Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: A/Nd34Gg4aTOQMPyA1v5C4kYqYdBMn/UP20G04+UhmA=
Subject key identifier: 24:D1:48:BA:3F:F1:14:70:7C:6F:B5:24:51:1C:28:3C:D5:0C:DD:8E
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019A711352B7230B2770CA034B919AE4E28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: GhBKc1c04qleKt2u098hyCV1/i53iDbsL9G4nMUiuAI=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:52:b7:23:0b:27:70:ca:03:4b:91:9a:e4:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=24d148ba3ff114707c6fb524511c283cd50cdd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:8f:a0:f4:e3:7e:8e:ac:2e:f9:e9:f0:5d:
1a:15:ad:b1:f4:f2:19:cf:55:0a:5f:ba:42:94:97:
74:8d:ba:9d:13:64:53:04:7c:5c:59:19:06:b3:7d:
84:2b:4b:03:44:a7:fa:bb:1e:44:01:7d:31:a9:09:
af:30:bf:bc:5e:7a:01:bc:2d:09:79:ff:72:63:8d:
a6:3d:ea:00:dd:d3:fe:11:59:7d:95:5a:3b:18:73:
3c:f9:50:be:4e:60:7e:e2:ab:37:8d:b2:05:b8:a2:
e4:f7:18:69:7a:7b:8d:25:12:b8:79:31:f3:b5:27:
53:94:1e:b3:94:db:6c:09:34:c0:47:eb:ab:b2:4a:
5d:00:ab:2c:8e:30:30:bd:a5:0c:4b:72:43:21:de:
66:80:8d:29:71:d1:29:6b:80:b7:a8:ee:65:82:75:
c4:d1:3c:63:a1:d4:35:67:1c:38:89:d7:66:03:02:
f9:c9:3e:5a:4c:1b:c5:0d:f9:f3:0e:c8:ad:a5:11:
3d:46:f6:8b:00:6e:7e:71:b6:64:03:e2:03:83:5d:
51:f3:ec:77:e0:45:c7:9c:c4:49:3d:96:7a:d5:f8:
b5:b3:76:20:05:16:c4:8c:b8:cf:76:29:c9:3d:f7:
df:1f:2b:25:fd:c3:14:7b:0f:71:0f:0d:5c:7f:1b:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:48:BA:3F:F1:14:70:7C:6F:B5:24:51:1C:28:3C:D5:0C:DD:8E
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:12:98:31:c2:99:d6:4b:5d:3e:a9:86:1f:c8:e1:d2:a7:
9f:c4:1f:87:7c:8b:37:b2:e4:2e:6d:a6:33:bb:f7:d2:8b:b2:
36:02:3c:0e:20:62:76:b5:95:f7:88:9b:7d:89:3e:33:a2:ad:
0c:f3:d5:c7:24:ac:b1:be:2a:ec:fb:53:ee:4e:74:e4:45:63:
59:74:a8:bc:36:4a:c8:f7:c0:12:dd:d9:81:af:2c:1f:34:37:
13:ce:9d:2e:fc:67:fe:3c:7f:1c:3c:dd:39:15:8f:19:4a:bb:
bf:d5:32:d4:ef:76:e4:64:d5:79:f5:a7:03:cf:f0:04:44:69:
69:ec:c9:3b:5e:82:be:5f:83:c3:7d:6e:8b:e1:b3:ae:94:62:
f7:7a:9c:73:93:eb:ed:bb:bf:47:58:7c:81:70:00:ce:ba:7e:
ef:ee:46:2e:d5:a9:5a:19:e6:f2:49:94:52:20:8f:30:be:50:
83:95:02:e3:f1:61:73:e9:20:c4:fc:8b:0d:67:45:09:7d:ae:
26:ff:91:39:cb:19:de:b8:55:f9:ce:15:84:18:1a:63:23:de:
bf:d9:9b:4d:69:9f:05:15:c1:34:2d:da:04:a6:cc:5d:5d:78:
62:bf:00:7c:af:7c:00:fe:3a:c0:af:cc:d6:d7:bc:68:52:e4:
70:68:a2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client