Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: 1T4ziJX1m/1y619gpnKpJ6j1YesAlycwrwnizhSHBaA=
Subject key identifier: EB:1C:42:DD:1A:30:5E:F9:AB:99:BD:CE:52:B7:17:65:E1:6F:97:C7
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 019A522C7532F05835C3C56D8A6A3267D9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 171D
Signing time: Wed 05 Nov 2025 04:00:36 +0000
Manifest this update: Wed 05 Nov 2025 04:00:36 +0000
Manifest next update: Thu 06 Nov 2025 04:00:36 +0000
Files and hashes: 1: JbdRe6gspuyUr7bBz3mmmXkbJJY.roa (hash: I/jfwNL3kM1nQFIjLIY24u2gVbQr34Ht1pkoJISzpKU=)
2: Sd9KABI9BM5Wi5AzQPJlcrl7nPs.roa (hash: lKvMF4u6rkezbu3Z5i73n84s97j8vHpTtirCLh73hlM=)
3: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: 4BreO9qSKCyWejo301pyjCg996+vt6UlYkjC3yqwo1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:75:32:f0:58:35:c3:c5:6d:8a:6a:32:67:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Nov 5 04:00:36 2025 GMT
Not After : Nov 6 04:00:36 2025 GMT
Subject: CN=eb1c42dd1a305ef9ab99bdce52b71765e16f97c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:b3:72:4d:27:aa:a9:49:07:49:82:ed:3e:
55:5f:42:f7:4a:36:63:52:48:25:ac:0d:d0:a5:87:
05:6d:f0:e2:7d:21:dd:67:6a:6e:21:f0:ab:c1:33:
d7:6f:e9:a6:77:05:b9:28:a9:1a:93:77:6e:9b:e1:
c2:ee:ed:38:93:82:56:c2:19:3f:64:d4:9c:97:7f:
72:ea:9c:9b:16:e2:72:87:21:54:f8:6e:5f:97:08:
c4:9f:17:1e:7b:5b:45:ea:ac:ac:11:25:6c:db:d3:
8e:d4:0f:3b:46:00:e9:78:8a:e3:77:ff:b9:ca:db:
89:a8:77:06:9e:da:94:a1:00:7a:f7:5b:cd:a4:26:
37:4b:61:f1:ac:87:ec:5d:68:d4:fe:c5:fa:3e:21:
38:b0:9b:e4:3d:f9:d9:a7:3b:f8:8f:1b:15:01:ab:
45:c0:fb:48:ac:bc:7e:c2:47:9c:35:26:cc:8f:8c:
8f:f0:98:1b:fe:06:e0:6d:90:37:95:fc:d1:a7:7a:
06:10:3e:ff:e8:95:64:ac:23:d7:94:fd:78:fc:eb:
f5:d1:7a:4f:c1:ef:1a:37:95:30:c5:da:39:50:d7:
9a:53:65:12:00:d9:19:22:54:03:91:95:2d:96:b3:
7c:bf:3d:08:a0:db:50:63:7f:6b:88:40:1d:43:9d:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:42:DD:1A:30:5E:F9:AB:99:BD:CE:52:B7:17:65:E1:6F:97:C7
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:36:02:57:00:e6:09:fd:9b:c6:9c:b4:6b:45:00:bf:52:84:
0e:61:2c:9c:22:09:06:bc:53:90:a9:b8:4c:36:ee:f1:08:21:
8f:a2:99:27:21:14:29:b0:cb:64:de:b6:04:f4:61:bf:1b:19:
3a:30:ec:da:8a:e5:b4:85:5d:48:b2:da:3c:49:b8:5f:67:50:
13:7c:2a:af:9c:62:cd:72:19:8f:db:8e:64:4a:02:9e:0c:3d:
85:06:58:4b:03:ab:1f:f0:ae:f5:df:3d:47:24:54:c8:81:fe:
88:9e:19:57:dc:95:0a:8b:66:d0:77:69:84:f2:b8:2d:8f:0e:
fd:5e:0e:48:7c:8c:67:0e:c6:ec:5a:b3:fa:5f:85:5c:af:4e:
53:9f:ef:d8:64:69:ef:cc:e7:95:69:12:11:42:b4:3a:e1:d3:
62:60:61:86:42:89:72:a4:27:1a:90:e8:4b:46:81:4a:a2:fb:
95:46:b2:de:12:36:6f:28:fb:f3:38:9d:55:bf:c3:48:2c:77:
bb:02:f0:b3:58:49:65:9f:2e:f4:71:db:74:06:b5:f2:c7:0d:
e6:eb:6f:03:d0:6e:43:ff:b8:a5:cf:c1:ac:f6:e1:6e:bb:63:
27:12:23:87:8d:18:04:39:13:0a:59:7e:7e:dd:aa:2b:78:88:
b0:f9:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:42 2025 by rpki-client