Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: 3z/xH3QwH3pUi0E3KORG/YvFPvEaMRFachdan6nu02g=
Subject key identifier: 65:9B:5D:46:8F:7D:66:C2:1C:C8:39:47:AE:D1:C1:40:D3:23:AB:8D
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019A4F624B84ABA78228D5DE2FB7C2A5BFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:00:32 +0000
Manifest this update: Tue 04 Nov 2025 15:00:32 +0000
Manifest next update: Wed 05 Nov 2025 15:00:32 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: AOh+W3kZip2tzooDxgSqVHSK0Y1IMIq6/8T9okHBW40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4b:84:ab:a7:82:28:d5:de:2f:b7:c2:a5:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Nov 5 15:00:32 2025 GMT
Subject: CN=659b5d468f7d66c21cc83947aed1c140d323ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:c4:00:41:67:7a:62:b2:8a:c5:33:35:2f:
c8:cc:02:e3:1a:77:78:c4:c8:e7:ad:86:c3:a0:27:
61:6e:dd:d9:44:b5:28:64:4b:e1:a3:94:9c:72:e9:
e3:dc:c8:c1:2b:06:93:d9:d2:ff:dc:0f:45:61:77:
8a:c4:ad:13:e3:49:f1:95:b4:26:51:91:cd:8c:45:
04:2a:22:bd:67:dc:49:0f:f0:4b:78:de:38:e3:fa:
dc:bc:3a:22:e9:cc:01:1d:0c:0d:db:ae:94:97:ba:
55:23:74:0a:97:eb:78:27:e9:a1:af:8c:13:56:c7:
86:f0:62:fa:b2:73:a0:c9:6d:a2:d9:e4:4b:69:57:
df:9e:b8:09:7e:2f:93:9d:4a:ab:d9:52:33:90:96:
00:08:30:2d:e4:cc:d9:a0:26:62:98:c7:da:fb:ff:
be:38:b2:b2:fc:67:77:a6:7d:91:65:88:a9:d0:dd:
bb:56:1f:ac:d0:bf:81:be:46:bf:53:da:ee:03:ac:
65:7c:a0:9a:bc:3d:04:0c:6d:f8:3b:02:2c:a5:9a:
ef:ab:b5:2f:0f:5e:f1:f2:8f:a2:4a:57:2a:6a:bf:
2b:f5:6c:63:60:c7:3b:81:87:92:a8:16:10:a1:53:
67:c1:a1:e8:91:54:0f:49:1c:f1:d4:17:25:49:23:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:5D:46:8F:7D:66:C2:1C:C8:39:47:AE:D1:C1:40:D3:23:AB:8D
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:2d:c7:74:70:fa:14:62:3e:43:e4:70:5d:8a:81:c5:48:
b0:ec:4a:6b:78:a5:c2:1c:ff:73:46:38:84:35:7c:18:82:dd:
3a:05:04:51:ff:c1:19:1b:f1:e2:81:5d:2c:07:73:83:7f:1e:
ef:f2:ea:e7:fc:4c:4d:3f:c9:e0:3f:42:a0:ed:be:db:19:fb:
4e:a7:2c:9f:b2:a4:4a:fa:14:2b:51:1c:90:36:24:9d:e1:72:
c2:66:ab:f9:ee:b1:36:77:c8:e2:35:12:39:f4:2e:1c:a9:9d:
7a:cb:7c:a6:aa:fa:4a:de:e0:47:f9:ee:f7:fc:64:23:6b:c1:
67:56:71:53:85:a9:ff:e8:30:1e:a0:d4:b4:be:4d:e5:8f:cd:
d7:18:7d:22:66:5c:54:a9:88:d5:e6:6d:01:6c:ca:dc:41:80:
7e:e6:81:2e:51:8a:e0:95:91:de:71:65:2b:01:44:1b:5b:25:
68:bf:cd:71:37:da:aa:5e:44:d9:59:e4:2a:e7:8d:13:31:e1:
7e:2c:5b:f5:f4:4f:a0:84:17:02:e1:f2:88:d8:bb:49:11:25:
09:86:c1:74:89:6f:6c:a5:a4:34:15:26:cb:d8:77:ab:46:47:
04:4d:71:fd:2c:4f:c3:f5:37:27:04:ca:5b:e3:d5:7c:0d:80:
1f:5c:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:21 2025 by rpki-client