Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: oxyvLPt1LiFo16o96z2P5ylCripGVmKhV+Gm9sLzQ+k=
Subject key identifier: A3:41:D4:A1:D3:29:4A:3C:70:E1:25:E5:A9:DD:1D:6F:DF:4C:E9:A7
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019A4EF56EFA66926623A44CD56ED78E0FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:38 +0000
Manifest this update: Tue 04 Nov 2025 13:01:38 +0000
Manifest next update: Wed 05 Nov 2025 13:01:38 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: vOS0O+ay0nqrm7BTSBiCMKpJBVN9AFLIrxqgFqbSWj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6e:fa:66:92:66:23:a4:4c:d5:6e:d7:8e:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Nov 4 13:01:38 2025 GMT
Not After : Nov 5 13:01:38 2025 GMT
Subject: CN=a341d4a1d3294a3c70e125e5a9dd1d6fdf4ce9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:6e:66:a7:33:66:50:34:fc:09:90:d0:76:
16:9d:7c:43:77:c8:94:3c:8c:61:7b:63:c1:15:24:
5d:b9:76:c7:7f:f4:69:5d:6d:8f:06:23:4d:a9:78:
36:37:0a:62:a3:46:3f:53:cf:e1:79:76:8c:87:cb:
8b:5d:99:d8:a9:e2:bd:6d:36:69:dd:d3:25:9e:dd:
3e:d2:f5:ee:75:37:f3:21:0b:90:aa:3d:3a:86:43:
32:31:0a:78:49:ff:26:24:c2:89:02:30:14:98:b8:
fc:04:c0:e9:09:85:3a:78:56:92:53:c0:46:d0:0d:
45:cb:d2:41:c2:9e:76:6e:a1:44:b2:24:a1:09:26:
1d:79:38:ab:8f:c5:b6:fa:03:4f:89:a2:b3:80:61:
c4:33:10:c6:c3:1e:b1:90:ec:4a:30:33:67:c0:1a:
80:7b:54:df:84:a0:43:0b:63:cf:3f:37:36:6e:63:
5b:88:36:b9:66:f1:3e:91:2f:48:f0:fb:d2:a9:11:
e2:b5:f2:b4:c8:10:e3:78:85:6f:9e:6b:d5:ea:ba:
70:d2:79:93:02:00:9b:c3:7d:86:26:01:d9:af:3d:
8c:bd:07:e7:c5:01:2d:08:a4:1c:f2:48:64:46:98:
38:e0:74:1f:d1:a4:00:9e:4c:03:d7:37:0e:66:30:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:41:D4:A1:D3:29:4A:3C:70:E1:25:E5:A9:DD:1D:6F:DF:4C:E9:A7
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:bd:19:4c:81:5e:97:7a:ef:2d:a6:f6:59:bc:b7:43:12:
42:ba:94:cc:cc:c6:3f:0a:94:90:c0:12:d6:86:0c:fc:59:11:
2d:24:71:d8:14:0a:60:37:bf:62:c4:a6:df:23:6f:2e:06:6b:
53:d7:04:92:f5:fa:e1:65:5c:e0:5e:60:9f:88:32:51:84:68:
55:2d:14:07:30:99:6a:4c:07:d3:8c:39:fd:f8:90:c0:6d:86:
65:de:37:1e:d8:72:6a:19:fe:e0:44:4c:16:63:01:10:e7:c5:
44:cd:5e:03:92:73:e0:2b:be:76:b8:4c:e8:5c:82:0f:b4:ae:
d1:e0:94:43:5e:8f:13:22:66:4c:ee:ef:dd:af:52:c6:f9:f6:
25:01:10:11:9b:29:6f:52:67:3a:48:63:f0:86:4b:d9:88:8b:
38:b4:e6:0a:90:44:f3:ab:52:d8:4b:9f:e6:c3:11:37:e4:ac:
11:c4:70:0d:6e:02:d1:9e:d1:3d:54:e4:6e:46:43:86:ee:b5:
e4:ce:57:05:ed:9e:30:4b:bb:0a:ae:e3:3d:fe:5e:07:48:c1:
4d:72:b2:a1:e9:1e:ad:d1:9f:a3:f0:8e:20:90:ca:d1:01:6b:
4e:6d:17:43:d5:2e:d8:bf:2f:fe:48:2f:a7:07:54:08:b2:2b:
02:bc:87:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:50 2025 by rpki-client