Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: QOxbB4M5ZGOerA7zV0TxytlM6lmc9/TeYnxpbOHGwZE=
Subject key identifier: 28:84:48:B4:30:3B:42:8A:2D:82:8C:3C:EE:41:58:FD:80:AD:E9:C1
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019A4EF519C6551FDDA8AE7A5EEEB5A2F761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: 58baRMf+HOkyBHRBUxFks7kiQDNlgLSD/4SBOQkJ++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:19:c6:55:1f:dd:a8:ae:7a:5e:ee:b5:a2:f7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=288448b4303b428a2d828c3cee4158fd80ade9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:36:4f:09:d3:6a:7e:96:a9:2a:8c:1f:18:
43:3f:23:e5:69:73:c2:93:e1:cf:50:c0:e1:ab:07:
c9:a4:d1:11:5b:98:14:89:41:e2:6b:29:e4:46:ce:
89:52:27:3e:df:db:43:43:01:37:37:7f:67:b2:14:
c6:5f:7c:bd:35:05:27:54:7f:99:02:7c:bd:d5:7f:
f9:3e:ff:a5:d0:cb:13:3b:ab:78:ec:b7:af:2f:0f:
82:68:56:ae:cc:ef:92:c3:92:d9:45:d3:73:2c:25:
c3:f3:1a:31:6a:d8:62:5c:ed:73:b9:b5:22:ec:b8:
4d:57:c2:8b:0d:dc:57:49:65:ab:5e:ea:4a:23:7f:
40:18:eb:fd:18:9b:a5:7a:51:78:03:5a:7e:f9:85:
39:87:25:44:28:89:31:ba:38:d7:f6:fa:04:e5:59:
f2:8b:72:19:54:f4:42:c4:80:fa:42:0c:aa:b2:87:
d5:18:59:95:f9:5f:ca:0b:12:2a:45:af:2e:5b:40:
a8:68:f5:8d:f1:4a:8d:bd:d8:6e:54:18:df:6b:6b:
8d:1b:90:ad:53:11:2f:5d:f3:d6:71:6b:4d:c7:b2:
aa:c8:91:7e:1e:90:7c:54:ec:28:2b:bc:20:d7:e4:
45:06:fb:0b:2a:94:6f:02:8c:68:fa:82:d4:56:00:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:84:48:B4:30:3B:42:8A:2D:82:8C:3C:EE:41:58:FD:80:AD:E9:C1
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:17:a9:64:8a:8e:e2:84:b5:c4:c8:47:92:7d:d0:b6:0a:6e:
ca:b5:a7:2c:29:25:00:e4:e0:83:a6:67:d1:b7:f5:5d:0d:a6:
39:b0:4f:e2:ee:4a:57:9a:60:16:24:92:97:e4:68:ac:57:2b:
46:91:45:40:da:e2:a3:20:12:e0:cb:b4:41:30:17:b8:8a:11:
40:d6:b0:f6:1b:1c:50:1a:42:4b:cd:0a:af:96:49:f3:87:e9:
2c:78:2a:95:62:8e:eb:11:04:e7:5d:01:49:a8:73:73:cc:57:
a8:56:22:6d:e4:77:98:8c:cc:82:43:01:f4:e5:8b:cc:38:db:
19:b6:ca:76:b6:e9:b3:57:f0:10:ca:9e:18:c4:c0:60:01:09:
18:22:cb:60:a4:7a:05:5f:40:85:e2:de:77:be:4a:1b:c2:2e:
a1:c3:b8:c1:5e:83:ab:c1:c3:56:2d:9a:57:2d:c7:39:11:31:
7e:43:02:cc:cc:b6:72:21:a0:c3:44:f0:a7:db:08:21:0e:af:
7e:61:0f:8a:63:4b:58:2c:dc:72:5d:f8:f5:ca:48:02:68:66:
3a:6b:a0:4b:8a:f9:94:1f:3a:8d:f1:b7:a5:07:a3:24:a3:0b:
bf:87:ce:02:53:49:c8:f4:06:df:2c:c6:25:86:91:fa:1a:31:
4d:3a:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:39 2025 by rpki-client