd:
12:04:f0:d4:1c:e7:d7:a2:1b:e9:00:c9:17:41:33:fb:87:64:
e2:50:ab:69:a3:e0:82:7a:41:1a:77:7a:70:6d:c8:d4:db:f9:
d2:35:f1:b0:77:30:96:ce:0a:7c:f8:af:5f:75:6b:36:b1:7c:
f6:56:9e:5d:b9:61:27:4a:03:92:af:c6:85:17:f0:49:bf:8f:
b4:94:37:fa:25:ff:85:1f:eb:e0:84:c5:0a:62:47:52:ec:44:
64:7f:cc:77:96:6f:26:1c:52:67:28:b2:0f:5a:17:f0:81:cc:
8a:63:2d:80:1d:2e:9e:77:15:76:91:c1:49:78:75:52:8d:14:
51:6e:8a:12:c8:33:91:67:24:7e:5f:6e:7e:63:34:ca:a5:e8:
20:ae:19:43:09:33:bf:44:9e:32:23:9e:a5:d5:6a:4f:89:d9:
67:be:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:56 2025 by rpki-client