Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: 2JT3UN1KivbTRHy2MWt7CeXncKS/a4zGEqIt9PuaMkU=
Subject key identifier: BA:BC:41:5E:C0:E1:CB:E4:37:85:95:40:C2:76:0E:C4:9C:B7:84:2F
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 019A50E36FCD6D1CC99601ADC07A7CBDEA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:13 +0000
Manifest this update: Tue 04 Nov 2025 22:01:13 +0000
Manifest next update: Wed 05 Nov 2025 22:01:13 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: vMMpCQCD0FpBgZ67SC73bVd90+cCrU/zSXZaMv2WshI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6f:cd:6d:1c:c9:96:01:ad:c0:7a:7c:bd:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Nov 4 22:01:13 2025 GMT
Not After : Nov 5 22:01:13 2025 GMT
Subject: CN=babc415ec0e1cbe437859540c2760ec49cb7842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:30:60:6a:0e:32:5b:5d:6b:43:6b:14:67:
72:38:34:0f:15:e0:18:c3:3c:c1:08:65:ad:44:ac:
6a:14:33:6a:7e:b8:94:47:8c:be:af:65:d0:9d:72:
59:ec:e0:60:fe:38:14:7c:d4:24:b7:84:04:82:8d:
97:ae:5f:1c:fb:89:90:3d:d6:9d:8d:6f:07:da:be:
cb:aa:e5:85:d2:f6:36:24:2c:0d:e4:63:35:ac:bb:
83:54:63:e3:57:65:01:be:a5:b1:4a:79:cb:c0:d9:
2a:9a:34:e8:56:dd:2b:66:19:e1:4c:f9:9b:98:2f:
ee:41:3f:cb:48:b6:f1:0c:7e:06:32:b7:40:ba:e7:
eb:dc:9a:c2:86:5c:ce:ae:c4:fa:6b:eb:c2:7a:84:
77:12:5e:36:ff:84:3f:8c:09:ad:1d:f4:0c:7a:76:
8f:84:a6:60:f8:fd:96:d2:17:dd:89:c6:f6:0a:d9:
3c:61:6f:13:00:fe:59:5e:37:6f:53:2b:8e:e8:e9:
80:18:7d:e4:ef:16:a1:a7:06:3f:5b:5f:e3:61:dc:
05:ac:59:02:5e:e4:0d:99:e4:85:05:ed:0b:52:bb:
c8:e1:47:d2:1a:4f:e2:75:c5:d4:aa:94:be:53:9d:
a1:fe:7a:1b:be:39:15:4e:31:5f:97:68:87:a0:c9:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:41:5E:C0:E1:CB:E4:37:85:95:40:C2:76:0E:C4:9C:B7:84:2F
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:ca:09:94:e1:de:02:f5:8b:10:9d:e0:2c:20:c0:f8:78:
04:04:17:28:92:e8:a6:85:77:4a:a3:53:d1:be:31:7f:0a:8c:
39:1f:db:bb:8a:b8:40:cb:73:b9:a4:d2:45:ff:09:f1:34:22:
49:08:9d:31:0e:15:5c:8f:e7:ac:0c:96:97:c8:ac:f1:1d:2f:
cc:72:14:56:29:53:90:3d:87:a8:9c:bc:04:a9:68:db:9a:f8:
73:84:b7:69:17:de:5a:da:39:ca:9f:bb:c9:e2:33:b0:2c:38:
bc:04:c6:df:b5:4a:6c:6c:82:d2:5d:95:f4:f8:57:ad:fb:f6:
6a:93:72:12:22:af:76:8d:61:23:2f:9b:0c:a1:a7:06:da:68:
23:1c:ec:ff:c2:27:c1:d2:1a:6f:ca:54:14:24:5f:82:94:1f:
75:22:fe:35:62:05:58:f0:30:b8:e3:c9:79:9e:9d:dd:39:7f:
94:fa:7d:96:85:ba:9f:16:ec:e1:c2:c7:69:e2:0c:b8:64:42:
70:32:73:27:2c:66:22:69:62:98:2f:70:1f:75:c9:9b:33:69:
05:31:ad:7e:b0:11:bc:6d:03:2e:99:f7:de:87:02:96:4f:dc:
0e:f1:18:bd:03:f5:9a:05:7e:45:ca:d9:3a:0f:b3:db:69:19:
35:22:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:00 2025 by rpki-client