Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: 7P8H7FizXvi3lHLH2slSjVL8gR+v3HkP1ZNwkbscpB8=
Subject key identifier: 60:5C:13:21:21:CD:04:F7:6C:D4:70:18:EA:67:E0:C9:D4:07:0A:B2
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 019A54BFB569732DA7045CB44B5570DD3299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0EAB
Signing time: Wed 05 Nov 2025 16:00:41 +0000
Manifest this update: Wed 05 Nov 2025 16:00:41 +0000
Manifest next update: Thu 06 Nov 2025 16:00:41 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: QXI8+voFyz4sRodglDMZjP2p8mUf7gaA04LiIWEoyeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:b5:69:73:2d:a7:04:5c:b4:4b:55:70:dd:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Nov 5 16:00:41 2025 GMT
Not After : Nov 6 16:00:41 2025 GMT
Subject: CN=605c132121cd04f76cd47018ea67e0c9d4070ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:e5:e4:44:d3:e6:5f:0b:02:e6:ba:98:85:
7a:e9:44:89:3a:12:44:f2:69:3e:4f:64:a0:bb:34:
20:63:f0:2a:f8:01:f3:ff:9c:12:56:bf:45:48:7f:
7a:cd:a6:f4:d4:2b:34:56:aa:4e:f3:02:58:d9:f5:
0e:a3:2f:f0:5e:13:f3:40:2c:1f:e1:a5:b2:36:81:
5d:1f:1e:27:c1:ca:3d:fa:17:92:be:6b:25:e1:7b:
35:72:ef:36:3d:ca:41:b0:52:7f:59:4e:d2:95:f1:
67:85:db:a0:c6:92:39:93:1a:9e:08:5c:3a:59:90:
98:2a:60:34:cf:35:e6:ec:8f:2b:24:01:4a:ad:54:
69:2d:cc:7e:89:6a:bb:7e:61:e9:84:25:2f:c1:9d:
f9:44:fb:a7:b4:9d:53:19:83:82:bb:67:89:ff:82:
71:b5:9e:b4:1d:2b:e2:14:08:41:93:cf:a3:f7:70:
dc:f1:75:20:fe:b2:ed:eb:98:be:af:78:89:9d:66:
4b:2a:2c:ab:9a:08:17:dd:51:b8:f1:18:ef:33:13:
56:b3:5e:ed:63:b7:c5:7c:16:ae:94:6a:32:9a:ef:
63:8a:42:aa:78:d5:0f:c0:ed:05:a3:40:6d:9e:60:
34:bb:ec:6c:30:de:26:e6:48:95:39:d6:95:55:da:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:13:21:21:CD:04:F7:6C:D4:70:18:EA:67:E0:C9:D4:07:0A:B2
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:19:34:85:04:21:00:23:c2:19:b9:1f:f5:fa:75:48:7c:f4:
58:cc:33:09:18:dc:8b:1f:35:32:5a:9c:4f:b4:6f:7c:d1:1d:
66:b4:ce:31:75:b1:f7:72:a4:d1:0e:bd:06:ca:d8:81:0a:f0:
b4:85:1c:0d:fe:80:c5:e1:fb:c3:5e:f2:8e:67:fe:d2:e9:20:
96:83:88:67:1f:aa:ef:9b:50:31:1e:9a:23:e3:d7:02:4b:fb:
a4:6e:9b:0b:9e:b0:68:7b:1d:df:37:70:2f:c9:e6:72:de:af:
ca:77:c8:ce:24:35:d5:26:e2:19:a6:d7:08:34:a0:21:e9:cd:
17:82:67:54:1c:9c:a0:50:0c:d6:4d:1b:b4:40:4f:58:eb:9f:
07:27:14:95:3c:c2:1f:60:ea:5c:83:21:22:fc:3e:23:06:69:
6a:81:9f:27:94:62:d4:05:f6:46:e0:f1:94:93:d5:f0:44:ec:
05:95:28:90:98:35:5c:8e:c3:d2:dd:44:66:c9:f4:00:31:6f:
86:b8:ea:b0:78:c3:48:e3:49:08:76:03:5f:9a:fa:13:21:c8:
f4:8f:dd:64:55:d5:33:82:72:11:3a:19:f4:97:80:5c:41:2e:
24:f1:06:2c:30:34:21:20:01:57:dc:92:d9:34:46:80:40:96:
08:92:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:07:15 2025 by rpki-client