Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: S4f87fkuObaPZvijM3fqc9neehcp/qYYSmZDPe0cFsA=
Subject key identifier: 48:33:CF:BD:DF:23:F8:0F:8A:6F:07:89:D1:D3:7E:94:91:63:E1:8C
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 019A2EC4A3238254C13FD28054F7F5448F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 167A
Signing time: Wed 29 Oct 2025 07:00:30 +0000
Manifest this update: Wed 29 Oct 2025 07:00:30 +0000
Manifest next update: Thu 30 Oct 2025 07:00:30 +0000
Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: rgm4f7wP8azaC4eenNpR6aTYXhorznzs9lSUULol5/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:c4:a3:23:82:54:c1:3f:d2:80:54:f7:f5:44:8f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Oct 29 07:00:30 2025 GMT
Not After : Oct 30 07:00:30 2025 GMT
Subject: CN=4833cfbddf23f80f8a6f0789d1d37e949163e18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:be:7e:90:b7:a6:76:b0:ff:f8:e9:c0:d7:
10:bd:40:40:37:42:56:71:71:41:19:ab:74:a5:bc:
ec:96:14:b5:57:df:52:f7:27:5e:bd:cb:98:30:06:
cb:8a:b2:52:eb:48:24:eb:20:21:30:de:c4:87:a0:
31:d6:5b:27:b0:53:3a:5e:31:87:58:df:09:f5:47:
28:39:7e:53:dc:79:07:30:04:22:af:de:f3:4b:0e:
0b:68:ac:e0:89:ef:c1:18:c3:1a:b6:50:21:66:74:
52:75:7f:79:fc:6a:e0:fd:7c:e9:00:a4:16:22:e8:
e8:62:f2:7e:c1:f9:d4:e4:13:f1:4d:33:d5:1b:f0:
8f:ff:75:9a:88:44:d5:63:79:ed:b4:08:5c:27:82:
ba:49:dc:45:c6:14:cc:c9:c6:09:54:72:88:47:66:
a1:4f:6a:4b:0c:0e:19:b3:d7:16:4d:8b:b4:e6:8a:
23:72:30:0f:43:39:fa:c0:42:9d:23:52:46:0f:72:
21:1d:09:b6:b0:52:a3:38:22:ce:b8:43:f2:01:7a:
ab:cc:0e:df:f1:cb:f5:51:62:59:90:64:d0:cc:a5:
46:85:cf:ee:c8:74:56:fe:6b:e2:c0:99:4c:ee:f1:
06:f5:4e:84:79:ca:dd:da:10:56:d7:92:b8:7c:2e:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:CF:BD:DF:23:F8:0F:8A:6F:07:89:D1:D3:7E:94:91:63:E1:8C
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:37:86:cf:7d:3f:d2:9a:c3:cb:45:cb:96:51:db:51:0f:46:
79:eb:6f:53:3c:21:f0:b3:96:e8:0e:65:22:be:dc:43:91:98:
b1:dd:60:37:2c:fe:4c:63:f2:6d:e9:36:87:b6:4a:d4:41:09:
60:df:83:6c:cf:6a:36:37:a2:ea:77:3f:b7:8c:03:5c:2b:8c:
a5:83:40:52:76:8a:55:a5:99:8d:44:7d:3d:9d:43:20:19:58:
c6:46:be:00:0f:59:f1:6d:d7:a9:37:91:7c:08:6e:03:e8:13:
1e:48:13:59:cd:60:f5:a7:2e:02:38:d6:6e:02:b4:a2:3a:71:
ab:cc:46:53:ae:16:ed:06:1b:8e:ad:b3:f9:68:17:fc:e0:bd:
1d:9b:91:a2:cf:b4:fa:b9:30:09:2b:f2:2a:6b:c9:ac:7f:a8:
5f:69:ed:f5:6d:3e:60:d0:f8:9a:be:aa:1a:d3:dc:47:1b:e9:
85:c8:80:3f:5d:93:24:f7:f7:eb:33:3e:dd:46:33:4b:56:8d:
7d:18:0c:3f:59:0f:83:10:d2:d6:50:19:80:73:e2:69:8f:e0:
5b:0e:3e:f4:07:be:78:bf:9c:e3:41:b0:53:56:0f:dc:3c:1c:
03:af:2f:1e:3d:9a:31:92:0e:28:01:6d:b6:3c:ba:23:34:12:
5b:2e:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:39:55 2025 by rpki-client