Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier: Shy1seGvc/RiPn9UP0xQIzahVNpVk8IXaHgfliUss64=
Subject key identifier: DA:32:F4:08:77:10:F8:71:98:25:02:67:98:F5:50:F3:D7:CE:A3:A9
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer: /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial: 019A4F2B4AB4F57E4316F5EF01D8F272B619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: dEs1JFf1hPDx5FwieiBrWRIXhXApOuWXYyXZAhyuPrw=)
2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4a:b4:f5:7e:43:16:f5:ef:01:d8:f2:72:b6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=da32f4087710f8719825026798f550f3d7cea3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:19:22:8b:6d:d9:17:87:b3:a9:83:4f:71:
5b:08:62:af:3c:bd:4c:d7:b7:59:48:0b:78:e4:2d:
03:5e:b1:cc:67:f9:46:5b:6a:ac:0c:81:54:c8:4b:
47:af:f0:d2:19:a4:25:f5:ed:b6:70:fb:1c:25:02:
c0:7d:0f:a2:32:5c:54:af:4f:8e:50:8b:a4:ff:a6:
07:07:f8:94:47:f2:9c:72:ff:53:77:88:d9:e7:2f:
76:23:ee:43:ef:a6:f4:a4:4f:1f:cf:60:df:2c:65:
a5:46:d8:86:a0:69:8c:0e:71:54:27:50:a4:c4:cf:
c4:1a:1f:b1:64:55:ec:66:35:44:27:4b:7b:2a:a8:
5c:31:ad:bb:66:7c:23:bb:f6:67:77:30:bf:09:04:
d5:dc:2d:fc:6d:e6:0a:0b:d5:bb:09:de:f1:8b:96:
0d:33:4f:ab:1e:d9:11:43:33:ab:6b:69:96:9d:95:
76:91:cf:79:83:01:ce:f2:92:05:b8:5d:cc:95:18:
8f:7b:99:a7:92:0c:58:cb:63:89:ba:2a:81:b9:eb:
1f:0a:1b:37:75:6a:2b:20:2c:ca:0f:2d:b9:ca:ba:
8a:6c:33:2d:e8:1f:20:c6:30:95:fb:44:07:76:31:
9a:04:ec:37:fd:d0:35:bb:2b:cf:a2:24:c0:05:98:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:F4:08:77:10:F8:71:98:25:02:67:98:F5:50:F3:D7:CE:A3:A9
X509v3 Authority Key Identifier:
keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0e:1a:f7:98:92:49:18:3f:23:d1:b5:24:f2:03:f3:4b:b4:
75:89:d6:d7:60:c8:bd:2b:06:0e:4c:91:06:ac:68:25:f5:12:
da:d8:84:97:83:0b:f9:91:ed:99:7d:72:4e:04:27:ae:93:39:
79:d1:92:70:ad:19:38:dc:b5:d1:c4:00:93:a1:63:42:85:6a:
fa:1c:e2:f2:f0:1e:5f:fc:42:2a:68:25:f6:25:5c:16:40:b7:
0d:c7:a2:4c:53:bc:8f:34:61:28:a1:1e:02:74:f7:a3:aa:56:
a9:f1:f3:c6:4b:ea:f6:00:05:98:96:5b:a0:d1:47:eb:da:c2:
e7:0e:57:57:80:09:2b:60:b7:98:19:aa:51:6e:71:ea:fb:36:
d6:80:4e:a4:b2:20:92:f9:8b:c1:df:dd:6e:b6:44:7c:f7:38:
21:71:66:03:52:ae:40:f4:e3:ed:d0:e2:3d:99:6c:ae:b7:06:
f5:55:19:21:32:25:65:39:e3:c8:c5:d3:ed:14:72:8e:97:90:
31:37:b2:e9:53:fb:48:00:4c:bc:78:5b:a1:8c:66:9e:49:04:
07:61:f7:7c:9f:c4:77:20:87:eb:8b:c9:c3:15:ea:33:dd:d2:
af:c9:7b:23:ab:10:0b:9b:ef:fc:c5:b3:0f:3b:33:d0:83:88:
2e:14:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:28 2025 by rpki-client