Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: TSkhq9nYXPq3RgxVwyhGy+3OvuUSDYcmuAOV3XSbYCY=
Subject key identifier: FA:09:61:E2:99:95:EF:FD:12:97:91:70:10:6F:0B:9B:0E:EB:9A:CE
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 019A72935B9F50F6CB57D60375ADBB231DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: vYsruXVz759FyWg5orhqnpXhKnlc+atQww7ScIm3dEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5b:9f:50:f6:cb:57:d6:03:75:ad:bb:23:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=fa0961e29995effd12979170106f0b9b0eeb9ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:73:67:a2:69:1e:92:d6:6f:31:11:3e:a3:
c3:9d:13:f8:21:2d:57:a8:02:a2:31:71:f2:a4:4d:
85:67:0a:c3:13:d3:e0:34:89:48:41:39:92:de:51:
3b:8b:19:80:b7:47:b7:83:4e:dd:a0:6d:68:c1:09:
71:89:d0:be:4c:48:ec:34:71:e2:10:d5:f0:26:6e:
02:84:81:15:2c:4c:b3:ff:5e:64:1d:cf:93:5d:a0:
35:06:6d:ca:b0:26:ce:c2:aa:1e:69:40:d1:c1:69:
b0:8b:26:83:72:cf:f1:52:80:cd:6d:c6:1c:98:13:
1f:5d:58:df:1b:b7:13:38:bb:d9:bf:55:a4:a2:4c:
ce:9f:24:da:7c:9a:cc:ba:b8:a9:e3:1c:84:2d:35:
6c:c1:10:d5:29:99:d9:e6:80:4b:db:c7:7e:c1:8a:
9e:43:81:04:77:47:9f:46:57:54:60:77:0a:57:86:
0e:3c:62:68:ad:be:6a:03:4c:1c:1e:13:28:65:8f:
85:19:15:1f:7a:3e:26:6a:f6:d8:77:77:1c:bf:cc:
5d:72:20:82:2e:b4:31:fa:9d:55:57:3d:3b:b3:5d:
3a:ab:b2:6f:f5:e8:77:d8:61:9d:10:95:6a:e0:15:
b7:0e:44:67:0f:51:00:ee:b6:f5:2b:ba:c0:ee:97:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:61:E2:99:95:EF:FD:12:97:91:70:10:6F:0B:9B:0E:EB:9A:CE
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:5f:9b:de:52:5b:6a:ac:40:84:1a:0e:92:7e:ae:c7:a9:
72:23:9a:22:bc:31:69:2d:37:2a:26:30:3e:3e:86:67:88:4c:
7f:fd:3b:ba:e9:eb:ef:c6:f3:4f:c1:43:01:03:5f:a4:5a:c1:
90:66:b3:ee:3a:b4:ca:ec:e5:a6:5d:01:2c:70:1c:41:df:96:
de:77:ea:ef:05:51:8c:aa:86:40:d6:16:e9:e8:80:2b:04:5a:
06:2f:55:30:66:c7:64:a8:e6:1f:24:a3:bb:85:25:7b:43:20:
cd:74:b9:cf:21:8c:99:9a:eb:fc:df:13:cb:04:03:14:5a:43:
d3:02:44:c1:e5:fd:7c:c4:87:fe:37:39:84:65:93:7f:1c:86:
56:8b:ca:36:e4:ce:dd:91:de:bf:e2:4a:23:64:57:58:f6:ca:
8f:d3:a5:a5:64:ed:e1:70:9d:99:43:2e:91:74:47:6d:b7:db:
09:ea:cd:f3:df:9a:a5:e3:4e:10:13:39:c5:3b:73:7f:45:eb:
41:ff:94:4f:09:0d:2f:7c:94:45:86:64:f9:d2:af:76:36:69:
8e:1c:bc:2a:16:40:6d:04:c0:d7:d8:75:37:15:55:b1:bb:a3:
45:84:45:78:39:cb:39:ac:83:b4:41:de:42:cb:01:83:f1:f0:
bb:ef:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:54 2025 by rpki-client