Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier: 4x+nyJ7fj4DN9xgWeULjFyRTkIG+U20gGKgCQhC0nvM=
Subject key identifier: D8:5F:57:C2:DE:A5:79:92:3D:57:13:F6:CA:E1:90:56:11:84:B7:78
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial: 019A4F2B95CCB10FC4FE4FF63A0AAA373B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: Nu8Vhux9rnNx+9OxeJbwXA4nPgWR6cHYNt3+S4gkmj4=)
2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:95:cc:b1:0f:c4:fe:4f:f6:3a:0a:aa:37:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=d85f57c2dea579923d5713f6cae190561184b778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:63:e1:59:79:15:bd:97:d4:59:79:d3:db:
a2:8e:72:78:06:67:8f:0a:67:02:89:12:f9:38:79:
e2:31:ec:c6:6a:80:9c:ba:27:e3:c7:63:b7:be:17:
5e:01:09:bd:9e:a1:0e:8d:01:bf:4f:80:07:9a:63:
13:1e:da:77:a8:fa:19:29:d3:b7:5f:5f:00:22:c6:
53:06:e2:f4:7b:d8:2b:d7:50:7a:1c:1b:77:be:b2:
e7:2d:d9:42:08:e8:73:2e:f8:b9:f9:21:99:f1:c9:
8a:17:40:3c:d8:a9:e4:44:69:7b:40:16:f1:87:1a:
c2:1d:f3:60:3c:3f:32:55:2e:52:2d:ca:c5:4f:21:
95:ea:55:ba:e4:9b:cc:08:67:94:54:8f:56:a5:31:
d2:36:6b:09:b7:ed:34:06:37:cd:a8:99:20:57:dd:
96:29:a7:62:20:68:22:0b:a2:80:79:d3:54:69:72:
73:c3:57:a5:b6:1e:3e:c8:83:de:d4:ab:5c:51:6c:
b0:18:cb:de:6e:78:cb:fb:9a:b5:47:30:ff:00:d9:
80:80:1e:b1:7f:55:c1:53:16:a0:98:8b:80:6a:1e:
07:10:54:a4:58:e9:dd:d2:0a:2a:89:e1:85:8c:57:
18:15:d8:a0:7a:c3:ed:bd:9e:fb:fa:4a:b2:db:9e:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:57:C2:DE:A5:79:92:3D:57:13:F6:CA:E1:90:56:11:84:B7:78
X509v3 Authority Key Identifier:
keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:5a:0a:c8:ad:58:d4:fc:4b:60:d7:23:7e:5e:e0:41:48:ca:
22:7f:58:bb:41:79:9c:4e:ad:20:4c:fd:66:46:a2:11:f0:9b:
75:eb:31:28:7f:e5:7f:04:85:4b:2d:49:3d:bd:64:6f:b6:1f:
6f:a7:e6:03:a6:3a:c2:ee:4b:dd:94:4b:4f:0c:4e:23:ef:93:
8a:f9:ee:e2:17:e5:32:70:68:11:5f:63:e4:8a:bc:a6:c0:62:
d7:97:af:60:5d:bd:2a:34:08:94:b5:46:95:a8:de:a8:1e:d6:
07:09:85:18:13:2f:c2:16:aa:4d:b6:66:62:7f:6f:8d:8d:71:
76:a4:70:47:3a:2f:64:a1:cd:ca:5d:d5:ba:e4:77:10:77:2a:
92:27:4b:30:c4:7a:87:58:ee:04:4b:5e:58:3b:2a:5d:bb:7d:
ff:8e:18:38:d7:e6:58:6c:56:62:a5:89:c6:23:8a:3c:a6:55:
5a:6f:27:b9:26:ef:33:52:27:2e:91:57:eb:5e:9e:ed:87:43:
62:a3:28:64:8c:44:af:d4:fd:b8:c6:7b:60:6b:c4:3c:a5:61:
70:cd:d9:3b:e6:ad:5d:f5:fb:fd:64:2c:1e:e4:5c:16:aa:90:
8a:5a:ea:33:ed:0c:36:0c:f4:cc:52:61:60:6e:3e:12:a1:da:
67:af:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:48 2025 by rpki-client