Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File: EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier: DE8JyxJiAAKyAj6NUjSj9wPXQHGJ0wHQ/UQutWIh0xs=
Subject key identifier: 38:4C:B2:B4:7F:BD:6A:9B:53:FA:3D:BE:67:FA:C3:FA:91:7D:9B:B3
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 019A7226099729896F266808A8ADA75D3FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: 5R1iDQt_jpAs4gRTjYIiTCijoFA.roa (hash: mmkAQLGE8LmgwjT34GOkgBAsVgXVqkU9ibiVLrTA0k8=)
2: 7Faq0zePkBZuO_C0WOkycepFjpc.roa (hash: a+Cb4RggiDeAr7Egu5HSD0OTK4+4eHJXr3k92kT+Pic=)
3: 7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa (hash: SFMUBbdICCjMdnT7DNHSEy0Mk5ykN9qWuGlT6EQECgU=)
4: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: ixPHePTf4Y0NnRIUCeIsblVV3eEAfrULciVH8gjGmY8=)
5: MeH4-k2OFjGN557s0Yu0tYWPxmg.roa (hash: MOhIHpA/NwdkOdOgWKuaCMarKZ7JqUMahtGZ4rfniHg=)
6: b15ntJ7HPmGOS4jgF4tCkINYtWM.roa (hash: COLo/VUjwKkooWaLaizaYaP2W19lhe7zL+POsW4XWdk=)
7: fzsp7PHSzmWVIn8yVOXQa_7FmKQ.roa (hash: SkYI08EYzD7GCVvQI07IBr+EWXXpCIcicBxWwCpdN4s=)
8: mpkBzz7TW-l1lBrQvBdbHkUYL5Y.roa (hash: DwjUpO/wsb0y0xDCKmYSdLKwmlXvcw+wJMGNkKGcaNs=)
9: yNFBmYXB0TSeMX21aqfi5zgqFSM.roa (hash: v5WVhwm3HDfxqbcn6pfOpvMvcRHTwMwjG/288XsWT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:09:97:29:89:6f:26:68:08:a8:ad:a7:5d:3f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=384cb2b47fbd6a9b53fa3dbe67fac3fa917d9bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:3c:d3:59:60:50:12:84:07:bc:7c:5e:94:
82:76:cc:85:d5:90:50:8f:a7:ce:bd:a7:65:6c:d0:
7a:26:63:d5:1b:a0:0e:02:da:ee:fb:89:1c:e8:ea:
a6:37:08:22:0c:0a:fb:f4:74:14:50:1d:5a:fe:a9:
9a:00:d8:32:a2:e8:4e:55:00:d4:e8:c4:08:59:f4:
4e:1e:75:f8:1f:38:36:63:0c:e3:3b:e8:a7:7a:0a:
8d:12:ec:94:80:86:a8:73:2e:b0:b8:8e:ab:54:17:
4d:4e:89:37:e7:f5:dc:d2:24:21:09:17:58:86:b2:
82:98:5f:8a:1f:36:ad:fe:4e:53:d7:bf:58:a9:9b:
ab:87:f2:68:4e:98:65:9a:d7:0e:ee:e7:40:a7:df:
09:df:32:bd:49:99:ad:88:90:1f:d0:ae:94:df:d1:
ad:b5:35:4e:c1:06:4c:e5:12:5a:50:b9:e9:4d:e3:
a4:67:92:6f:43:3d:f4:db:2e:19:00:c3:8c:28:0d:
5e:09:ef:3d:7b:3c:c7:45:37:76:6e:9e:25:92:1e:
a9:c1:12:66:9e:06:d0:74:63:86:53:17:52:72:10:
66:fd:44:9d:a7:19:11:47:f1:b1:44:a1:11:36:db:
89:4e:79:35:ca:c1:0e:f6:52:82:d8:c7:dd:e0:40:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:B2:B4:7F:BD:6A:9B:53:FA:3D:BE:67:FA:C3:FA:91:7D:9B:B3
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:de:cb:e7:d3:fa:4e:21:4c:a9:d6:18:b9:40:79:22:ce:24:
2d:d9:4c:74:1e:06:be:94:b2:fd:1d:e5:02:6c:89:ce:e8:aa:
39:da:cc:7c:d1:5d:1f:92:ba:c1:87:7c:c5:64:a6:65:7f:2e:
0f:97:ca:06:40:a2:08:0d:a3:e2:70:0c:74:34:f1:08:b9:aa:
81:57:5f:7c:fd:cd:80:37:9b:a8:1c:dc:87:e1:e1:9e:e6:0b:
2a:be:46:01:07:0e:34:f9:02:7e:67:e4:2d:41:25:54:24:1e:
b1:a9:2f:de:19:b8:1a:0f:f5:98:d8:ec:67:95:4c:b1:39:f0:
7a:76:b8:57:e5:04:90:6e:4f:29:53:05:85:62:79:a6:bc:12:
fd:ca:ff:3e:d9:fe:d5:be:e1:51:5d:6a:c4:ab:1d:74:ec:58:
02:93:c7:25:61:7d:75:22:80:ad:01:f5:3c:16:cd:9b:5f:51:
6d:42:d9:3a:4a:9f:3d:c6:c5:72:00:7f:22:2f:c9:f1:85:ef:
ad:67:57:7a:4d:f8:8c:29:79:ff:c5:80:d0:8c:59:c4:12:1c:
4c:5f:47:30:22:d5:ac:60:d4:60:e0:19:06:30:16:45:f7:d5:
8e:8b:c1:df:e1:c1:aa:ec:e8:a9:39:64:2e:78:e8:60:19:c9:
3c:2e:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:46 2025 by rpki-client