Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: rx+/66K31SlbSb7Fiy6KcmjRXOjpTrHIF/38juqOveg=
Subject key identifier: C8:61:E8:5A:EF:BA:12:2D:F5:B4:D6:C9:56:ED:14:89:76:8B:A1:64
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019A503E3A3073A2366D54F7E768C97D977D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 19:00:46 +0000
Manifest this update: Tue 04 Nov 2025 19:00:46 +0000
Manifest next update: Wed 05 Nov 2025 19:00:46 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: F5saD5No6WOJKSSbBSGhNzY4/sQ3JWykWAV6C5D0gcQ=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3a:30:73:a2:36:6d:54:f7:e7:68:c9:7d:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Nov 4 19:00:46 2025 GMT
Not After : Nov 5 19:00:46 2025 GMT
Subject: CN=c861e85aefba122df5b4d6c956ed1489768ba164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:7b:1e:9f:ed:4b:e3:fa:77:d1:02:c0:fe:
af:a0:40:e9:91:33:06:58:fe:10:10:ec:7c:aa:de:
18:51:18:c1:45:d4:b8:b5:59:19:fa:b1:0a:2f:a7:
2b:d1:ea:a4:c2:23:96:35:13:cd:90:26:ff:b9:9f:
e6:aa:27:c0:61:33:3b:ad:45:07:9a:2f:66:a3:cb:
36:2e:fd:cc:57:a1:b5:84:c1:13:54:1e:44:86:c3:
d3:26:43:61:d2:84:84:f8:a7:a8:d8:3b:ce:2c:13:
fe:67:c5:6c:b2:48:8a:da:bd:ef:1b:e8:8f:d8:43:
4b:31:60:32:a6:59:1d:96:fb:03:e0:0b:cc:d8:81:
2c:f9:ff:43:f4:43:ad:1a:0d:8c:92:c2:5b:25:56:
69:4a:fe:0e:21:c4:cd:70:c4:4b:a6:7b:89:ba:71:
86:f1:20:be:ab:b4:28:66:19:c9:67:d4:35:d5:6f:
ef:e0:63:40:cb:9b:e5:5c:15:5f:af:0e:d5:e1:89:
bc:a8:5a:88:ef:c2:4f:47:8f:78:14:05:8c:7b:b9:
c7:1b:07:22:e4:73:70:c0:59:65:44:1e:1d:14:7a:
af:59:5f:34:77:18:a2:db:21:d6:6f:34:69:7c:24:
73:ba:29:9e:0a:85:2a:ab:cd:5f:15:ea:a0:20:84:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:E8:5A:EF:BA:12:2D:F5:B4:D6:C9:56:ED:14:89:76:8B:A1:64
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:20:d2:6c:20:45:6b:2e:c1:c8:b9:2c:ba:c0:08:e6:07:5f:
f1:aa:53:6f:ee:16:01:f3:7a:d5:05:48:0d:b7:53:f3:d8:9f:
fd:6d:c5:23:d7:4d:18:db:41:c2:0b:4d:0d:2b:ec:91:87:cc:
3f:a0:bd:6d:db:03:9c:cb:0c:78:cb:3e:1f:3d:3a:b1:43:9f:
cc:37:0e:b6:cf:b5:f6:2b:76:b0:c6:6c:70:a3:27:6c:76:54:
da:2e:7b:ad:45:4b:c2:99:70:10:f3:3d:75:58:64:9d:ab:54:
0d:dd:4c:fd:57:f8:e4:f7:70:a3:9b:b8:02:83:89:aa:23:73:
d3:0c:94:55:59:c6:62:14:32:09:28:95:b7:73:0f:b0:7d:94:
7b:d1:7c:c8:47:03:18:22:08:f2:e6:2f:32:c4:9c:f3:39:d8:
c3:c4:60:c6:27:d4:c6:27:f1:3f:07:19:46:aa:1d:a5:86:e5:
d3:68:f8:ab:b6:5d:47:53:50:1f:77:04:6b:0b:cc:4a:3b:67:
8f:be:17:e6:f5:b7:87:48:55:1d:ad:88:b4:29:b5:ba:b4:7f:
a8:f8:8e:c8:04:0c:af:20:2b:66:1f:99:b4:67:bb:e5:e3:0a:
c0:72:18:77:62:b6:5f:9a:ab:40:e4:76:f1:95:ee:e4:eb:36:
e3:dd:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:24 2025 by rpki-client