Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier: um5AyKrFZsMnZlO47+/vaHlWNVwXN2qrlFDeoeHIq40=
Subject key identifier: 23:19:B8:42:20:DE:C0:FB:45:23:89:62:7E:5E:AE:1A:91:84:70:0C
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial: 019A4E4F74EDAAD6540FA6AAFD45BF3EE469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:21 +0000
Manifest this update: Tue 04 Nov 2025 10:00:21 +0000
Manifest next update: Wed 05 Nov 2025 10:00:21 +0000
Files and hashes: 1: 4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa (hash: evvo6uHGq7kJP+ZPZuimN/U9/7Mem374PjQw1Zrl8z0=)
2: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: U1CWPE4ZHdLcYExfiPL6o2vyoePTck+p9KRjdLkvK3U=)
3: WaCtt5UwOfSFSXfG87VM_1liKlY.roa (hash: Xrq/MM8eS57x76XViCgsXlzExdGspNWHwUxtlx/0OhI=)
4: etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa (hash: GKbNpLwYF4j7naon/02XUN5BlSA6xDoZ+15FoWpR1As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:74:ed:aa:d6:54:0f:a6:aa:fd:45:bf:3e:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Validity
Not Before: Nov 4 10:00:21 2025 GMT
Not After : Nov 5 10:00:21 2025 GMT
Subject: CN=2319b84220dec0fb452389627e5eae1a9184700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:0d:31:0b:0f:fd:18:bf:6a:ce:9e:25:54:
09:ab:ba:01:33:51:29:6d:92:07:e3:ea:51:eb:99:
3c:dc:ec:b9:15:78:6c:19:21:67:20:f1:37:a9:61:
ed:98:69:fb:bd:5b:35:d1:9b:c6:44:dc:d1:1d:25:
66:fc:25:9f:98:ec:32:d6:c4:e6:64:58:42:90:1e:
e5:10:8c:02:cc:20:b1:f0:5c:79:75:ab:7d:34:24:
5d:36:a1:77:fa:bd:ad:ff:fb:0f:bc:04:8d:f2:9a:
3a:be:21:3c:38:d2:e1:d6:c3:54:a6:2e:2b:b1:a6:
ab:9a:5e:4e:cf:90:46:cf:89:d6:7d:cf:54:a8:db:
8c:51:8a:1a:f4:33:6a:b4:21:5c:dc:5b:46:3b:4b:
22:b6:07:4e:23:dd:c4:4c:cd:f9:e4:3d:54:2f:48:
fb:98:b0:45:28:b1:d8:21:32:fe:1d:25:c6:42:df:
c1:0b:ea:d3:33:21:85:ec:4f:c6:e7:ef:ea:76:80:
6f:af:fb:68:96:d0:ce:8c:6b:d2:63:8d:21:00:fc:
be:0e:f6:31:7a:fe:3a:44:79:3c:13:97:93:4e:cf:
4f:5b:ca:1e:6b:b7:c9:39:f9:9a:15:b9:91:53:3a:
e6:a1:1f:c3:a0:95:a6:e0:60:6b:3c:d4:49:9f:9b:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:19:B8:42:20:DE:C0:FB:45:23:89:62:7E:5E:AE:1A:91:84:70:0C
X509v3 Authority Key Identifier:
keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5d:ca:4b:e0:96:28:b7:ab:88:fc:22:48:f1:46:a7:4f:96:
8a:b5:c4:f4:13:62:2b:78:df:48:bd:cf:ba:2d:92:d2:52:c5:
ab:e3:a5:5f:07:af:32:21:7d:80:af:86:07:7b:d3:a1:62:41:
5b:e6:1c:38:56:95:b3:ba:15:f7:a7:c4:23:5c:b0:d4:9c:9c:
1b:36:99:e2:94:2d:9a:df:d5:ce:7d:b4:fc:01:4d:b8:b1:cd:
2f:fa:a7:73:71:f0:53:17:43:07:dd:9b:65:d3:d3:4b:45:0d:
45:f8:8e:6e:40:b2:9c:f1:28:4b:c8:0e:c7:11:e4:12:22:67:
74:fc:4b:51:15:d6:df:de:93:f8:6b:d5:d5:93:f0:7f:d6:e9:
12:cf:2c:15:99:fc:2b:3d:11:eb:8b:91:c4:47:ad:06:f9:a2:
fa:0c:22:3d:3f:68:77:03:83:4e:94:92:5c:e4:f8:b6:a5:22:
56:60:91:cb:5a:10:13:59:f6:df:e7:66:3f:0e:97:c8:71:0e:
66:74:0d:5c:db:3a:99:85:8c:72:17:9c:bd:96:23:cf:76:c6:
b0:bd:76:c1:0f:c3:bf:14:4d:39:db:cc:f3:20:81:0a:00:23:
07:77:c3:86:82:fe:15:c5:2b:7a:01:a9:5d:d3:a8:a7:d8:1e:
9a:cc:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:25 2025 by rpki-client