Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: r+Y/GT8jcgdsX/nkxW8LVjr2EoB7PaCARUMQuB49qj8=
Subject key identifier: 48:9D:AC:7A:B7:24:05:8E:C2:49:A7:04:81:D3:0D:A7:91:42:0B:11
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 019A71EED6847902E4156689F24FA88DDAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: ewIDCKYWegMJAqVQ6rPSHWNRfNkYbfGBChSIvH9VYsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d6:84:79:02:e4:15:66:89:f2:4f:a8:8d:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=489dac7ab724058ec249a70481d30da791420b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:3c:30:ae:9f:62:36:64:8a:25:a7:1b:80:
79:5f:f5:d7:a9:39:84:79:4b:64:c5:10:79:1e:4e:
67:98:6f:b5:2d:30:5b:20:da:cc:9d:a9:23:da:55:
5a:6a:c7:ab:d6:52:f4:d0:6d:69:5f:6d:59:71:72:
dc:e6:05:d3:1b:ed:6e:d7:10:00:33:1d:50:24:68:
a5:f2:ec:5d:6b:f6:59:23:69:ad:7d:e2:a1:a4:ff:
7b:c6:74:71:1f:de:7c:31:da:c1:13:18:f9:c2:d5:
83:d1:e7:90:98:5d:05:25:c1:a9:c1:6b:32:5e:03:
f4:05:15:35:21:e1:32:e9:89:2a:d6:bb:da:e7:ac:
5e:c1:ad:79:7e:ce:66:42:91:52:eb:30:fc:e3:58:
b8:e1:6c:13:54:0c:17:fa:6d:97:7d:44:63:57:1a:
1f:e5:e8:52:e4:e4:09:c8:68:17:ca:59:d6:bd:b4:
20:df:61:ad:d6:17:49:3d:64:8d:f6:a1:03:a8:86:
9b:61:09:7d:f2:ff:de:7e:70:84:2e:b7:1b:40:18:
5a:ca:ff:15:84:df:41:0c:84:59:00:c9:87:8a:4b:
06:72:50:a6:07:89:b0:9a:aa:ee:41:6f:67:56:4b:
9c:1f:8b:e8:f2:ce:9c:8d:4e:ea:46:6b:41:ea:45:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:AC:7A:B7:24:05:8E:C2:49:A7:04:81:D3:0D:A7:91:42:0B:11
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:82:e1:d3:c4:91:fd:59:d7:74:63:ce:0f:f5:05:44:48:0a:
79:f3:53:a1:90:95:2c:c3:59:20:06:c4:76:d4:9d:a9:ae:e1:
6a:d8:fe:c9:33:34:0a:6e:42:2f:17:8d:45:24:da:da:e5:b0:
c8:b2:f1:0b:3d:37:bb:e8:e1:5f:39:1f:4c:84:98:f5:e0:09:
c2:3a:3d:18:b9:df:9e:89:bd:ca:bf:ea:09:c6:70:d7:80:c3:
6b:fb:94:58:a3:47:96:3c:a5:02:45:9a:77:43:48:1a:cd:e3:
8e:7d:10:6c:ac:23:f2:00:eb:39:55:83:a5:35:47:81:a1:a5:
af:01:01:6d:ad:a2:5d:da:9b:92:d1:11:09:4a:71:48:a6:8b:
ff:03:0b:7f:7a:70:16:07:32:a2:92:56:76:a6:ac:da:3a:85:
34:49:5a:29:44:04:e7:d7:ec:8b:c5:71:fe:e9:f4:07:2d:45:
d3:9f:7e:dc:b9:f4:40:92:50:d9:c3:d3:76:ca:70:af:63:5d:
c1:b4:08:df:f7:22:76:35:21:30:c1:36:52:83:c4:35:e7:9a:
29:96:c6:a1:8a:f3:1a:3a:f8:8b:13:10:6f:4e:9e:95:ec:6d:
39:eb:e1:ec:3c:ef:38:6a:83:a4:c5:d4:da:75:7d:10:3b:7d:
5d:41:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:36 2025 by rpki-client