Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier: bIbJpx1oBDlFJ0ktGAEjD/C6orac8zWqyIovSTn2h+0=
Subject key identifier: 77:70:C5:8D:38:CD:67:DA:28:BF:FD:A8:7E:A4:39:52:A0:56:88:1C
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 019A4D3D43227FB07EEE3C43158BB3DDFCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: 8NHBHqLHpYM1RC7+ERYj34GqFWWTvXrrEJb4xMKEook=)
2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:43:22:7f:b0:7e:ee:3c:43:15:8b:b3:dd:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=7770c58d38cd67da28bffda87ea43952a056881c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:2f:17:31:b3:7b:eb:9a:58:ce:7e:58:40:
51:57:53:2f:52:7f:6b:8f:c4:fa:94:14:bf:98:38:
38:48:4b:88:f8:f9:14:df:47:0a:e3:24:ff:79:c7:
59:58:c1:9f:ee:36:e8:37:20:f9:70:fc:a2:51:b9:
36:9d:70:e8:f8:66:b8:7b:51:81:4a:a8:73:0f:96:
61:51:b1:b3:10:c5:8d:55:f0:d5:05:5a:25:ed:15:
1d:ba:b9:98:2c:05:83:40:bc:ac:21:18:e3:08:5a:
f8:43:1e:2f:67:bb:f6:9c:f3:a5:c2:46:51:3f:40:
d9:b6:d8:9d:58:0e:66:24:ae:27:82:5f:29:bd:ab:
d4:9d:67:3f:a7:56:c7:29:1f:06:82:f0:55:02:5b:
63:e3:31:7e:d2:c5:86:53:60:bb:8c:df:0e:24:06:
d2:c0:44:d2:12:99:01:5b:e8:be:22:94:87:01:71:
5c:fa:bd:03:37:e7:a1:dd:fc:0b:9b:fa:47:53:25:
ab:47:18:15:8a:be:ac:86:cd:09:81:16:7a:c0:d0:
47:7d:fe:cb:65:90:1d:42:9f:1f:2a:65:39:27:42:
0e:f7:22:46:72:ff:33:1d:97:e6:25:2f:b5:5d:14:
db:0e:78:1f:1f:1b:3e:0a:51:52:0f:4f:c5:80:a3:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:C5:8D:38:CD:67:DA:28:BF:FD:A8:7E:A4:39:52:A0:56:88:1C
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b4:3a:45:2c:6f:c3:1a:dc:f2:f8:be:ec:82:6f:cb:44:92:
b4:a8:f8:ca:05:b9:e4:92:fe:16:88:be:8c:2c:50:f6:70:59:
3d:b0:43:ed:ab:47:14:54:36:80:24:0a:d6:bc:66:35:19:9b:
55:52:cf:d1:b9:43:21:c4:88:cc:31:d4:9f:aa:c5:fe:a4:75:
3b:74:15:3b:63:20:71:08:51:cb:23:0a:4e:61:7f:0a:22:6a:
0c:d3:5f:9e:3a:46:43:44:04:8f:a3:1a:b0:f9:20:93:fb:64:
94:21:95:fc:f6:d0:1c:62:e2:86:33:85:63:4f:2f:5c:0a:e8:
21:ae:75:b6:88:7d:a7:d3:d2:6e:d9:a8:32:11:7d:f3:76:a2:
a6:ce:40:d1:d0:44:03:13:3a:64:7b:cf:2a:e2:b1:22:34:ee:
9e:3d:4b:b2:f6:fe:c0:8a:f9:3c:9e:59:66:04:9f:0b:80:be:
6a:da:4a:36:89:c0:38:ec:40:dc:34:6b:89:e9:07:ac:17:ca:
29:09:d0:7f:2d:1c:5c:93:93:44:68:b2:2f:d3:b8:b5:2d:e4:
04:8d:16:02:e6:9e:4f:9e:b5:1f:7d:31:1d:53:6d:eb:d2:dd:
e2:c2:2a:df:76:0d:24:c6:9c:e9:76:d5:41:c9:60:be:e3:8b:
0a:d4:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client