Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: vXxeK6CxmlUh9ZFF35rQoWgDAtDX9Z7/5BfVLyd2OmU=
Subject key identifier: B5:17:59:FC:8A:E3:FE:7B:F3:9A:8C:98:D4:E9:16:E2:B2:44:9B:FA
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 019A4F62AA586C49F0E666DD0BA34F1B32D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 05B4
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: cDfoynE36QzvdN0t0MrbFt28GIfVO7N24L/0yYs+xSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:aa:58:6c:49:f0:e6:66:dd:0b:a3:4f:1b:32:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=b51759fc8ae3fe7bf39a8c98d4e916e2b2449bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:75:90:98:20:2e:a3:3f:35:b1:b3:a5:da:
1c:8b:ef:b6:79:62:a4:62:75:58:fd:df:fe:4d:df:
8b:d4:ed:bf:29:21:3b:b1:29:14:c0:be:f4:80:cc:
f2:90:87:ab:98:14:91:2b:cf:3c:3b:5c:f7:c2:41:
f0:53:fe:9d:dd:a8:d5:2a:6d:7e:58:32:f2:b3:59:
9b:71:f8:09:04:90:08:12:75:de:3d:08:0e:68:67:
70:a0:99:0e:bf:e0:d8:d2:32:16:ae:86:e7:db:58:
68:30:c1:6f:04:8c:0c:18:cc:8c:83:e6:1f:8c:c4:
2a:9e:fb:7a:b4:28:ec:90:5a:c6:81:42:9e:d7:f9:
5b:0d:7d:e3:ab:c6:99:57:d6:f3:c2:81:87:89:53:
3c:c0:6d:63:31:18:10:86:90:86:24:10:c5:6f:aa:
2d:85:77:d2:ef:36:39:5c:61:c0:b7:74:ab:ba:67:
7d:b5:33:23:20:4b:36:2f:50:06:59:cf:af:d0:81:
e8:42:83:ee:3d:70:98:59:ec:bd:7f:d3:19:26:59:
f8:d2:03:76:ee:bd:32:66:1b:f3:f8:31:4e:5c:8d:
18:f9:9e:a7:5e:0c:15:b9:0c:90:7f:e9:1c:a1:f4:
47:69:80:62:11:c1:e5:36:69:d4:16:f5:49:9e:d0:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:59:FC:8A:E3:FE:7B:F3:9A:8C:98:D4:E9:16:E2:B2:44:9B:FA
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b5:a9:d9:20:74:8d:81:d9:d0:9c:03:d8:54:25:a0:fc:a9:
31:91:de:58:06:46:d3:55:83:26:73:47:68:52:7a:63:de:95:
04:dc:38:d4:d3:c5:fa:ea:ba:fb:28:d4:05:ee:e1:3e:3e:2a:
02:a1:c5:32:36:87:ef:43:cb:dc:12:54:2b:35:ae:e9:6c:70:
60:af:57:6f:54:61:24:05:99:0a:32:e4:99:bb:0b:06:ad:3d:
43:c3:2d:7b:10:92:ce:e0:1a:f0:a8:c7:7d:06:73:ff:90:ea:
d9:0b:ac:5a:e0:6b:05:e0:03:f4:fd:4d:17:d6:6c:2b:60:66:
9d:04:45:95:43:c5:e7:1a:3f:ac:e2:be:e9:c3:60:d9:75:e4:
17:52:13:f9:e4:37:42:3d:94:90:0b:55:29:16:7b:55:8d:00:
df:9b:8a:4d:cb:bd:7f:20:0e:c6:76:19:a9:62:8e:a6:7a:3a:
bc:db:c3:8c:40:6f:02:a4:05:5f:d2:73:d4:90:51:6e:f8:8a:
b0:7c:65:f1:ea:89:67:46:68:92:a6:d8:1b:af:65:a9:42:95:
64:1a:98:d4:32:d8:0b:5f:d2:b8:56:94:ca:1b:e3:a5:7b:6c:
e1:d5:0e:8b:55:4f:ca:35:24:4c:36:9a:76:30:ae:ef:68:8e:
cb:99:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:24 2025 by rpki-client