Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File: e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier: Tu4jIl5FHqKMLYdv1jPmmbN5Q/DzuOWgyWOD/C/ejOs=
Subject key identifier: 48:FB:C9:B3:8D:E1:0D:DF:74:B5:5E:6C:91:E4:A6:D3:91:44:0F:90
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019A5074A2B94F6AB4BF6DF07F599FB27B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
3: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
4: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: 0t+B+Emp5He59LeULwUR/tcZhf3m4uz41cQdwvJGJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a2:b9:4f:6a:b4:bf:6d:f0:7f:59:9f:b2:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=48fbc9b38de10ddf74b55e6c91e4a6d391440f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:b8:8f:f8:be:32:3c:13:61:27:55:aa:24:
50:9d:dd:81:89:3f:b8:01:ac:89:9a:72:12:9b:47:
e7:fc:4b:34:99:2a:30:52:0a:0b:f9:28:c7:82:3e:
19:12:e6:c0:5f:a9:0c:ba:c9:74:79:5d:79:30:1c:
dc:09:05:d4:08:55:9e:89:50:71:93:bd:8f:5c:b8:
97:b9:44:04:f2:10:92:b3:39:c9:0a:01:43:86:82:
cd:6c:fd:f9:39:c9:a1:81:e1:fd:d5:f1:58:bc:6f:
90:bc:a1:d2:fe:c1:08:c0:3b:5f:c8:64:02:2c:a1:
17:50:a0:7d:79:b5:dc:9b:10:eb:11:ec:5e:ce:57:
dc:65:92:6a:b2:25:d3:c1:11:48:f1:2c:68:59:8d:
7b:6d:e8:7c:24:47:7e:88:c6:ad:b9:c6:59:fd:4d:
30:76:48:35:e9:88:fc:ae:0b:ce:d4:ec:51:08:0a:
b2:9f:61:0b:f9:3e:fa:2e:64:ce:e4:f4:e6:90:d2:
86:b0:1c:dc:92:63:c3:74:35:ff:6f:f6:13:44:99:
d9:08:30:5d:83:e6:c0:2f:15:35:3a:48:ac:4d:f6:
d6:71:6e:eb:20:0f:d9:f9:e1:04:fd:a3:7c:77:1a:
0a:af:de:b0:04:4e:4f:92:14:b3:43:4f:50:dc:7e:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:C9:B3:8D:E1:0D:DF:74:B5:5E:6C:91:E4:A6:D3:91:44:0F:90
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a2:f3:f6:f7:5d:cd:c0:d0:67:66:4f:b7:87:8c:34:d8:a9:
71:f8:c6:31:48:a8:01:84:83:8a:4d:e0:52:07:e3:72:f4:16:
8d:d4:87:c6:bd:0f:c1:5a:2c:34:e4:4a:1a:70:55:db:74:53:
20:89:80:f7:3c:be:cf:cf:c0:9b:97:8d:b6:a3:39:0c:20:64:
27:d6:f5:90:89:94:9c:80:82:5a:c9:bd:12:28:2e:c0:c3:bb:
3f:50:6c:23:9b:f6:91:7c:a9:27:73:ba:33:fa:8e:9a:67:33:
e6:96:17:54:88:0a:55:08:1e:3a:aa:75:b8:95:1b:ec:7b:10:
69:b2:3f:51:c6:6e:8b:9d:e9:48:3a:08:6d:13:83:94:73:8a:
54:15:90:44:3d:db:80:e7:b1:49:a0:b8:92:c7:af:8f:eb:36:
33:10:53:94:56:6c:b8:26:7e:c2:25:72:eb:62:74:a0:da:e4:
e6:b1:04:1d:c1:6a:66:11:10:0d:bc:ef:bf:42:9e:e4:18:0e:
4c:c8:38:a2:c4:4c:0a:5b:45:a1:c9:cd:ab:b8:89:94:eb:a5:
56:17:bf:6d:68:aa:6b:8d:cd:6c:93:8f:6a:66:18:18:49:e4:
11:6b:93:2b:ea:b3:b2:f6:19:d3:39:d2:87:09:8b:84:bc:30:
de:4c:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:39 2025 by rpki-client