Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: Z/uKFR0TOsgMsnu/COiUvvcL4hHSykIJOFRUnQF02B8=
Subject key identifier: E3:AD:81:07:0C:22:4E:43:B5:2B:C3:11:0B:F0:63:54:1A:68:19:A0
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019A4DE1A3A46BF40BD7B981365F650EE507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: LqA7Eu6GRuX04LJBZb1QqFDSicCFQvp7iJNycWNWFtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a3:a4:6b:f4:0b:d7:b9:81:36:5f:65:0e:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=e3ad81070c224e43b52bc3110bf063541a6819a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:10:89:5f:0f:e8:a6:54:49:57:51:74:e9:
0e:dd:c1:af:c5:b8:c6:ac:ff:d7:fc:6c:43:16:2a:
03:72:ff:a7:a7:23:e1:4e:34:d2:21:19:ef:5c:4b:
3e:d3:11:a6:ff:1b:81:92:c6:97:90:ee:1a:0d:f7:
9e:72:e9:15:69:70:02:4e:91:87:c7:ab:bd:f6:3c:
54:4f:84:dd:4b:0d:63:34:b6:99:b7:89:64:e4:0c:
37:8e:0f:51:18:76:a4:46:d2:6e:32:66:54:df:d5:
b7:0d:61:49:71:9c:b9:94:ba:4a:8f:05:85:34:1b:
68:44:56:81:cf:43:13:79:c9:a7:60:6b:7d:86:e9:
2d:0c:19:24:04:48:ed:04:bf:a6:81:41:ce:29:83:
e2:8a:2b:ed:81:5b:c8:21:ed:ba:11:d1:27:76:84:
4b:43:2b:20:9b:cd:38:38:05:51:b8:1e:7f:e2:a5:
1a:cc:4e:c1:f4:ec:7f:f0:99:5c:26:17:f9:9b:e1:
26:ea:6e:59:40:1b:a2:62:9c:a4:a6:fa:e4:e7:31:
2b:fc:d1:72:dd:0e:47:ca:ed:71:c3:24:b0:24:70:
f7:34:77:2e:5a:bc:ef:cf:2e:4d:f2:4a:e7:ac:96:
71:3a:d0:42:4b:51:a6:70:d6:68:f4:c6:f8:c5:b4:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:81:07:0C:22:4E:43:B5:2B:C3:11:0B:F0:63:54:1A:68:19:A0
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0f:9e:83:dd:10:6b:eb:57:94:9c:dc:cd:d0:51:c3:95:a9:
69:ac:82:d9:09:01:09:70:b8:c5:4d:6a:88:18:bd:8e:13:28:
65:d2:29:1a:0f:23:20:78:7c:50:0b:d2:b1:27:73:32:6a:65:
73:34:6c:e0:6c:fa:77:e4:1d:54:24:4e:8d:8c:06:07:f6:69:
68:9d:2a:0d:7f:09:7f:d9:e4:60:92:33:3e:d6:95:4b:dd:fd:
3b:24:72:e1:be:6c:69:32:e7:86:ae:00:69:7f:ea:61:f7:49:
a4:37:2a:2f:c3:ef:16:58:cf:5e:60:b3:fc:82:71:56:f7:db:
75:c5:08:d7:91:c0:b6:1f:06:64:bd:d9:36:5b:8b:12:59:19:
75:bf:d5:cf:61:05:19:1d:68:d4:5c:7d:fa:8b:c4:04:b4:fe:
65:00:d2:44:c2:35:98:a1:64:34:0f:f9:08:b2:ed:41:78:7b:
31:ef:8e:eb:d5:3a:79:89:e5:b9:08:6d:21:12:a0:61:78:3b:
a0:9b:10:ad:fd:b8:fe:d2:3d:8e:0b:8c:c7:db:99:5e:cb:ff:
29:38:e9:b1:22:55:d2:ca:03:22:89:9e:61:60:b5:17:f7:48:
13:9b:ab:4d:68:8e:57:ce:59:09:ba:ed:26:a8:ac:07:6c:db:
49:e5:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:33 2025 by rpki-client