Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: 0gsiS7bhKb+agxntQXNW3BrEbCfiJSBKrMVnzp6wlEQ=
Subject key identifier: 0E:EB:1D:65:FB:79:9E:CD:BA:4D:87:D5:9C:63:0C:13:37:87:E9:28
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 019A72940EA9844AF9F1AC66F010E7353982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 10EB
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: OPqqZ+JCTzmSkWCrjOCrkWmU0xo1QkH2nIhbMxoZywE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0e:a9:84:4a:f9:f1:ac:66:f0:10:e7:35:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=0eeb1d65fb799ecdba4d87d59c630c133787e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:99:42:0f:29:da:44:43:e6:93:c7:02:34:
54:ce:70:b7:37:12:35:04:5d:71:6e:2d:f6:f1:a0:
c1:64:e3:3c:64:a2:6c:40:f8:eb:16:b0:2c:ca:2b:
c6:05:7e:e3:ac:cf:13:50:43:6a:ba:a8:9d:f2:36:
b7:88:43:c8:14:83:7b:b1:79:fd:4d:e8:da:f5:d5:
c8:35:53:66:e0:06:8e:cf:99:f4:3e:8b:2d:0d:df:
e8:65:1f:fb:df:38:17:54:12:7a:2b:f2:a9:fd:49:
60:eb:b8:5a:a6:24:09:33:87:71:42:49:ab:f2:7a:
46:ad:27:4b:13:52:f9:d9:91:b9:74:46:f2:c8:b6:
ea:bd:2f:1b:00:df:cc:f3:c5:00:38:c4:5d:de:8b:
37:28:ed:1e:cd:2b:c8:ea:4b:10:68:9a:aa:a9:2d:
5c:7f:ba:a5:f0:2c:31:7c:dd:ef:13:a8:7a:b9:89:
01:90:5d:79:b5:a4:17:77:f5:fc:0e:26:53:6a:7c:
48:be:12:99:1d:1b:25:75:0c:53:c9:18:17:98:72:
d3:55:7e:9a:7d:e4:26:ff:89:53:e5:20:d9:bc:f1:
d4:ff:b4:7e:e1:89:e0:e3:b9:81:4a:b3:39:f0:fe:
9d:c1:83:be:e3:31:7b:cf:2a:30:fe:b4:ba:b7:44:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:1D:65:FB:79:9E:CD:BA:4D:87:D5:9C:63:0C:13:37:87:E9:28
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:70:e8:2d:8e:53:02:e6:e5:dd:19:4e:1c:70:d9:3c:f4:
0a:0d:d8:cf:57:95:f5:c3:6a:8c:9a:fe:80:26:9a:60:b0:0b:
02:5d:e7:88:71:c0:f4:3f:77:49:6b:ec:36:1d:78:c4:9a:a0:
23:e1:65:b8:3e:51:a9:37:39:f3:a7:5a:3c:f9:35:22:27:87:
4b:fb:b2:de:01:e5:7d:cb:f6:3e:7e:7d:14:8a:1c:36:6c:87:
b7:8b:41:04:6f:44:ce:e8:41:42:17:a0:2d:dc:06:a5:be:82:
ad:bf:88:8b:1b:b9:c4:21:48:02:97:be:fd:69:93:22:65:b6:
78:76:df:50:b8:b3:be:a6:8e:d9:f5:2e:d5:f2:29:0b:7e:03:
0b:82:65:32:1b:f7:a2:f2:6b:84:56:a6:3e:92:72:0c:44:64:
4d:6d:39:39:4a:ab:35:f7:f6:70:c2:94:2d:2e:62:0c:6b:98:
47:cc:86:34:a8:41:41:2e:55:2f:c1:c8:6f:0f:4b:5d:31:65:
3d:b8:9d:2f:f3:86:20:b8:3c:c4:9e:ce:26:5a:be:7f:4c:c8:
85:07:7e:00:d1:7b:2a:55:7a:fa:21:a9:d7:a3:f4:e8:6b:3f:
14:2d:8d:16:fa:db:70:24:48:74:44:b5:bf:be:25:36:ae:20:
51:4c:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:55 2025 by rpki-client