Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier: Ft5Dxe7P4LL/5n9g4sIcuw5KXH9HO/A7LGuk9V3Stl4=
Subject key identifier: 2A:DB:0B:E8:EE:16:0C:63:7F:EC:1B:80:EE:6C:74:2A:B0:59:6A:45
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 019A7293F269EF0844431B95F42C63944007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=)
2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: e7Aqz7alFxQlPjd+WrKF7dY1fhvdj6L9IYuLmmPq7i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f2:69:ef:08:44:43:1b:95:f4:2c:63:94:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=2adb0be8ee160c637fec1b80ee6c742ab0596a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:a0:6f:7c:7a:3f:76:49:57:d5:32:79:62:
55:fc:74:ff:7f:37:5b:cb:47:b3:f4:07:d1:4a:8f:
5c:1b:30:b1:59:52:08:b3:13:b0:18:75:b9:ba:0e:
b7:1a:c9:bd:69:31:19:25:89:6c:cb:00:ef:92:18:
5b:b0:d4:ee:4c:f4:91:d1:90:32:a4:4e:0b:97:6b:
4f:f4:f1:04:15:f3:82:c6:12:34:c3:aa:c5:24:1e:
c5:fb:b5:56:71:c5:d5:50:b3:ff:65:75:e3:d3:ea:
25:cb:4b:aa:e0:69:fa:a9:2d:fb:d7:2f:79:d4:67:
3e:13:8a:d5:8c:dd:46:5e:1d:15:af:57:b2:1f:79:
61:b2:a5:0b:f9:36:34:42:6b:93:47:4e:16:82:b5:
9a:44:4c:7b:52:04:c5:83:c7:38:4b:bb:3d:96:4c:
40:a2:9f:b7:83:6f:c4:89:59:0f:b3:96:fe:ec:b5:
5d:b7:03:27:9e:5f:e2:b7:7b:dc:ca:7b:97:0b:08:
1b:40:e2:cf:fd:a6:ca:13:f2:8e:0f:fe:84:68:6b:
1f:8b:1e:38:07:08:41:95:90:71:b3:cb:df:9d:92:
8d:42:b4:41:26:ab:74:9c:d5:ca:1f:2b:af:fd:2c:
02:f7:74:7f:fe:cb:63:b0:7f:4f:b1:1c:9a:a4:99:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DB:0B:E8:EE:16:0C:63:7F:EC:1B:80:EE:6C:74:2A:B0:59:6A:45
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ac:76:8d:1a:a7:6f:78:c7:e6:f4:10:29:b4:b4:10:38:91:
5f:fb:b6:3a:1b:fc:cc:73:c9:77:9d:06:d1:d0:26:8e:80:01:
5f:92:3e:cb:95:74:f8:5c:40:cd:86:16:70:71:dd:48:cc:23:
4d:93:7e:24:62:69:28:db:ff:11:ee:eb:2d:3f:56:ad:2f:e0:
c6:f3:a4:6a:f9:64:2c:bc:3a:ba:5c:bc:2d:72:1d:e7:a7:3e:
40:cb:b8:49:4e:47:68:c2:03:85:71:5f:14:cd:9c:80:f2:df:
5d:51:71:8a:0d:a5:12:bc:bf:07:b6:fa:91:e3:da:ba:47:bd:
a2:61:25:d5:d3:52:b5:78:47:e0:bf:d8:32:08:7b:25:90:01:
2c:80:d5:3e:7f:3b:30:19:92:80:65:da:db:80:18:6f:33:46:
48:da:43:62:3c:99:6c:32:76:4c:e8:b4:86:85:ce:4d:bf:81:
1e:c9:f3:d3:35:fd:ad:41:11:d7:d6:f5:e2:94:c1:4b:c1:26:
0d:9d:dc:e8:1c:78:c3:ce:3a:7d:3b:e8:da:5b:b7:31:77:61:
f1:a6:15:ea:78:58:18:f3:66:bd:29:9e:a3:6e:cb:5e:ad:80:
58:de:f7:4a:e8:08:79:55:ca:fd:54:e0:95:e5:7b:e6:8b:cb:
09:40:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:26 2025 by rpki-client