Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: So9Z95n2KcJppAI2RTpznqzJjC0RGn14Mcy9xNQcJes=
Subject key identifier: 63:EA:1F:25:98:F7:3F:B8:29:1E:7D:99:EC:2C:85:BF:A4:9E:13:41
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019A71B8769E778792135A057D5757528D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: HdumN16PLzp+3udGyb1vH5v/eSyLx82gli/fjbs+3mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:76:9e:77:87:92:13:5a:05:7d:57:57:52:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=63ea1f2598f73fb8291e7d99ec2c85bfa49e1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b2:0f:a6:fe:77:c5:81:42:14:96:3b:c4:a4:
3b:a5:3a:3a:6d:39:24:c0:1c:54:7d:9e:88:81:6f:
b2:a2:b1:64:29:e0:0b:bf:db:db:f2:e3:dd:4b:1b:
05:ad:09:3b:99:7f:4c:ef:cf:71:46:e7:ca:bb:59:
29:c1:66:9d:0c:99:58:37:9a:98:3a:22:94:74:5d:
f3:3b:b9:8a:24:2e:91:d2:77:ad:51:5d:7c:81:0c:
13:71:9d:95:4a:b4:d5:cd:d6:1a:06:e1:18:f2:47:
cd:1d:cf:24:9f:60:b0:bf:30:7f:b5:31:c7:6f:e2:
66:20:c1:85:71:96:11:fb:cb:6f:17:ab:f5:36:9c:
48:4c:d8:63:77:31:45:e6:db:f3:ea:c2:32:c9:77:
33:69:96:0f:7b:7d:7e:80:98:d7:c3:3f:a7:0f:81:
e5:59:a7:c4:9f:6f:43:60:2b:af:65:77:ac:60:01:
2b:a1:00:c5:03:e7:fd:a7:78:7a:fe:09:89:ca:2f:
1d:d1:d8:90:eb:b2:23:0a:f8:b0:9b:7f:40:58:91:
07:75:8c:b9:86:cf:71:65:05:0c:bc:46:d4:b6:f1:
1a:d5:7a:a6:be:72:4d:b9:5c:70:06:5d:10:1d:64:
c8:9f:1f:49:1f:55:63:4c:e7:aa:da:8c:25:8d:17:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:1F:25:98:F7:3F:B8:29:1E:7D:99:EC:2C:85:BF:A4:9E:13:41
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e5:3f:5b:63:6e:8d:b9:7e:49:1d:e3:01:fe:56:1b:70:29:
86:68:4f:74:08:e5:76:e9:21:16:a3:fa:41:46:8f:82:8d:79:
22:ca:31:96:d2:c5:9d:07:c2:f4:35:11:41:9f:f8:68:d4:92:
b1:4a:c0:fc:0a:0d:4c:a3:98:9e:aa:a8:02:ba:96:56:ba:1b:
ac:6a:29:f0:be:5a:12:6d:a5:a4:d7:72:a3:6d:02:8a:74:86:
47:73:c5:7d:e2:5e:1d:94:27:91:e2:b9:0c:43:08:b0:7e:f8:
69:9d:57:62:8d:d2:5c:0b:aa:74:30:d1:81:5d:d0:20:59:27:
16:27:3c:af:0c:1c:0b:15:6c:05:68:ff:45:92:86:0c:e0:65:
b2:16:46:28:20:83:b3:46:43:c2:a2:8f:64:2e:56:fb:24:71:
8d:90:e6:0f:dc:cd:58:3f:91:b3:3d:88:61:b8:c2:32:92:09:
bf:f7:bb:61:e8:e2:08:c9:24:d7:64:05:4a:6c:7b:4a:2c:c5:
b9:eb:ba:f0:ad:e0:59:61:e1:7e:7d:26:4f:f8:b7:17:04:06:
91:af:35:af:f5:6e:e2:7c:d5:dd:1f:f6:92:ac:64:7e:6c:8b:
20:8d:b0:4b:c3:fd:12:48:85:9f:72:08:68:bf:55:a2:b4:0a:
18:8f:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client