Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: 2FPnvso6aqgFIDwUiK+rZlo8FP0sx0Z67SIW+lQAvFg=
Subject key identifier: 4E:63:BF:26:35:BE:69:91:23:BA:B3:DA:2D:03:37:86:50:29:4E:1B
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019A4EBD4CD5A21325FA934872A3E1372667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 0711
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=)
2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: 4CbhEG7UM7qtwEPVgWTK+I9T77enVVdT1Xwx1gfW4TU=)
4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=)
5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4c:d5:a2:13:25:fa:93:48:72:a3:e1:37:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=4e63bf2635be699123bab3da2d03378650294e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:e1:b5:a6:28:91:bb:0f:b4:c7:51:7f:7e:
52:6d:0e:54:c5:ba:48:09:94:e6:d4:86:8f:69:a4:
66:21:99:31:d6:89:ad:92:1a:92:e2:7a:12:20:55:
1a:56:ca:5e:ae:5a:bc:12:65:64:e1:42:21:4a:e7:
42:cf:0e:6d:25:ec:5f:bf:1c:19:77:cf:bf:9f:70:
ca:0e:ec:0d:03:b4:03:bc:40:10:ef:aa:4d:5c:32:
4d:48:fc:4a:2f:f9:76:62:62:7f:8a:e1:4d:f6:64:
7b:4d:99:07:aa:01:27:ce:39:5d:96:43:a3:c5:3b:
2e:aa:1a:a7:e5:a0:3b:11:5e:4b:71:a2:4d:d2:d1:
e8:a3:0e:ac:9f:28:39:37:fe:c9:3e:cd:62:25:94:
c0:ad:75:11:e4:7e:88:30:9c:b3:cf:4c:c6:88:df:
f7:38:29:14:f7:a6:07:10:ca:6f:a7:68:fb:f2:78:
8b:36:23:dc:3b:ee:0c:37:f2:f3:bb:79:fd:23:d7:
91:f5:02:71:0f:26:3c:3c:49:8f:9a:49:e5:72:88:
09:95:da:f6:e9:7c:24:76:75:bb:20:d4:60:c6:b6:
81:cd:cf:a2:78:c9:18:bd:d4:62:4f:56:80:c7:ec:
a8:f5:0b:27:33:43:74:a4:30:3d:3d:e0:e4:98:77:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:BF:26:35:BE:69:91:23:BA:B3:DA:2D:03:37:86:50:29:4E:1B
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:58:ec:3d:a2:5a:7a:0f:d4:07:bc:b6:b4:96:e9:a5:a4:7b:
0c:d0:ae:40:58:86:f9:0d:07:3a:47:bd:2f:29:97:a2:f1:81:
0a:ab:dd:c0:59:13:33:4d:3f:3a:52:c9:d7:02:46:8d:22:de:
f8:4c:00:91:64:05:47:af:1f:c2:aa:52:25:5c:ec:ec:16:44:
88:38:90:41:40:21:bc:eb:6b:64:82:2e:96:36:fa:b3:55:36:
e5:c1:3f:77:6c:bc:bb:8b:ea:d1:6c:28:9c:4a:90:15:73:36:
58:0a:f3:e6:da:b4:f4:9b:05:6c:77:dd:4c:60:5f:3c:eb:e0:
27:ca:f3:c7:68:1e:a6:c7:7a:6b:56:54:13:38:db:0f:3f:8e:
e8:cf:d2:e5:8c:c6:01:2e:61:7b:95:50:9c:d7:eb:de:e0:15:
1c:33:c5:a3:60:d6:ae:3a:13:f2:84:86:f2:de:9f:a0:bc:e1:
98:67:ef:69:19:f9:41:b7:6e:2f:77:88:3b:11:b9:72:a7:1c:
ff:f3:09:20:76:48:fd:3f:d3:57:d5:ce:de:95:a0:a3:f5:20:
9f:bf:cf:4c:ff:81:a3:f9:ca:d4:35:20:9b:3a:47:32:8f:8e:
0a:59:3a:15:a3:a8:34:f4:a3:8d:65:88:5c:f2:1e:f5:97:f1:
b0:a8:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:43 2025 by rpki-client