Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: 03tHpnqoiuicgPDtC07iyp7LPnLIw1XW9H4EoDr994E=
Subject key identifier: E4:B8:73:2F:80:C0:83:1E:54:6F:2C:78:41:6F:64:E5:4B:09:A3:F5
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019A545153E9B50556B15A91F9E38960DD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1727
Signing time: Wed 05 Nov 2025 14:00:06 +0000
Manifest this update: Wed 05 Nov 2025 14:00:06 +0000
Manifest next update: Thu 06 Nov 2025 14:00:06 +0000
Files and hashes: 1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=)
2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=)
3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: qpBwxyU/biz4B7jz6NsCsG2f7vWPQE2GkQ220kN5Dh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:53:e9:b5:05:56:b1:5a:91:f9:e3:89:60:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Nov 5 14:00:06 2025 GMT
Not After : Nov 6 14:00:06 2025 GMT
Subject: CN=e4b8732f80c0831e546f2c78416f64e54b09a3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:7f:d0:f6:36:40:d0:fa:97:c9:44:1f:7b:
b9:d2:6e:34:26:7f:d8:0c:d4:6b:1c:9e:9f:13:4c:
60:43:2f:86:24:74:f9:fe:84:6d:e5:6a:aa:4d:25:
04:e3:e6:a3:d4:cb:b5:e8:4e:eb:2f:ce:75:fe:a7:
05:16:e1:2c:12:ad:54:a4:e1:87:54:78:fe:bc:f6:
19:de:bc:0e:e3:6e:8c:bb:54:2f:94:cf:2e:89:53:
34:6c:fd:09:f3:7c:d2:a3:32:f8:07:b0:23:ab:59:
e7:a4:25:05:ea:24:8d:12:46:0b:58:c9:88:8e:d9:
3b:46:d8:3b:7c:f0:f0:e3:03:6a:68:e9:2f:55:81:
5b:e4:c4:a5:5b:ba:2e:08:cd:5e:8b:58:d2:3c:be:
36:2e:26:13:9a:a5:c4:90:b1:90:05:bc:e8:e8:88:
53:46:ff:bf:ab:4e:ac:c4:62:8b:17:b0:8c:5f:aa:
c0:17:3a:a9:83:fb:ae:b4:bf:86:d8:bf:08:6c:d4:
d2:8e:f3:e1:5b:c8:65:f6:f0:2e:f6:f9:02:f9:0f:
80:ca:6d:04:e7:72:3f:96:ae:66:8a:1f:9d:b6:b7:
a9:18:68:06:7e:85:2b:78:f6:65:96:ee:2c:24:bd:
ef:4d:09:8a:a1:4b:8a:1b:85:81:1c:39:5c:96:d0:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:73:2F:80:C0:83:1E:54:6F:2C:78:41:6F:64:E5:4B:09:A3:F5
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:db:b7:14:06:7b:2f:bf:53:25:bd:31:27:8e:94:39:e9:b5:
c5:33:bf:24:e4:16:30:1a:08:c3:b1:b1:38:4f:56:8f:f0:6a:
2a:55:6b:21:b7:6b:d3:77:dd:e0:1d:7a:4d:70:48:43:72:66:
56:3f:51:29:53:d0:22:41:8e:fe:96:42:75:67:e9:5e:cf:cc:
2a:4c:b8:c9:49:ec:dc:1a:95:59:81:bd:95:cd:b7:f1:f8:81:
f8:cf:72:c5:8c:43:60:f5:22:a4:63:8d:26:fc:c8:2a:9c:e7:
d9:27:3f:f6:fd:e3:e4:e7:98:aa:aa:7e:e6:ba:c3:f3:d4:26:
8e:bb:75:8b:1e:37:7a:84:20:fa:1b:7f:89:48:fc:68:c5:63:
6e:f6:cc:ec:49:88:c0:b1:9c:b3:66:09:8c:df:0d:90:3b:e3:
01:04:5f:5e:0f:9f:5a:d3:84:22:74:b6:2a:12:56:b5:1d:38:
c6:54:c5:3e:3e:a3:bf:cc:46:69:aa:f0:af:16:20:72:ff:07:
5c:2e:47:dd:c7:b2:87:f0:ea:b0:aa:1d:71:77:3a:42:23:4d:
9b:18:a6:f5:ac:fa:4d:ff:66:95:53:b8:75:32:b5:e5:a4:54:
8f:57:03:5a:ad:9b:60:78:23:1d:3e:c4:de:54:e4:e3:ab:19:
2e:10:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:04 2025 by rpki-client