Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: VEL5EFifSXhLkqAgtVXgx7azAXRvzHFu1mYDe6+h7n8=
Subject key identifier: 51:25:89:61:EE:2D:87:3E:22:CB:22:73:F4:F2:3E:DF:8E:95:B2:E8
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019A52637B4D81EEFA2FE22C85F0982C87AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1726
Signing time: Wed 05 Nov 2025 05:00:42 +0000
Manifest this update: Wed 05 Nov 2025 05:00:42 +0000
Manifest next update: Thu 06 Nov 2025 05:00:42 +0000
Files and hashes: 1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=)
2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=)
3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: HBIYJjuurTTdPPXWl9/f6Yn13HD1c+3X9VRkLf5bvMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:7b:4d:81:ee:fa:2f:e2:2c:85:f0:98:2c:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Nov 5 05:00:42 2025 GMT
Not After : Nov 6 05:00:42 2025 GMT
Subject: CN=51258961ee2d873e22cb2273f4f23edf8e95b2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:1a:a0:26:b4:e4:e5:00:04:08:d3:d0:6f:
18:d8:23:c3:e3:f6:0b:d8:17:99:ae:71:d4:c8:c9:
56:f6:5a:b0:82:c3:36:5a:8f:e9:57:f1:ee:7a:d5:
69:4f:18:d1:93:aa:ff:84:b9:14:59:4c:46:81:78:
2b:08:75:54:dd:87:ac:42:71:ea:22:9d:65:7e:5c:
a2:e3:48:b1:6a:ef:e6:fd:9d:99:46:31:1a:bf:eb:
ef:af:c4:94:01:69:c0:69:ac:76:b9:10:27:db:3c:
31:2e:52:32:11:d3:e5:ea:71:0b:97:7f:b9:6c:23:
94:aa:79:a5:af:1a:85:be:5c:11:0d:63:1a:38:f4:
06:00:4e:1e:f0:80:ac:87:0c:57:68:6f:e2:bc:4d:
81:d7:da:b6:37:e6:10:01:0e:56:02:56:03:a5:be:
aa:6d:9a:38:4c:71:db:4b:05:8e:76:7d:66:99:e6:
69:47:4e:66:37:98:5e:c8:9b:8c:50:74:74:1d:2e:
d3:5d:40:3b:ca:76:9e:b3:ad:58:75:0b:bc:b5:de:
b4:a3:80:d3:54:a6:d6:10:13:4d:9c:c4:ae:80:6e:
60:62:b8:f0:a2:e8:9a:33:45:cf:57:e2:ae:71:8f:
b3:9a:5a:6e:0f:7d:55:70:5d:27:ad:01:ee:2c:ff:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:89:61:EE:2D:87:3E:22:CB:22:73:F4:F2:3E:DF:8E:95:B2:E8
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:19:0b:87:c6:88:b5:5a:40:5c:03:1f:3a:e6:90:dd:c0:8e:
5a:5a:7d:ff:22:0e:e8:e8:eb:78:0b:84:0e:92:63:89:2a:51:
d1:70:7a:a0:4b:98:d5:cc:b1:62:a1:22:27:e6:8b:fa:e2:99:
a5:de:f3:5d:78:1c:98:82:3f:95:69:ed:32:e1:ff:e7:c4:4a:
72:3f:b0:47:1b:73:73:7e:85:11:ce:d6:8b:5e:f7:dd:f8:2b:
15:a2:65:98:30:e1:82:e5:e0:05:37:01:83:9b:36:a0:e2:fd:
0e:e1:3a:3e:81:38:ea:c6:63:ae:f8:5e:e1:66:d8:21:ba:77:
d0:91:c3:c4:86:3b:cd:e0:47:c0:f7:d6:5f:04:62:64:96:c1:
ab:f4:41:12:9b:ba:b9:1f:1a:aa:7b:cb:7d:2c:9a:67:dc:05:
4c:ee:ff:0c:57:33:72:4f:60:f5:d1:87:de:8e:1b:e1:73:66:
f0:84:0f:8a:2e:a7:f1:22:5c:34:c7:e8:d0:7b:0c:84:30:61:
18:f8:9d:ee:ed:aa:1b:5c:18:b8:8e:13:cf:1a:c8:8b:1b:2f:
77:62:c7:a8:52:87:f6:9d:e8:2f:e8:ef:b3:2e:ab:bf:0f:16:
2d:f1:2a:80:f0:9b:a1:91:4d:40:3d:6d:2d:54:c5:0e:26:3e:
fd:dc:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:27 2025 by rpki-client