Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: TJDfHtzHT4WHlYCDqJwEd8zvsnp7DLFNi2qhCup8nng=
Subject key identifier: 04:7A:43:12:37:1D:20:CC:7E:FD:2D:A1:02:CA:02:62:65:6D:6C:2A
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019A725CC75B903870DD4E974CB0CFC493EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: 7M/90m9kKA70iOcI3u98LnTZIJNwoqYzwAsrPtjXw0w=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c7:5b:90:38:70:dd:4e:97:4c:b0:cf:c4:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=047a4312371d20cc7efd2da102ca0262656d6c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:2e:53:f1:77:35:82:91:87:52:24:2d:c2:
5a:6a:24:e1:42:99:bc:71:ac:53:cd:57:98:56:57:
7b:5c:a9:cd:71:9b:7e:03:d3:07:f6:ed:51:ba:7d:
cf:34:54:6c:ce:a2:83:54:af:e5:97:4f:bc:ad:e3:
b7:c4:4e:82:b5:45:75:14:e5:de:06:a9:5b:2c:94:
6c:44:ac:8a:4d:43:5a:2b:a0:f2:38:45:ed:a5:28:
34:74:3f:0e:c1:b4:60:27:60:22:d7:5d:d3:57:03:
4d:41:c2:e4:4f:37:28:df:12:06:4e:e2:6d:95:d0:
e1:4a:30:10:23:23:bc:58:54:e5:98:fd:34:a6:70:
5a:53:9e:85:db:a5:27:ff:87:c2:39:d8:48:4a:c4:
73:e6:a6:42:c0:49:1e:43:c4:10:dd:72:2c:2a:0d:
a7:a6:a4:4b:f8:aa:e1:9d:76:c4:59:78:3d:2f:92:
81:61:18:ef:c7:eb:6d:36:e5:ad:bc:00:ff:00:f4:
5c:13:a5:a5:c0:88:4d:b3:29:89:a2:d1:03:43:12:
21:7a:05:80:89:9e:f8:7c:73:1c:3f:3a:fc:e3:c2:
e8:78:76:49:0f:20:b4:23:e0:98:29:3a:81:b5:80:
58:e4:64:c3:c5:b0:90:41:7c:85:cb:32:24:03:1d:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:43:12:37:1D:20:CC:7E:FD:2D:A1:02:CA:02:62:65:6D:6C:2A
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:43:09:6f:a6:25:e2:4b:d4:f1:f2:66:ab:4b:03:0a:6b:19:
2a:d5:17:6b:4b:07:af:fa:c4:15:a1:bb:1a:f9:09:ee:81:55:
3b:3b:93:68:cd:4e:48:7b:6d:8e:73:22:3d:eb:f8:6d:c9:ae:
c5:97:a8:53:21:bb:ba:bb:4b:68:f4:f0:37:7f:31:03:bf:c0:
a3:3a:ca:8b:82:d9:b0:4f:fe:9e:00:4f:e5:6d:26:b6:22:f0:
be:f1:12:73:a6:87:1b:80:b5:a4:b1:ae:8f:e2:74:a2:32:24:
a6:08:6d:a8:29:3d:ed:46:5d:83:68:d7:47:18:40:83:cc:33:
23:25:15:57:bb:70:4a:63:42:df:b9:3d:eb:4b:0e:b8:ed:3e:
96:bc:ec:a4:03:8e:fe:de:c2:5a:59:3c:85:e8:fc:ae:90:14:
90:01:7d:b3:5e:e1:15:87:20:7b:16:1b:8c:31:27:63:9a:28:
cf:28:c6:03:f1:c4:ca:d2:10:2e:04:49:87:19:2b:39:60:d3:
e9:4d:56:4e:72:42:16:36:8e:c9:66:c5:4e:e5:b0:f2:c6:df:
21:2e:43:2a:43:21:d0:04:9c:65:3f:1e:45:7e:4c:d7:8f:08:
fb:50:fb:29:dc:50:90:00:06:ec:fb:3d:31:6d:47:8c:48:bb:
0b:85:62:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:41 2025 by rpki-client