Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: tTSF2PMqneAw+Fq251f3Rwzuksh5bFUtV0eIwZOen+Y=
Subject key identifier: AB:BB:E0:E7:A6:D1:08:A3:E9:99:8B:D0:F3:47:98:0E:6B:84:EB:87
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 019A71B86505AA1529A101553783843A5722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: 3V0xUHuMtBUijqK1xbB7b2WNv1Gafi26Li8DLaLfQ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:65:05:aa:15:29:a1:01:55:37:83:84:3a:57:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=abbbe0e7a6d108a3e9998bd0f347980e6b84eb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:35:69:01:1a:ed:e3:08:75:68:c2:c8:a3:
d4:c4:37:65:d9:5b:50:f0:51:bb:5f:3b:0f:3c:ee:
9d:e6:16:47:37:70:71:c7:52:a0:8c:3f:a2:07:77:
2d:05:aa:06:55:16:f9:f6:ea:96:a5:b1:10:69:b6:
86:66:73:c4:ff:15:ea:b2:26:37:04:ed:69:1d:20:
43:fc:c4:95:f5:3b:a2:09:47:0a:90:60:e2:68:ad:
d4:57:87:59:9c:42:c3:4a:cb:07:d6:e4:c3:92:42:
cd:10:66:ca:5d:8c:1f:df:7d:8a:14:59:4a:cb:c5:
34:3a:c7:d0:76:6d:cc:4a:41:2b:b3:53:d1:5d:8b:
2c:62:9f:15:00:47:b0:19:0f:89:7b:da:96:36:24:
b6:a2:a2:17:da:de:fb:12:56:02:c5:a7:0a:26:1d:
cb:c7:4d:32:4b:b7:1a:0a:bc:20:bc:bd:2e:7a:f5:
ad:70:57:2d:92:1f:29:aa:e1:6e:bc:d4:26:46:37:
12:6e:1b:92:42:a3:3c:2c:50:aa:24:bb:24:9b:09:
06:f4:49:c6:b0:d3:18:84:4d:c1:87:32:dd:90:5b:
89:d9:eb:54:e6:06:3f:03:a4:15:8b:db:63:4f:0a:
9c:f0:e1:ad:10:e7:97:59:2e:d0:2f:b3:57:ac:5b:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:E0:E7:A6:D1:08:A3:E9:99:8B:D0:F3:47:98:0E:6B:84:EB:87
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:90:00:c5:c7:f4:67:76:5b:11:9b:35:1d:55:c7:49:66:
a3:27:5f:1a:15:fe:55:56:58:8b:48:d5:f3:b5:f5:52:db:25:
ec:db:fe:59:6d:57:b5:fa:15:b0:d4:5c:2c:05:8d:8c:83:33:
97:74:32:a5:dd:be:83:1c:15:2b:98:68:29:95:39:11:82:5a:
7a:8b:88:12:cb:8e:43:01:a5:9e:60:5a:4d:8f:0f:2f:87:91:
8a:ef:eb:9d:3a:d8:0c:5e:33:b6:6e:0e:7d:46:7d:02:7e:a4:
e4:0b:0d:a9:bc:c8:2b:24:22:ea:b1:0d:fc:39:9d:b1:32:dd:
6f:30:dd:3d:bb:01:68:bd:00:73:8e:b3:07:d7:c3:4c:be:83:
ec:3f:61:c8:75:62:93:b7:53:55:da:65:cf:54:21:95:6a:3e:
85:bb:a2:be:45:50:8e:11:54:25:b6:1f:b5:2c:57:b2:53:d5:
2e:3e:d4:98:28:bb:9c:f4:85:0b:ff:26:cc:18:ba:6d:e1:7f:
11:0b:a1:91:de:3b:4d:cc:69:08:e7:2a:9e:9e:19:79:88:c3:
98:3e:90:2a:64:e9:21:57:a7:0b:9e:91:06:7f:86:c9:aa:f7:
5d:b3:ce:eb:a3:24:aa:86:89:8b:79:92:14:ca:80:b5:0e:3e:
16:5c:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:54 2025 by rpki-client