Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier: igutLCmMadROA2yVtICOtGwXQcnzS3lmZimthKoLMVk=
Subject key identifier: 4A:92:62:79:BA:65:7C:5F:1F:FF:6C:8B:49:E0:C8:10:8B:87:73:9A
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial: 019A2E21373505CEA93B9733B0689BC8FAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number: 0D17
Signing time: Wed 29 Oct 2025 04:02:00 +0000
Manifest this update: Wed 29 Oct 2025 04:02:00 +0000
Manifest next update: Thu 30 Oct 2025 04:02:00 +0000
Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: tIHkVdiEmHVjvCekulyvjDROzn47JTnNHPA4kzHgoV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:21:37:35:05:ce:a9:3b:97:33:b0:68:9b:c8:fa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
Validity
Not Before: Oct 29 04:02:00 2025 GMT
Not After : Oct 30 04:02:00 2025 GMT
Subject: CN=4a926279ba657c5f1fff6c8b49e0c8108b87739a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:cc:34:81:09:d2:f5:51:38:32:65:b6:71:
c8:0d:1d:92:a6:08:bd:18:90:09:9a:dc:99:0b:71:
36:6c:5c:e7:c9:1c:aa:ec:50:ed:d5:de:71:1e:c9:
41:68:d6:db:d4:b2:f0:aa:9d:64:08:23:00:a1:6b:
23:93:ce:df:92:17:b7:56:ac:3f:38:41:74:58:c4:
fe:96:3d:57:e3:66:95:18:0d:01:fe:b9:24:52:f3:
94:16:25:f8:d3:40:bc:4a:ee:94:64:4a:d1:b2:fa:
36:b7:d8:30:b9:6e:f1:70:d9:a6:b1:84:36:21:cb:
1e:b2:b4:2f:09:34:f2:9a:5f:fd:83:2f:b9:be:68:
9e:db:ba:bf:d8:ff:8b:e6:cb:3c:76:e9:2c:8e:89:
ae:8b:04:b5:56:60:86:a3:d4:0b:22:73:6f:57:10:
29:f7:9a:4f:2c:2e:32:c8:6a:d6:ee:78:44:d5:bb:
ce:c4:24:bd:7e:ec:c2:f3:dd:eb:50:6e:22:e3:4e:
5e:92:60:46:69:90:1d:c2:b9:60:75:cf:ca:e5:9c:
9f:f6:85:46:87:bd:e0:23:73:fb:65:3f:8c:ae:3d:
d0:cb:9e:e7:28:66:c6:ea:a1:7f:93:87:13:9f:bf:
6c:ef:aa:dd:82:c1:e7:89:75:88:f2:df:77:5d:76:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:62:79:BA:65:7C:5F:1F:FF:6C:8B:49:E0:C8:10:8B:87:73:9A
X509v3 Authority Key Identifier:
keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:69:fc:92:69:80:5b:e8:a5:b1:db:7a:df:82:ac:64:b2:97:
22:b4:39:a1:f5:37:aa:95:c0:7c:e4:65:54:e2:ec:e1:43:2b:
81:b7:ac:2a:dc:a3:cb:fa:53:94:d6:13:56:1e:b0:ea:1f:df:
9b:77:76:b3:3b:20:c9:51:8a:80:c1:8d:0f:7c:4b:fa:c2:43:
fc:bd:aa:a4:21:27:bd:ee:ff:06:3d:6b:30:34:71:9b:0f:7c:
3d:01:93:3e:f4:b4:a1:36:fe:01:d8:af:df:29:a3:fc:5a:3b:
3c:a0:e1:e5:93:6d:45:36:28:3f:10:f9:5c:96:44:da:e7:b2:
10:98:e7:5e:96:40:9c:3f:f4:29:83:8f:8d:fc:fa:f1:68:af:
31:e8:b0:d8:90:77:cc:0c:ba:1c:07:3c:27:68:b3:92:e4:05:
53:4c:29:fa:1e:df:64:1f:b2:0f:42:dc:9b:eb:ea:37:7e:6b:
22:28:b6:75:4c:2d:10:45:45:b5:d7:fb:06:fe:0e:87:98:fc:
43:9d:08:b8:bd:e0:28:2b:11:11:d9:68:d2:75:b9:10:20:6c:
91:d2:87:6c:8d:2d:f9:66:4c:ed:5a:c8:c7:69:f7:d0:ce:5b:
d0:51:49:72:9e:d3:9e:99:1b:47:b6:0b:2b:20:30:fe:c0:02:
ed:56:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:20:29 2025 by rpki-client