Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier: W3jWa157sJUc6Om6rQAZQnM8wi29Shutmb8Or5Dhcio=
Subject key identifier: 6C:3C:1F:80:22:34:A6:B4:61:49:5C:7D:CE:0D:FB:4E:6B:91:D7:EA
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial: 019A7226333A10D54E08747067F2F92AFF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=)
2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: llfSH/4M7/pY2ptsayfb+eMA91cTiDfhAfJB/PI9nAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:33:3a:10:d5:4e:08:74:70:67:f2:f9:2a:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=6c3c1f802234a6b461495c7dce0dfb4e6b91d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:1d:4a:35:1c:7e:02:ea:1c:3d:b4:43:db:
6c:9c:c4:58:a9:5c:5c:47:98:2c:7c:5c:14:40:38:
b4:fe:74:9c:3a:3f:ca:c8:34:f6:a5:64:fd:27:45:
44:eb:24:05:10:63:e7:86:88:85:3d:5d:97:40:8d:
24:3c:e3:e2:4f:14:fb:94:08:40:c2:a4:b3:aa:51:
1f:5e:61:70:0b:0d:bf:a5:05:c0:f7:e2:69:86:dd:
6f:64:c5:22:4e:ac:2c:8a:f0:c1:54:e4:b8:d8:d9:
ee:81:c0:45:0b:44:62:23:8d:c1:72:d4:33:c2:33:
b1:8b:da:a5:fd:36:0f:92:04:28:e4:02:d5:2c:1c:
e2:e8:c8:ca:ee:56:fe:3f:1e:a8:cb:77:1e:5c:62:
26:9d:98:09:19:86:92:0f:28:98:df:68:db:d4:41:
dd:0d:02:7d:07:e7:de:24:81:29:f4:15:b6:37:c3:
aa:eb:96:fb:5f:54:15:10:44:d7:ca:d8:66:85:24:
5e:75:73:0f:63:a3:e6:54:a2:62:a5:80:ca:81:44:
d4:e0:30:32:0a:11:3f:8f:79:67:3f:7c:ce:ce:05:
5f:74:a3:f1:b2:88:2c:cd:9e:e8:e3:2e:54:c8:c4:
b3:bc:61:74:b0:d4:bb:f9:79:96:a0:96:02:12:c5:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:1F:80:22:34:A6:B4:61:49:5C:7D:CE:0D:FB:4E:6B:91:D7:EA
X509v3 Authority Key Identifier:
keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:70:71:ed:a9:e4:45:63:d3:c4:db:91:d5:ec:06:a3:4b:9b:
23:d7:b9:b7:96:68:02:a2:1c:77:79:68:09:9e:48:fd:ac:4b:
67:4d:e7:9b:08:c6:55:3e:17:b1:81:4e:31:6d:dc:5b:ea:e7:
62:8b:8b:50:38:e4:f9:db:19:44:02:69:6b:4d:1d:ed:6e:04:
51:b3:9e:ac:d7:64:f3:f4:bf:74:be:02:c3:72:0f:6f:5f:7c:
8c:07:20:92:16:1b:ef:9c:c2:fb:bd:09:ce:3b:32:a4:88:0a:
d8:df:bf:a2:d7:9e:53:1f:cc:f8:12:96:fc:eb:89:08:e5:29:
da:8b:8e:cc:f5:6e:88:40:ae:97:f1:9c:ba:cb:ef:92:93:15:
37:f8:f7:aa:cb:86:7e:da:9d:0a:50:69:9d:e9:e2:d4:a0:87:
74:47:14:07:d6:80:d6:c2:c1:09:4b:4d:ac:c8:e4:ea:9b:3d:
c8:7e:fc:02:d8:97:02:15:e2:5f:33:32:f2:9d:de:76:0b:32:
54:39:46:1b:81:6a:ab:36:7a:50:e0:77:78:ac:d3:7f:79:82:
cb:49:c3:bd:55:71:2d:5a:b4:12:54:ed:e6:47:5e:b8:fb:32:
b5:d5:61:21:5d:dd:cd:3f:31:95:d1:ea:18:f5:d0:32:ef:db:
e2:5d:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client